···

       
2526
       
 
       
      <listitem>

     

       
2527
       
 
       
        <para>

     

       
2528
       
 
       
          The logrotate module also has been updated to freeform syntax:

     

       
2529
       
-
       
          <link linkend="opt-services.logrotate.paths">services.logrotate.paths</link>

     

       
2530
       
-
       
          and

     

       
2531
       
-
       
          <link linkend="opt-services.logrotate.extraConfig">services.logrotate.extraConfig</link>

     

       
2532
       
-
       
          will work, but issue deprecation warnings and

     

       
2533
       
 
       
          <link linkend="opt-services.logrotate.settings">services.logrotate.settings</link>

     

       
2534
       
 
       
          should now be used instead.

     

       
2535
       
 
       
        </para>

     

···

       
2526
       
 
       
      <listitem>

     

       
2527
       
 
       
        <para>

     

       
2528
       
 
       
          The logrotate module also has been updated to freeform syntax:

     

       
2529
       
+
       
          <literal>services.logrotate.paths</literal> and

     

       
2530
       
+
       
          <literal>services.logrotate.extraConfig</literal> will work,

     

       
2531
       
+
       
          but issue deprecation warnings and

     

       
0
       
 
       

     

       
2532
       
 
       
          <link linkend="opt-services.logrotate.settings">services.logrotate.settings</link>

     

       
2533
       
 
       
          should now be used instead.

     

       
2534
       
 
       
        </para>

     

···

       
509
       
 
       
      </listitem>

     

       
510
       
 
       
      <listitem>

     

       
511
       
 
       
        <para>

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
512
       
 
       
          The <literal>isPowerPC</literal> predicate, found on

     

       
513
       
 
       
          <literal>platform</literal> attrsets

     

       
514
       
 
       
          (<literal>hostPlatform</literal>,

     

···

       
509
       
 
       
      </listitem>

     

       
510
       
 
       
      <listitem>

     

       
511
       
 
       
        <para>

     

       
512
       
+
       
          Deprecated settings <literal>logrotate.paths</literal> and

     

       
513
       
+
       
          <literal>logrotate.extraConfig</literal> have been removed.

     

       
514
       
+
       
          Please convert any uses to

     

       
515
       
+
       
          <link linkend="opt-services.logrotate.settings">services.logrotate.settings</link>

     

       
516
       
+
       
          instead.

     

       
517
       
+
       
        </para>

     

       
518
       
+
       
      </listitem>

     

       
519
       
+
       
      <listitem>

     

       
520
       
+
       
        <para>

     

       
521
       
 
       
          The <literal>isPowerPC</literal> predicate, found on

     

       
522
       
 
       
          <literal>platform</literal> attrsets

     

       
523
       
 
       
          (<literal>hostPlatform</literal>,

     

···

       
906
       
 
       


     

       
907
       
 
       
- [services.logrotate.enable](#opt-services.logrotate.enable) now defaults to true if any rotate path has

     

       
908
       
 
       
  been defined, and some paths have been added by default.

     

       
909
       
-
       
- The logrotate module also has been updated to freeform syntax: [services.logrotate.paths](#opt-services.logrotate.paths)

     

       
910
       
-
       
  and [services.logrotate.extraConfig](#opt-services.logrotate.extraConfig) will work, but issue deprecation

     

       
911
       
 
       
  warnings and [services.logrotate.settings](#opt-services.logrotate.settings) should now be used instead.

     

       
912
       
 
       


     

       
913
       
 
       
- `security.pam.ussh` has been added, which allows authorizing PAM sessions based on SSH _certificates_ held within an SSH agent, using [pam-ussh](https://github.com/uber/pam-ussh).

     

···

       
906
       
 
       


     

       
907
       
 
       
- [services.logrotate.enable](#opt-services.logrotate.enable) now defaults to true if any rotate path has

     

       
908
       
 
       
  been defined, and some paths have been added by default.

     

       
909
       
+
       
- The logrotate module also has been updated to freeform syntax: `services.logrotate.paths`

     

       
910
       
+
       
  and `services.logrotate.extraConfig` will work, but issue deprecation

     

       
911
       
 
       
  warnings and [services.logrotate.settings](#opt-services.logrotate.settings) should now be used instead.

     

       
912
       
 
       


     

       
913
       
 
       
- `security.pam.ussh` has been added, which allows authorizing PAM sessions based on SSH _certificates_ held within an SSH agent, using [pam-ussh](https://github.com/uber/pam-ussh).

     

···

       
171
       
 
       
  This got partially copied over from the minimal profile and reduces the final system size by up to 200MB.

     

       
172
       
 
       
  If you require all locales installed set the option to ``[ "all" ]``.

     

       
173
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
174
       
 
       
- The `isPowerPC` predicate, found on `platform` attrsets (`hostPlatform`, `buildPlatform`, `targetPlatform`, etc) has been removed in order to reduce confusion.  The predicate was was defined such that it matches only the 32-bit big-endian members of the POWER/PowerPC family, despite having a name which would imply a broader set of systems.  If you were using this predicate, you can replace `foo.isPowerPC` with `(with foo; isPower && is32bit && isBigEndian)`.

     

       
175
       
 
       


     

       
176
       
 
       
- The `fetchgit` fetcher now uses [cone mode](https://www.git-scm.com/docs/git-sparse-checkout/2.37.0#_internalscone_mode_handling) by default for sparse checkouts. [Non-cone mode](https://www.git-scm.com/docs/git-sparse-checkout/2.37.0#_internalsnon_cone_problems) can be enabled by passing `nonConeMode = true`, but note that non-cone mode is deprecated and this option may be removed alongside a future Git update without notice.

     

···

       
171
       
 
       
  This got partially copied over from the minimal profile and reduces the final system size by up to 200MB.

     

       
172
       
 
       
  If you require all locales installed set the option to ``[ "all" ]``.

     

       
173
       
 
       


     

       
174
       
+
       
- Deprecated settings `logrotate.paths` and `logrotate.extraConfig` have

     

       
175
       
+
       
  been removed. Please convert any uses to

     

       
176
       
+
       
  [services.logrotate.settings](#opt-services.logrotate.settings) instead.

     

       
177
       
+
       


     

       
178
       
 
       
- The `isPowerPC` predicate, found on `platform` attrsets (`hostPlatform`, `buildPlatform`, `targetPlatform`, etc) has been removed in order to reduce confusion.  The predicate was was defined such that it matches only the 32-bit big-endian members of the POWER/PowerPC family, despite having a name which would imply a broader set of systems.  If you were using this predicate, you can replace `foo.isPowerPC` with `(with foo; isPower && is32bit && isBigEndian)`.

     

       
179
       
 
       


     

       
180
       
 
       
- The `fetchgit` fetcher now uses [cone mode](https://www.git-scm.com/docs/git-sparse-checkout/2.37.0#_internalscone_mode_handling) by default for sparse checkouts. [Non-cone mode](https://www.git-scm.com/docs/git-sparse-checkout/2.37.0#_internalsnon_cone_problems) can be enabled by passing `nonConeMode = true`, but note that non-cone mode is deprecated and this option may be removed alongside a future Git update without notice.

     

···

       
5
       
 
       
let

     

       
6
       
 
       
  cfg = config.services.logrotate;

     

       
7
       
 
       


     

       
8
       
-
       
  # deprecated legacy compat settings

     

       
9
       
-
       
  # these options will be removed before 22.11 in the following PR:

     

       
10
       
-
       
  # https://github.com/NixOS/nixpkgs/pull/164169

     

       
11
       
-
       
  pathOpts = { name, ... }: {

     

       
12
       
-
       
    options = {

     

       
13
       
-
       
      enable = mkOption {

     

       
14
       
-
       
        type = types.bool;

     

       
15
       
-
       
        default = true;

     

       
16
       
-
       
        description = lib.mdDoc ''

     

       
17
       
-
       
          Whether to enable log rotation for this path. This can be used to explicitly disable

     

       
18
       
-
       
          logging that has been configured by NixOS.

     

       
19
       
-
       
        '';

     

       
20
       
-
       
      };

     

       
21
       
-
       


     

       
22
       
-
       
      name = mkOption {

     

       
23
       
-
       
        type = types.str;

     

       
24
       
-
       
        internal = true;

     

       
25
       
-
       
      };

     

       
26
       
-
       


     

       
27
       
-
       
      path = mkOption {

     

       
28
       
-
       
        type = with types; either str (listOf str);

     

       
29
       
-
       
        default = name;

     

       
30
       
-
       
        defaultText = "attribute name";

     

       
31
       
-
       
        description = lib.mdDoc ''

     

       
32
       
-
       
          The path to log files to be rotated.

     

       
33
       
-
       
          Spaces are allowed and normal shell quoting rules apply,

     

       
34
       
-
       
          with ', ", and \ characters supported.

     

       
35
       
-
       
        '';

     

       
36
       
-
       
      };

     

       
37
       
-
       


     

       
38
       
-
       
      user = mkOption {

     

       
39
       
-
       
        type = with types; nullOr str;

     

       
40
       
-
       
        default = null;

     

       
41
       
-
       
        description = lib.mdDoc ''

     

       
42
       
-
       
          The user account to use for rotation.

     

       
43
       
-
       
        '';

     

       
44
       
-
       
      };

     

       
45
       
-
       


     

       
46
       
-
       
      group = mkOption {

     

       
47
       
-
       
        type = with types; nullOr str;

     

       
48
       
-
       
        default = null;

     

       
49
       
-
       
        description = lib.mdDoc ''

     

       
50
       
-
       
          The group to use for rotation.

     

       
51
       
-
       
        '';

     

       
52
       
-
       
      };

     

       
53
       
-
       


     

       
54
       
-
       
      frequency = mkOption {

     

       
55
       
-
       
        type = types.enum [ "hourly" "daily" "weekly" "monthly" "yearly" ];

     

       
56
       
-
       
        default = "daily";

     

       
57
       
-
       
        description = lib.mdDoc ''

     

       
58
       
-
       
          How often to rotate the logs.

     

       
59
       
-
       
        '';

     

       
60
       
-
       
      };

     

       
61
       
-
       


     

       
62
       
-
       
      keep = mkOption {

     

       
63
       
-
       
        type = types.int;

     

       
64
       
-
       
        default = 20;

     

       
65
       
-
       
        description = lib.mdDoc ''

     

       
66
       
-
       
          How many rotations to keep.

     

       
67
       
-
       
        '';

     

       
68
       
-
       
      };

     

       
69
       
-
       


     

       
70
       
-
       
      extraConfig = mkOption {

     

       
71
       
-
       
        type = types.lines;

     

       
72
       
-
       
        default = "";

     

       
73
       
-
       
        description = lib.mdDoc ''

     

       
74
       
-
       
          Extra logrotate config options for this path. Refer to

     

       
75
       
-
       
          <https://linux.die.net/man/8/logrotate> for details.

     

       
76
       
-
       
        '';

     

       
77
       
-
       
      };

     

       
78
       
-
       


     

       
79
       
-
       
      priority = mkOption {

     

       
80
       
-
       
        type = types.int;

     

       
81
       
-
       
        default = 1000;

     

       
82
       
-
       
        description = lib.mdDoc ''

     

       
83
       
-
       
          Order of this logrotate block in relation to the others. The semantics are

     

       
84
       
-
       
          the same as with `lib.mkOrder`. Smaller values have a greater priority.

     

       
85
       
-
       
        '';

     

       
86
       
-
       
      };

     

       
87
       
-
       
    };

     

       
88
       
-
       


     

       
89
       
-
       
    config.name = name;

     

       
90
       
-
       
  };

     

       
91
       
-
       


     

       
92
       
 
       
  generateLine = n: v:

     

       
93
       
 
       
    if builtins.elem n [ "files" "priority" "enable" "global" ] || v == null then null

     

       
94
       
-
       
    else if builtins.elem n [ "extraConfig" "frequency" ] then "${v}\n"

     

       
95
       
 
       
    else if builtins.elem n [ "firstaction" "lastaction" "prerotate" "postrotate" "preremove" ]

     

       
96
       
 
       
         then "${n}\n    ${v}\n  endscript\n"

     

       
97
       
 
       
    else if isInt v then "${n} ${toString v}\n"

     
···

       
110
       
 
       
        ${generateSection 2 settings}}

     

       
111
       
 
       
    '';

     

       
112
       
 
       


     

       
113
       
-
       
  # below two mapPaths are compat functions

     

       
114
       
-
       
  mapPathOptToSetting = n: v:

     

       
115
       
-
       
    if n == "keep" then nameValuePair "rotate" v

     

       
116
       
-
       
    else if n == "path" then nameValuePair "files" v

     

       
117
       
-
       
    else nameValuePair n v;

     

       
118
       
-
       


     

       
119
       
-
       
  mapPathsToSettings = path: pathOpts:

     

       
120
       
-
       
    nameValuePair path (

     

       
121
       
-
       
      filterAttrs (n: v: ! builtins.elem n [ "user" "group" "name" ] && v != "") (

     

       
122
       
-
       
        (mapAttrs' mapPathOptToSetting pathOpts) //

     

       
123
       
-
       
        {

     

       
124
       
-
       
          su =

     

       
125
       
-
       
            if pathOpts.user != null

     

       
126
       
-
       
            then "${pathOpts.user} ${pathOpts.group}"

     

       
127
       
-
       
            else null;

     

       
128
       
-
       
        }

     

       
129
       
-
       
      )

     

       
130
       
-
       
    );

     

       
131
       
-
       


     

       
132
       
 
       
  settings = sortProperties (attrValues (filterAttrs (_: settings: settings.enable) (

     

       
133
       
 
       
    foldAttrs recursiveUpdate { } [

     

       
134
       
 
       
      {

     
···

       
139
       
 
       
          frequency = "weekly";

     

       
140
       
 
       
          rotate = 4;

     

       
141
       
 
       
        };

     

       
142
       
-
       
        # compat section

     

       
143
       
-
       
        extraConfig = {

     

       
144
       
-
       
          enable = (cfg.extraConfig != "");

     

       
145
       
-
       
          global = true;

     

       
146
       
-
       
          extraConfig = cfg.extraConfig;

     

       
147
       
-
       
          priority = 101;

     

       
148
       
-
       
        };

     

       
149
       
 
       
      }

     

       
150
       
-
       
      (mapAttrs' mapPathsToSettings cfg.paths)

     

       
151
       
 
       
      cfg.settings

     

       
152
       
 
       
      { header = { global = true; priority = 100; }; }

     

       
153
       
 
       
    ]

     
···

       
200
       
 
       
in

     

       
201
       
 
       
{

     

       
202
       
 
       
  imports = [

     

       
203
       
-
       
    (mkRenamedOptionModule [ "services" "logrotate" "config" ] [ "services" "logrotate" "extraConfig" ])

     

       
0
       
 
       

     

       
0
       
 
       

     

       
204
       
 
       
  ];

     

       
205
       
 
       


     

       
206
       
 
       
  options = {

     
···

       
311
       
 
       
          in this case you can disable the failing check with this option.

     

       
312
       
 
       
        '';

     

       
313
       
 
       
      };

     

       
314
       
-
       


     

       
315
       
-
       
      # deprecated legacy compat settings

     

       
316
       
-
       
      paths = mkOption {

     

       
317
       
-
       
        type = with types; attrsOf (submodule pathOpts);

     

       
318
       
-
       
        default = { };

     

       
319
       
-
       
        description = lib.mdDoc ''

     

       
320
       
-
       
          Attribute set of paths to rotate. The order each block appears in the generated configuration file

     

       
321
       
-
       
          can be controlled by the [priority](#opt-services.logrotate.paths._name_.priority) option

     

       
322
       
-
       
          using the same semantics as `lib.mkOrder`. Smaller values have a greater priority.

     

       
323
       
-
       
          This setting has been deprecated in favor of [logrotate settings](#opt-services.logrotate.settings).

     

       
324
       
-
       
        '';

     

       
325
       
-
       
        example = literalExpression ''

     

       
326
       
-
       
          {

     

       
327
       
-
       
            httpd = {

     

       
328
       
-
       
              path = "/var/log/httpd/*.log";

     

       
329
       
-
       
              user = config.services.httpd.user;

     

       
330
       
-
       
              group = config.services.httpd.group;

     

       
331
       
-
       
              keep = 7;

     

       
332
       
-
       
            };

     

       
333
       
-
       


     

       
334
       
-
       
            myapp = {

     

       
335
       
-
       
              path = "/var/log/myapp/*.log";

     

       
336
       
-
       
              user = "myuser";

     

       
337
       
-
       
              group = "mygroup";

     

       
338
       
-
       
              frequency = "weekly";

     

       
339
       
-
       
              keep = 5;

     

       
340
       
-
       
              priority = 1;

     

       
341
       
-
       
            };

     

       
342
       
-
       
          }

     

       
343
       
-
       
        '';

     

       
344
       
-
       
      };

     

       
345
       
-
       


     

       
346
       
-
       
      extraConfig = mkOption {

     

       
347
       
-
       
        default = "";

     

       
348
       
-
       
        type = types.lines;

     

       
349
       
-
       
        description = lib.mdDoc ''

     

       
350
       
-
       
          Extra contents to append to the logrotate configuration file. Refer to

     

       
351
       
-
       
          <https://linux.die.net/man/8/logrotate> for details.

     

       
352
       
-
       
          This setting has been deprecated in favor of

     

       
353
       
-
       
          [logrotate settings](#opt-services.logrotate.settings).

     

       
354
       
-
       
        '';

     

       
355
       
-
       
      };

     

       
356
       
 
       
    };

     

       
357
       
 
       
  };

     

       
358
       
 
       


     

       
359
       
 
       
  config = mkIf cfg.enable {

     

       
360
       
-
       
    assertions =

     

       
361
       
-
       
      mapAttrsToList

     

       
362
       
-
       
        (name: pathOpts:

     

       
363
       
-
       
          {

     

       
364
       
-
       
            assertion = (pathOpts.user != null) == (pathOpts.group != null);

     

       
365
       
-
       
            message = ''

     

       
366
       
-
       
              If either of `services.logrotate.paths.${name}.user` or `services.logrotate.paths.${name}.group` are specified then *both* must be specified.

     

       
367
       
-
       
            '';

     

       
368
       
-
       
          })

     

       
369
       
-
       
        cfg.paths;

     

       
370
       
-
       


     

       
371
       
-
       
    warnings =

     

       
372
       
-
       
      (mapAttrsToList

     

       
373
       
-
       
        (name: pathOpts: ''

     

       
374
       
-
       
          Using config.services.logrotate.paths.${name} is deprecated and will become unsupported in a future release.

     

       
375
       
-
       
          Please use services.logrotate.settings instead.

     

       
376
       
-
       
        '')

     

       
377
       
-
       
        cfg.paths

     

       
378
       
-
       
      ) ++

     

       
379
       
-
       
      (optional (cfg.extraConfig != "") ''

     

       
380
       
-
       
        Using config.services.logrotate.extraConfig is deprecated and will become unsupported in a future release.

     

       
381
       
-
       
        Please use services.logrotate.settings with globals=true instead.

     

       
382
       
-
       
      '');

     

       
383
       
-
       


     

       
384
       
 
       
    systemd.services.logrotate = {

     

       
385
       
 
       
      description = "Logrotate Service";

     

       
386
       
 
       
      startAt = "hourly";

     

···

       
5
       
 
       
let

     

       
6
       
 
       
  cfg = config.services.logrotate;

     

       
7
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
8
       
 
       
  generateLine = n: v:

     

       
9
       
 
       
    if builtins.elem n [ "files" "priority" "enable" "global" ] || v == null then null

     

       
10
       
+
       
    else if builtins.elem n [ "frequency" ] then "${v}\n"

     

       
11
       
 
       
    else if builtins.elem n [ "firstaction" "lastaction" "prerotate" "postrotate" "preremove" ]

     

       
12
       
 
       
         then "${n}\n    ${v}\n  endscript\n"

     

       
13
       
 
       
    else if isInt v then "${n} ${toString v}\n"

     
···

       
26
       
 
       
        ${generateSection 2 settings}}

     

       
27
       
 
       
    '';

     

       
28
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
29
       
 
       
  settings = sortProperties (attrValues (filterAttrs (_: settings: settings.enable) (

     

       
30
       
 
       
    foldAttrs recursiveUpdate { } [

     

       
31
       
 
       
      {

     
···

       
36
       
 
       
          frequency = "weekly";

     

       
37
       
 
       
          rotate = 4;

     

       
38
       
 
       
        };

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
39
       
 
       
      }

     

       
0
       
 
       

     

       
40
       
 
       
      cfg.settings

     

       
41
       
 
       
      { header = { global = true; priority = 100; }; }

     

       
42
       
 
       
    ]

     
···

       
89
       
 
       
in

     

       
90
       
 
       
{

     

       
91
       
 
       
  imports = [

     

       
92
       
+
       
    (mkRemovedOptionModule [ "services" "logrotate" "config" ] "Modify services.logrotate.settings.header instead")

     

       
93
       
+
       
    (mkRemovedOptionModule [ "services" "logrotate" "extraConfig" ] "Modify services.logrotate.settings.header instead")

     

       
94
       
+
       
    (mkRemovedOptionModule [ "services" "logrotate" "paths" ] "Add attributes to services.logrotate.settings instead")

     

       
95
       
 
       
  ];

     

       
96
       
 
       


     

       
97
       
 
       
  options = {

     
···

       
202
       
 
       
          in this case you can disable the failing check with this option.

     

       
203
       
 
       
        '';

     

       
204
       
 
       
      };

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
205
       
 
       
    };

     

       
206
       
 
       
  };

     

       
207
       
 
       


     

       
208
       
 
       
  config = mkIf cfg.enable {

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
209
       
 
       
    systemd.services.logrotate = {

     

       
210
       
 
       
      description = "Logrotate Service";

     

       
211
       
 
       
      startAt = "hourly";

     

···

       
260
       
 
       
    (mkRenamedOptionModule [ "services" "gitlab" "stateDir" ] [ "services" "gitlab" "statePath" ])

     

       
261
       
 
       
    (mkRenamedOptionModule [ "services" "gitlab" "backupPath" ] [ "services" "gitlab" "backup" "path" ])

     

       
262
       
 
       
    (mkRemovedOptionModule [ "services" "gitlab" "satelliteDir" ] "")

     

       
0
       
 
       

     

       
263
       
 
       
  ];

     

       
264
       
 
       


     

       
265
       
 
       
  options = {

     
···

       
871
       
 
       
          default = 30;

     

       
872
       
 
       
          description = lib.mdDoc "How many rotations to keep.";

     

       
873
       
 
       
        };

     

       
874
       
-
       


     

       
875
       
-
       
        extraConfig = mkOption {

     

       
876
       
-
       
          type = types.lines;

     

       
877
       
-
       
          default = "";

     

       
878
       
-
       
          description = lib.mdDoc ''

     

       
879
       
-
       
            Extra logrotate config options for this path. Refer to

     

       
880
       
-
       
            <https://linux.die.net/man/8/logrotate> for details.

     

       
881
       
-
       
          '';

     

       
882
       
-
       
        };

     

       
883
       
 
       
      };

     

       
884
       
 
       


     

       
885
       
 
       
      workhorse.config = mkOption {

     
···

       
1042
       
 
       
          rotate = cfg.logrotate.keep;

     

       
1043
       
 
       
          copytruncate = true;

     

       
1044
       
 
       
          compress = true;

     

       
1045
       
-
       
          extraConfig = cfg.logrotate.extraConfig;

     

       
1046
       
 
       
        };

     

       
1047
       
 
       
      };

     

       
1048
       
 
       
    };

     

···

       
260
       
 
       
    (mkRenamedOptionModule [ "services" "gitlab" "stateDir" ] [ "services" "gitlab" "statePath" ])

     

       
261
       
 
       
    (mkRenamedOptionModule [ "services" "gitlab" "backupPath" ] [ "services" "gitlab" "backup" "path" ])

     

       
262
       
 
       
    (mkRemovedOptionModule [ "services" "gitlab" "satelliteDir" ] "")

     

       
263
       
+
       
    (mkRemovedOptionModule [ "services" "gitlab" "logrotate" "extraConfig" ] "Modify services.logrotate.settings.gitlab directly instead")

     

       
264
       
 
       
  ];

     

       
265
       
 
       


     

       
266
       
 
       
  options = {

     
···

       
872
       
 
       
          default = 30;

     

       
873
       
 
       
          description = lib.mdDoc "How many rotations to keep.";

     

       
874
       
 
       
        };

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
875
       
 
       
      };

     

       
876
       
 
       


     

       
877
       
 
       
      workhorse.config = mkOption {

     
···

       
1034
       
 
       
          rotate = cfg.logrotate.keep;

     

       
1035
       
 
       
          copytruncate = true;

     

       
1036
       
 
       
          compress = true;

     

       
0
       
 
       

     

       
1037
       
 
       
        };

     

       
1038
       
 
       
      };

     

       
1039
       
 
       
    };

     

···

       
64
       
 
       
          notifempty = true;

     

       
65
       
 
       
        };

     

       
66
       
 
       
      };

     

       
67
       
-
       
      # extraConfig compatibility - should be added to top level, early.

     

       
68
       
-
       
      services.logrotate.extraConfig = ''

     

       
69
       
-
       
        nomail

     

       
70
       
-
       
      '';

     

       
71
       
-
       
      # paths compatibility

     

       
72
       
-
       
      services.logrotate.paths = {

     

       
73
       
-
       
        compat_path = {

     

       
74
       
-
       
          path = "compat_test_path";

     

       
75
       
-
       
        };

     

       
76
       
-
       
        # user/group should be grouped as 'su user group'

     

       
77
       
-
       
        compat_user = {

     

       
78
       
-
       
          user = config.users.users.root.name;

     

       
79
       
-
       
          group = "root";

     

       
80
       
-
       
        };

     

       
81
       
-
       
        # extraConfig in path should be added to block

     

       
82
       
-
       
        compat_extraConfig = {

     

       
83
       
-
       
          extraConfig = "dateext";

     

       
84
       
-
       
        };

     

       
85
       
-
       
        # keep -> rotate

     

       
86
       
-
       
        compat_keep = {

     

       
87
       
-
       
          keep = 1;

     

       
88
       
-
       
        };

     

       
89
       
-
       
      };

     

       
90
       
 
       
    };

     

       
91
       
 
       
  };

     

       
92
       
 
       


     
···

       
127
       
 
       
              "sed -ne '/\"postrotate\" {/,/}/p' /tmp/logrotate.conf | grep endscript",

     

       
128
       
 
       
              "grep '\"file1\"\n\"file2\" {' /tmp/logrotate.conf",

     

       
129
       
 
       
              "sed -ne '/\"import\" {/,/}/p' /tmp/logrotate.conf | grep noolddir",

     

       
130
       
-
       
              "sed -ne '1,/^\"/p' /tmp/logrotate.conf | grep nomail",

     

       
131
       
-
       
              "grep '\"compat_test_path\" {' /tmp/logrotate.conf",

     

       
132
       
-
       
              "sed -ne '/\"compat_user\" {/,/}/p' /tmp/logrotate.conf | grep 'su root root'",

     

       
133
       
-
       
              "sed -ne '/\"compat_extraConfig\" {/,/}/p' /tmp/logrotate.conf | grep dateext",

     

       
134
       
-
       
              "[[ $(sed -ne '/\"compat_keep\" {/,/}/p' /tmp/logrotate.conf | grep -w rotate) = \"  rotate 1\" ]]",

     

       
135
       
-
       
              "! sed -ne '/\"compat_keep\" {/,/}/p' /tmp/logrotate.conf | grep -w keep",

     

       
136
       
 
       
          )

     

       
137
       
 
       
          # also check configFile option

     

       
138
       
 
       
          failingMachine.succeed(

     

···

       
64
       
 
       
          notifempty = true;

     

       
65
       
 
       
        };

     

       
66
       
 
       
      };

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
67
       
 
       
    };

     

       
68
       
 
       
  };

     

       
69
       
 
       


     
···

       
104
       
 
       
              "sed -ne '/\"postrotate\" {/,/}/p' /tmp/logrotate.conf | grep endscript",

     

       
105
       
 
       
              "grep '\"file1\"\n\"file2\" {' /tmp/logrotate.conf",

     

       
106
       
 
       
              "sed -ne '/\"import\" {/,/}/p' /tmp/logrotate.conf | grep noolddir",

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
107
       
 
       
          )

     

       
108
       
 
       
          # also check configFile option

     

       
109
       
 
       
          failingMachine.succeed(