commit 04e9e9e51046fe58acb74ea4c9d27383cdeaa33e · pyrox.dev/nixpkgs

+45 -41
nixos/modules/programs/captive-browser.nix
···

       1
       1
        
       { config, lib, pkgs, ... }:

     

       2
       2
        
       

     

       3
       3
        
       with lib;

     

       4
       4
       -
       

     

       5
       4
        
       let

     

       6
       5
        
         cfg = config.programs.captive-browser;

     

       7
       6
        
       in

     
···

       27
       26
        
             # the options below are the same as in "captive-browser.toml"

     

       28
       27
        
             browser = mkOption {

     

       29
       28
        
               type = types.str;

     

       30
       30
       -
               default = concatStringsSep " " [ "${pkgs.chromium}/bin/chromium"

     

       31
       31
       -
                                                "--user-data-dir=\${XDG_DATA_HOME:-$HOME/.local/share}/chromium-captive"

     

       32
       32
       -
                                                ''--proxy-server="socks5://$PROXY"''

     

       33
       33
       -
                                                ''--host-resolver-rules="MAP * ~NOTFOUND , EXCLUDE localhost"''

     

       34
       34
       -
                                                "--no-first-run"

     

       35
       35
       -
                                                "--new-window"

     

       36
       36
       -
                                                "--incognito"

     

       37
       37
       -
                                                "http://cache.nixos.org/"

     

       38
       38
       -
                                              ];

     

       29
       29
       +
               default = concatStringsSep " " [

     

       30
       30
       +
                 ''${pkgs.chromium}/bin/chromium''

     

       31
       31
       +
                 ''--user-data-dir=''${XDG_DATA_HOME:-$HOME/.local/share}/chromium-captive''

     

       32
       32
       +
                 ''--proxy-server="socks5://$PROXY"''

     

       33
       33
       +
                 ''--host-resolver-rules="MAP * ~NOTFOUND , EXCLUDE localhost"''

     

       34
       34
       +
                 ''--no-first-run''

     

       35
       35
       +
                 ''--new-window''

     

       36
       36
       +
                 ''--incognito''

     

       37
       37
       +
                 ''-no-default-browser-check''

     

       38
       38
       +
                 ''http://cache.nixos.org/''

     

       39
       39
       +
               ];

     

       39
       40
        
               description = ''

     

       40
       41
        
                 The shell (/bin/sh) command executed once the proxy starts.

     

       41
       42
        
                 When browser exits, the proxy exits. An extra env var PROXY is available.

     
···

       81
       82
        
       

     

       82
       83
        
         config = mkIf cfg.enable {

     

       83
       84
        
       

     

       84
       84
       -
           programs.captive-browser.dhcp-dns = mkOptionDefault (

     

       85
       85
       -
             if config.networking.networkmanager.enable then

     

       86
       86
       -
               "${pkgs.networkmanager}/bin/nmcli dev show ${escapeShellArg cfg.interface} | ${pkgs.gnugrep}/bin/fgrep IP4.DNS"

     

       87
       87
       -
             else if config.networking.dhcpcd.enable then

     

       88
       88
       -
               "${pkgs.dhcpcd}/bin/dhcpcd -U ${escapeShellArg cfg.interface} | ${pkgs.gnugrep}/bin/fgrep domain_name_servers"

     

       89
       89
       -
             else if config.networking.useNetworkd then

     

       90
       90
       -
               "${cfg.package}/bin/systemd-networkd-dns ${escapeShellArg cfg.interface}"

     

       91
       91
       -
             else

     

       92
       92
       -
               "${config.security.wrapperDir}/udhcpc --quit --now -f -i ${escapeShellArg cfg.interface} -O dns --script ${

     

       93
       93
       -
                   pkgs.writeScript "udhcp-script" ''

     

       94
       94
       -
                     #!/bin/sh

     

       95
       95
       -
                     if [ "$1" = bound ]; then

     

       96
       96
       -
                       echo "$dns"

     

       97
       97
       -
                     fi

     

       98
       98
       -
                   ''}"

     

       99
       99
       -
           );

     

       85
       85
       +
           programs.captive-browser.dhcp-dns =

     

       86
       86
       +
             let

     

       87
       87
       +
               iface = prefix:

     

       88
       88
       +
                 optionalString cfg.bindInterface (concatStringsSep " " (map escapeShellArg [ prefix cfg.interface ]));

     

       89
       89
       +
             in

     

       90
       90
       +
             mkOptionDefault (

     

       91
       91
       +
               if config.networking.networkmanager.enable then

     

       92
       92
       +
                 "${pkgs.networkmanager}/bin/nmcli dev show ${iface ""} | ${pkgs.gnugrep}/bin/fgrep IP4.DNS"

     

       93
       93
       +
               else if config.networking.dhcpcd.enable then

     

       94
       94
       +
                 "${pkgs.dhcpcd}/bin/dhcpcd ${iface "-U"} | ${pkgs.gnugrep}/bin/fgrep domain_name_servers"

     

       95
       95
       +
               else if config.networking.useNetworkd then

     

       96
       96
       +
                 "${cfg.package}/bin/systemd-networkd-dns ${iface ""}"

     

       97
       97
       +
               else

     

       98
       98
       +
                 "${config.security.wrapperDir}/udhcpc --quit --now -f ${iface "-i"} -O dns --script ${

     

       99
       99
       +
                 pkgs.writeShellScript "udhcp-script" ''

     

       100
       100
       +
                   if [ "$1" = bound ]; then

     

       101
       101
       +
                     echo "$dns"

     

       102
       102
       +
                   fi

     

       103
       103
       +
                 ''}"

     

       104
       104
       +
             );

     

       100
       105
        
       

     

       101
       106
        
           security.wrappers.udhcpc = {

     

       102
       102
       -
             capabilities  = "cap_net_raw+p";

     

       103
       103
       -
             source        = "${pkgs.busybox}/bin/udhcpc";

     

       107
       107
       +
             capabilities = "cap_net_raw+p";

     

       108
       108
       +
             source = "${pkgs.busybox}/bin/udhcpc";

     

       104
       109
        
           };

     

       105
       110
        
       

     

       106
       111
        
           security.wrappers.captive-browser = {

     

       107
       107
       -
             capabilities  = "cap_net_raw+p";

     

       108
       108
       -
             source        = pkgs.writeScript "captive-browser" ''

     

       109
       109
       -
                               #!${pkgs.bash}/bin/bash

     

       110
       110
       -
                               export XDG_CONFIG_HOME=${pkgs.writeTextDir "captive-browser.toml" ''

     

       111
       111
       -
                                                         browser = """${cfg.browser}"""

     

       112
       112
       -
                                                         dhcp-dns = """${cfg.dhcp-dns}"""

     

       113
       113
       -
                                                         socks5-addr = """${cfg.socks5-addr}"""

     

       114
       114
       -
                                                         ${optionalString cfg.bindInterface ''

     

       115
       115
       -
                                                           bind-device = """${cfg.interface}"""

     

       116
       116
       -
                                                         ''}

     

       117
       117
       -
                                                       ''}

     

       118
       118
       -
                               exec ${cfg.package}/bin/captive-browser

     

       119
       119
       -
                             '';

     

       112
       112
       +
             capabilities = "cap_net_raw+p";

     

       113
       113
       +
             source = pkgs.writeShellScript "captive-browser" ''

     

       114
       114
       +
               export XDG_CONFIG_HOME=${pkgs.writeTextDir "captive-browser.toml" ''

     

       115
       115
       +
                                         browser = """${cfg.browser}"""

     

       116
       116
       +
                                         dhcp-dns = """${cfg.dhcp-dns}"""

     

       117
       117
       +
                                         socks5-addr = """${cfg.socks5-addr}"""

     

       118
       118
       +
                                         ${optionalString cfg.bindInterface ''

     

       119
       119
       +
                                           bind-device = """${cfg.interface}"""

     

       120
       120
       +
                                         ''}

     

       121
       121
       +
                                       ''}

     

       122
       122
       +
               exec ${cfg.package}/bin/captive-browser

     

       123
       123
       +
             '';

     

       120
       124
        
           };

     

       121
       125
        
         };

     

       122
       126
        
       }