Fix it

test-tracking-module.nix

@@ -14,10 +14,18 @@ in
   };
 
   config = {
+    users.users.ghc-test-tracking = {
+      description = "GitLab test tracking service";
+      isSystemUser = true;
+      group = "ghc-test-tracking";
+    };
+    users.groups.ghc-test-tracking = {};
+      
     systemd.services.gitlab-test-tracking = {
       description = "GitLab test tracking service";
       after = [ "postgresql.service" ];
       requires = [ "postgresql.service" ];
+      serviceConfig.User = "ghc-test-tracking";
       script = ''
         ${service}/bin/gitlab-test-tracking-service \
           --gitlab-root=https://gitlab.${config.ghc.rootDomain} \
@@ -26,7 +34,6 @@ in
           --conn-string="postgresql:///ghc_test_tracking"
       '';
       wantedBy = [ "multi-user.target" ];
-      serviceConfig.DynamicUser = true;
     };
   };
 }

triage-module.nix

@@ -14,16 +14,8 @@ in
   };
 
   config = {
-    users.users.ghc-test-tracking = {
-      description = "GitLab test tracking service";
-      isSystemUser = true;
-      group = "ghc-test-tracking";
-    };
-    users.groups.ghc-test-tracking = {};
-      
     systemd.services.gitlab-triage-label-service = {
       description = "GitLab label triage service";
-      serviceConfig.User = "ghc-test-tracking";
       script = ''
         ${service}/bin/gitlab-triage-label-service \
           --gitlab-root=https://gitlab.${config.ghc.rootDomain} \
@@ -31,6 +23,7 @@ in
           --port=${toString config.services.ghc-triage.listenPort}
       '';
       wantedBy = [ "multi-user.target" ];
+      serviceConfig.DynamicUser = true;
     };
   };
 }