pyrox.dev
1{
2 pkgs,
3 lib,
4 config,
5 ...
6}:
7let
8 cfg = config.services.dysnomia;
9
10 printProperties =
11 properties:
12 lib.concatMapStrings (
13 propertyName:
14 let
15 property = properties.${propertyName};
16 in
17 if lib.isList property then
18 "${propertyName}=(${
19 lib.concatMapStrings (elem: "\"${toString elem}\" ") (properties.${propertyName})
20 })\n"
21 else
22 "${propertyName}=\"${toString property}\"\n"
23 ) (builtins.attrNames properties);
24
25 properties = pkgs.stdenv.mkDerivation {
26 name = "dysnomia-properties";
27 buildCommand = ''
28 cat > $out << "EOF"
29 ${printProperties cfg.properties}
30 EOF
31 '';
32 };
33
34 containersDir = pkgs.stdenv.mkDerivation {
35 name = "dysnomia-containers";
36 buildCommand = ''
37 mkdir -p $out
38 cd $out
39
40 ${lib.concatMapStrings (
41 containerName:
42 let
43 containerProperties = cfg.containers.${containerName};
44 in
45 ''
46 cat > ${containerName} <<EOF
47 ${printProperties containerProperties}
48 type=${containerName}
49 EOF
50 ''
51 ) (builtins.attrNames cfg.containers)}
52 '';
53 };
54
55 linkMutableComponents =
56 { containerName }:
57 ''
58 mkdir ${containerName}
59
60 ${lib.concatMapStrings (
61 componentName:
62 let
63 component = cfg.components.${containerName}.${componentName};
64 in
65 "ln -s ${component} ${containerName}/${componentName}\n"
66 ) (builtins.attrNames (cfg.components.${containerName} or { }))}
67 '';
68
69 componentsDir = pkgs.stdenv.mkDerivation {
70 name = "dysnomia-components";
71 buildCommand = ''
72 mkdir -p $out
73 cd $out
74
75 ${lib.concatMapStrings (containerName: linkMutableComponents { inherit containerName; }) (
76 builtins.attrNames cfg.components
77 )}
78 '';
79 };
80
81 dysnomiaFlags = {
82 enableApacheWebApplication = config.services.httpd.enable;
83 enableAxis2WebService = config.services.tomcat.axis2.enable;
84 enableDockerContainer = config.virtualisation.docker.enable;
85 enableEjabberdDump = config.services.ejabberd.enable;
86 enableMySQLDatabase = config.services.mysql.enable;
87 enablePostgreSQLDatabase = config.services.postgresql.enable;
88 enableTomcatWebApplication = config.services.tomcat.enable;
89 enableMongoDatabase = config.services.mongodb.enable;
90 enableSubversionRepository = config.services.svnserve.enable;
91 enableInfluxDatabase = config.services.influxdb.enable;
92 };
93in
94{
95 options = {
96 services.dysnomia = {
97
98 enable = lib.mkOption {
99 type = lib.types.bool;
100 default = false;
101 description = "Whether to enable Dysnomia";
102 };
103
104 enableAuthentication = lib.mkOption {
105 type = lib.types.bool;
106 default = false;
107 description = "Whether to publish privacy-sensitive authentication credentials";
108 };
109
110 package = lib.mkOption {
111 type = lib.types.path;
112 description = "The Dysnomia package";
113 };
114
115 properties = lib.mkOption {
116 description = "An attribute set in which each attribute represents a machine property. Optionally, these values can be shell substitutions.";
117 default = { };
118 type = lib.types.attrs;
119 };
120
121 containers = lib.mkOption {
122 description = "An attribute set in which each key represents a container and each value an attribute set providing its configuration properties";
123 default = { };
124 type = lib.types.attrsOf lib.types.attrs;
125 };
126
127 components = lib.mkOption {
128 description = "An attribute set in which each key represents a container and each value an attribute set in which each key represents a component and each value a derivation constructing its initial state";
129 default = { };
130 type = lib.types.attrsOf lib.types.attrs;
131 };
132
133 extraContainerProperties = lib.mkOption {
134 description = "An attribute set providing additional container settings in addition to the default properties";
135 default = { };
136 type = lib.types.attrs;
137 };
138
139 extraContainerPaths = lib.mkOption {
140 description = "A list of paths containing additional container configurations that are added to the search folders";
141 default = [ ];
142 type = lib.types.listOf lib.types.path;
143 };
144
145 extraModulePaths = lib.mkOption {
146 description = "A list of paths containing additional modules that are added to the search folders";
147 default = [ ];
148 type = lib.types.listOf lib.types.path;
149 };
150
151 enableLegacyModules = lib.mkOption {
152 type = lib.types.bool;
153 default = true;
154 description = "Whether to enable Dysnomia legacy process and wrapper modules";
155 };
156 };
157 };
158
159 imports = [
160 (lib.mkRenamedOptionModule [ "dysnomia" ] [ "services" "dysnomia" ])
161 ];
162
163 config = lib.mkIf cfg.enable {
164
165 environment.etc = {
166 "dysnomia/containers" = {
167 source = containersDir;
168 };
169 "dysnomia/components" = {
170 source = componentsDir;
171 };
172 "dysnomia/properties" = {
173 source = properties;
174 };
175 };
176
177 environment.variables = {
178 DYSNOMIA_STATEDIR = "/var/state/dysnomia-nixos";
179 DYSNOMIA_CONTAINERS_PATH = "${
180 lib.concatMapStrings (containerPath: "${containerPath}:") cfg.extraContainerPaths
181 }/etc/dysnomia/containers";
182 DYSNOMIA_MODULES_PATH = "${
183 lib.concatMapStrings (modulePath: "${modulePath}:") cfg.extraModulePaths
184 }/etc/dysnomia/modules";
185 };
186
187 environment.systemPackages = [ cfg.package ];
188
189 services.dysnomia.package = pkgs.dysnomia.override (
190 origArgs:
191 dysnomiaFlags
192 // lib.optionalAttrs (cfg.enableLegacyModules) {
193 enableLegacy = builtins.trace ''
194 WARNING: Dysnomia has been configured to use the legacy 'process' and 'wrapper'
195 modules for compatibility reasons! If you rely on these modules, consider
196 migrating to better alternatives.
197
198 More information: <https://raw.githubusercontent.com/svanderburg/dysnomia/f65a9a84827bcc4024d6b16527098b33b02e4054/README-legacy.md>
199
200 If you have migrated already or don't rely on these Dysnomia modules, you can
201 disable legacy mode with the following NixOS configuration option:
202
203 dysnomia.enableLegacyModules = false;
204
205 In a future version of Dysnomia (and NixOS) the legacy option will go away!
206 '' true;
207 }
208 );
209
210 services.dysnomia.properties = {
211 hostname = config.networking.hostName;
212 inherit (pkgs.stdenv.hostPlatform) system;
213
214 supportedTypes = [
215 "echo"
216 "fileset"
217 "process"
218 "wrapper"
219
220 # These are not base modules, but they are still enabled because they work with technology that are always enabled in NixOS
221 "systemd-unit"
222 "sysvinit-script"
223 "nixos-configuration"
224 ]
225 ++ lib.optional (dysnomiaFlags.enableApacheWebApplication) "apache-webapplication"
226 ++ lib.optional (dysnomiaFlags.enableAxis2WebService) "axis2-webservice"
227 ++ lib.optional (dysnomiaFlags.enableDockerContainer) "docker-container"
228 ++ lib.optional (dysnomiaFlags.enableEjabberdDump) "ejabberd-dump"
229 ++ lib.optional (dysnomiaFlags.enableInfluxDatabase) "influx-database"
230 ++ lib.optional (dysnomiaFlags.enableMySQLDatabase) "mysql-database"
231 ++ lib.optional (dysnomiaFlags.enablePostgreSQLDatabase) "postgresql-database"
232 ++ lib.optional (dysnomiaFlags.enableTomcatWebApplication) "tomcat-webapplication"
233 ++ lib.optional (dysnomiaFlags.enableMongoDatabase) "mongo-database"
234 ++ lib.optional (dysnomiaFlags.enableSubversionRepository) "subversion-repository";
235 };
236
237 services.dysnomia.containers = lib.recursiveUpdate (
238 {
239 process = { };
240 wrapper = { };
241 }
242 // lib.optionalAttrs (config.services.httpd.enable) {
243 apache-webapplication = {
244 documentRoot = config.services.httpd.virtualHosts.localhost.documentRoot;
245 };
246 }
247 // lib.optionalAttrs (config.services.tomcat.axis2.enable) { axis2-webservice = { }; }
248 // lib.optionalAttrs (config.services.ejabberd.enable) {
249 ejabberd-dump = {
250 ejabberdUser = config.services.ejabberd.user;
251 };
252 }
253 // lib.optionalAttrs (config.services.mysql.enable) {
254 mysql-database = {
255 mysqlPort = config.services.mysql.settings.mysqld.port;
256 mysqlSocket = "/run/mysqld/mysqld.sock";
257 }
258 // lib.optionalAttrs cfg.enableAuthentication {
259 mysqlUsername = "root";
260 };
261 }
262 // lib.optionalAttrs (config.services.postgresql.enable) {
263 postgresql-database = {
264 }
265 // lib.optionalAttrs (cfg.enableAuthentication) {
266 postgresqlUsername = "postgres";
267 };
268 }
269 // lib.optionalAttrs (config.services.tomcat.enable) {
270 tomcat-webapplication = {
271 tomcatPort = 8080;
272 };
273 }
274 // lib.optionalAttrs (config.services.mongodb.enable) { mongo-database = { }; }
275 // lib.optionalAttrs (config.services.influxdb.enable) {
276 influx-database = {
277 influxdbUsername = config.services.influxdb.user;
278 influxdbDataDir = "${config.services.influxdb.dataDir}/data";
279 influxdbMetaDir = "${config.services.influxdb.dataDir}/meta";
280 };
281 }
282 // lib.optionalAttrs (config.services.svnserve.enable) {
283 subversion-repository = {
284 svnBaseDir = config.services.svnserve.svnBaseDir;
285 };
286 }
287 ) cfg.extraContainerProperties;
288
289 boot.extraSystemdUnitPaths = [ "/etc/systemd-mutable/system" ];
290
291 system.activationScripts.dysnomia = ''
292 mkdir -p /etc/systemd-mutable/system
293 if [ ! -f /etc/systemd-mutable/system/dysnomia.target ]
294 then
295 ( echo "[Unit]"
296 echo "Description=Services that are activated and deactivated by Dysnomia"
297 echo "After=final.target"
298 ) > /etc/systemd-mutable/system/dysnomia.target
299 fi
300 '';
301 };
302}