···

       
88
       
 
       
    url = http://www.eclipse.org/legal/epl-v10.html;

     

       
89
       
 
       
  };

     

       
90
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
91
       
 
       
  gpl2 = {

     

       
92
       
 
       
    shortName = "GPLv2";

     

       
93
       
 
       
    fullName = "GNU General Public License version 2";

     
···

       
128
       
 
       
    shortName = "ISC";

     

       
129
       
 
       
    fullName = "Internet Systems Consortium License";

     

       
130
       
 
       
    url = http://www.opensource.org/licenses/ISC;

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
131
       
 
       
  };

     

       
132
       
 
       


     

       
133
       
 
       
  ipl10 = {

     
···

       
242
       
 
       
  unfreeRedistributable = "unfree-redistributable";

     

       
243
       
 
       


     

       
244
       
 
       
  unfreeRedistributableFirmware = "unfree-redistributable-firmware";

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
245
       
 
       


     

       
246
       
 
       
  zlib = {

     

       
247
       
 
       
    shortName = "zlib";

     

···

       
88
       
 
       
    url = http://www.eclipse.org/legal/epl-v10.html;

     

       
89
       
 
       
  };

     

       
90
       
 
       


     

       
91
       
+
       
  free = "free";

     

       
92
       
+
       


     

       
93
       
 
       
  gpl2 = {

     

       
94
       
 
       
    shortName = "GPLv2";

     

       
95
       
 
       
    fullName = "GNU General Public License version 2";

     
···

       
130
       
 
       
    shortName = "ISC";

     

       
131
       
 
       
    fullName = "Internet Systems Consortium License";

     

       
132
       
 
       
    url = http://www.opensource.org/licenses/ISC;

     

       
133
       
+
       
  };

     

       
134
       
+
       


     

       
135
       
+
       
  ipa = {

     

       
136
       
+
       
    shortName = "IPA 1.0";

     

       
137
       
+
       
    fullName = "IPA Font License v1.0";

     

       
138
       
+
       
    url = http://ipafont.ipa.go.jp/ipafont/;

     

       
139
       
 
       
  };

     

       
140
       
 
       


     

       
141
       
 
       
  ipl10 = {

     
···

       
250
       
 
       
  unfreeRedistributable = "unfree-redistributable";

     

       
251
       
 
       


     

       
252
       
 
       
  unfreeRedistributableFirmware = "unfree-redistributable-firmware";

     

       
253
       
+
       


     

       
254
       
+
       
  wadalab = {

     

       
255
       
+
       
    shortName = "wadalab";

     

       
256
       
+
       
    fullName = "Wadalab Font License";

     

       
257
       
+
       
    url = https://fedoraproject.org/wiki/Licensing:Wadalab?rd=Licensing/Wadalab;

     

       
258
       
+
       
  };

     

       
259
       
 
       


     

       
260
       
 
       
  zlib = {

     

       
261
       
 
       
    shortName = "zlib";

     

···

       
6
       
 
       


     

       
7
       
 
       
  _1126 = "Christian Lask <mail@elfsechsundzwanzig.de>";

     

       
8
       
 
       
  aforemny = "Alexander Foremny <alexanderforemny@googlemail.com>";

     

       
0
       
 
       

     

       
9
       
 
       
  akc = "Anders Claesson <akc@akc.is>";

     

       
10
       
 
       
  algorith = "Dries Van Daele <dries_van_daele@telenet.be>";

     

       
11
       
 
       
  all = "Nix Committers <nix-commits@lists.science.uu.nl>";

     
···

       
37
       
 
       
  emery = "Emery Hemingway <emery@vfemail.net>";

     

       
38
       
 
       
  ertes = "Ertugrul Söylemez <ertesx@gmx.de>";

     

       
39
       
 
       
  falsifian = "James Cook <james.cook@utoronto.ca>";

     

       
0
       
 
       

     

       
40
       
 
       
  fuuzetsu = "Mateusz Kowalczyk <fuuzetsu@fuuzetsu.co.uk>";

     

       
41
       
 
       
  garbas = "Rok Garbas <rok@garbas.si>";

     

       
42
       
 
       
  goibhniu = "Cillian de Róiste <cillian.deroiste@gmail.com>";

     

···

       
6
       
 
       


     

       
7
       
 
       
  _1126 = "Christian Lask <mail@elfsechsundzwanzig.de>";

     

       
8
       
 
       
  aforemny = "Alexander Foremny <alexanderforemny@googlemail.com>";

     

       
9
       
+
       
  ak = "Alexander Kjeldaas <ak@formalprivacy.com>";

     

       
10
       
 
       
  akc = "Anders Claesson <akc@akc.is>";

     

       
11
       
 
       
  algorith = "Dries Van Daele <dries_van_daele@telenet.be>";

     

       
12
       
 
       
  all = "Nix Committers <nix-commits@lists.science.uu.nl>";

     
···

       
38
       
 
       
  emery = "Emery Hemingway <emery@vfemail.net>";

     

       
39
       
 
       
  ertes = "Ertugrul Söylemez <ertesx@gmx.de>";

     

       
40
       
 
       
  falsifian = "James Cook <james.cook@utoronto.ca>";

     

       
41
       
+
       
  flosse = "Markus Kohlhase <mail@markus-kohlhase.de>";

     

       
42
       
 
       
  fuuzetsu = "Mateusz Kowalczyk <fuuzetsu@fuuzetsu.co.uk>";

     

       
43
       
 
       
  garbas = "Rok Garbas <rok@garbas.si>";

     

       
44
       
 
       
  goibhniu = "Cillian de Róiste <cillian.deroiste@gmail.com>";

     

···

       
194
       
 
       


     

       
195
       
 
       
     is transformed into

     

       
196
       
 
       


     

       
197
       
-
       
       [ { boot = set1; } { boot = mkIf cond set2; services mkIf cond set3; } ].

     

       
198
       
 
       


     

       
199
       
 
       
     This transform is the critical step that allows mkIf conditions

     

       
200
       
 
       
     to refer to the full configuration without creating an infinite

     

···

       
194
       
 
       


     

       
195
       
 
       
     is transformed into

     

       
196
       
 
       


     

       
197
       
+
       
       [ { boot = set1; } { boot = mkIf cond set2; services = mkIf cond set3; } ].

     

       
198
       
 
       


     

       
199
       
 
       
     This transform is the critical step that allows mkIf conditions

     

       
200
       
 
       
     to refer to the full configuration without creating an infinite

     

···

       
9
       
 
       
  <xsl:template match="logfile">

     

       
10
       
 
       
    <html>

     

       
11
       
 
       
      <head>

     

       
12
       
-
       
        <script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js"></script>

     

       
13
       
-
       
        <script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jqueryui/1.10.3/jquery-ui.min.js"></script>

     

       
14
       
 
       
        <script type="text/javascript" src="treebits.js" />

     

       
15
       
 
       
        <link rel="stylesheet" href="logfile.css" type="text/css" />

     

       
16
       
 
       
        <title>Log File</title>

     

···

       
9
       
 
       
  <xsl:template match="logfile">

     

       
10
       
 
       
    <html>

     

       
11
       
 
       
      <head>

     

       
12
       
+
       
        <script type="text/javascript" src="//ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js"></script>

     

       
13
       
+
       
        <script type="text/javascript" src="//ajax.googleapis.com/ajax/libs/jqueryui/1.10.3/jquery-ui.min.js"></script>

     

       
14
       
 
       
        <script type="text/javascript" src="treebits.js" />

     

       
15
       
 
       
        <link rel="stylesheet" href="logfile.css" type="text/css" />

     

       
16
       
 
       
        <title>Log File</title>

     

···

       
37
       
 
       
  # `driver' is the script that runs the network.

     

       
38
       
 
       
  runTests = driver:

     

       
39
       
 
       
    stdenv.mkDerivation {

     

       
40
       
-
       
      name = "vm-test-run";

     

       
41
       
 
       


     

       
42
       
 
       
      requiredSystemFeatures = [ "kvm" "nixos-test" ];

     

       
43
       
 
       


     
···

       
68
       
 
       


     

       
69
       
 
       


     

       
70
       
 
       
  makeTest =

     

       
71
       
-
       
    { testScript, makeCoverageReport ? false, ... } @ t:

     

       
72
       
 
       


     

       
73
       
 
       
    let

     

       
0
       
 
       

     

       
74
       
 
       


     

       
75
       
 
       
      nodes = buildVirtualNetwork (

     

       
76
       
 
       
        t.nodes or (if t ? machine then { machine = t.machine; } else { }));

     
···

       
88
       
 
       
      # Generate onvenience wrappers for running the test driver

     

       
89
       
 
       
      # interactively with the specified network, and for starting the

     

       
90
       
 
       
      # VMs from the command line.

     

       
91
       
-
       
      driver = runCommand "nixos-test-driver"

     

       
92
       
 
       
        { buildInputs = [ makeWrapper];

     

       
93
       
 
       
          testScript = testScript';

     

       
94
       
 
       
          preferLocalBuild = true;

     

       
0
       
 
       

     

       
95
       
 
       
        }

     

       
96
       
 
       
        ''

     

       
97
       
 
       
          mkdir -p $out/bin

     

···

       
37
       
 
       
  # `driver' is the script that runs the network.

     

       
38
       
 
       
  runTests = driver:

     

       
39
       
 
       
    stdenv.mkDerivation {

     

       
40
       
+
       
      name = "vm-test-run-${driver.testName}";

     

       
41
       
 
       


     

       
42
       
 
       
      requiredSystemFeatures = [ "kvm" "nixos-test" ];

     

       
43
       
 
       


     
···

       
68
       
 
       


     

       
69
       
 
       


     

       
70
       
 
       
  makeTest =

     

       
71
       
+
       
    { testScript, makeCoverageReport ? false, name ? "unnamed", ... } @ t:

     

       
72
       
 
       


     

       
73
       
 
       
    let

     

       
74
       
+
       
      testDriverName = "nixos-test-driver-${name}";

     

       
75
       
 
       


     

       
76
       
 
       
      nodes = buildVirtualNetwork (

     

       
77
       
 
       
        t.nodes or (if t ? machine then { machine = t.machine; } else { }));

     
···

       
89
       
 
       
      # Generate onvenience wrappers for running the test driver

     

       
90
       
 
       
      # interactively with the specified network, and for starting the

     

       
91
       
 
       
      # VMs from the command line.

     

       
92
       
+
       
      driver = runCommand testDriverName

     

       
93
       
 
       
        { buildInputs = [ makeWrapper];

     

       
94
       
 
       
          testScript = testScript';

     

       
95
       
 
       
          preferLocalBuild = true;

     

       
96
       
+
       
          testName = name;

     

       
97
       
 
       
        }

     

       
98
       
 
       
        ''

     

       
99
       
 
       
          mkdir -p $out/bin

     

···

       
32
       
 
       


     

       
33
       
 
       
      kdc = mkOption {

     

       
34
       
 
       
        default = "kerberos.mit.edu";

     

       
35
       
-
       
        description = "Kerberos Domain Controller";

     

       
36
       
 
       
      };

     

       
37
       
 
       


     

       
38
       
 
       
      kerberosAdminServer = mkOption {

     

       
39
       
 
       
        default = "kerberos.mit.edu";

     

       
40
       
-
       
        description = "Kerberos Admin Server";

     

       
41
       
 
       
      };

     

       
42
       
 
       


     

       
43
       
 
       
    };

     

···

       
32
       
 
       


     

       
33
       
 
       
      kdc = mkOption {

     

       
34
       
 
       
        default = "kerberos.mit.edu";

     

       
35
       
+
       
        description = "Kerberos Domain Controller.";

     

       
36
       
 
       
      };

     

       
37
       
 
       


     

       
38
       
 
       
      kerberosAdminServer = mkOption {

     

       
39
       
 
       
        default = "kerberos.mit.edu";

     

       
40
       
+
       
        description = "Kerberos Admin Server.";

     

       
41
       
 
       
      };

     

       
42
       
 
       


     

       
43
       
 
       
    };

     

···

       
6
       
 
       


     

       
7
       
 
       
  sysctlOption = mkOptionType {

     

       
8
       
 
       
    name = "sysctl option value";

     

       
9
       
-
       
    check = x: isBool x || isString x || isInt x || isNull x;

     

       
10
       
-
       
    merge = args: defs: (last defs).value; # FIXME: hacky way to allow overriding in configuration.nix.

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
11
       
 
       
  };

     

       
12
       
 
       


     

       
13
       
 
       
in

     

···

       
6
       
 
       


     

       
7
       
 
       
  sysctlOption = mkOptionType {

     

       
8
       
 
       
    name = "sysctl option value";

     

       
9
       
+
       
    check = val:

     

       
10
       
+
       
      let

     

       
11
       
+
       
        checkType = x: isBool x || isString x || isInt x || isNull x;

     

       
12
       
+
       
      in

     

       
13
       
+
       
        checkType val || (val._type or "" == "override" && checkType val.content);

     

       
14
       
+
       
    merge = loc: defs: mergeOneOption loc (filterOverrides defs);

     

       
15
       
 
       
  };

     

       
16
       
 
       


     

       
17
       
 
       
in

     

···

       
97
       
 
       
    nix-channel --update nixos

     

       
98
       
 
       
fi

     

       
99
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
100
       
 
       


     

       
101
       
 
       
# Re-execute nixos-rebuild from the Nixpkgs tree.

     

       
102
       
 
       
if [ -z "$_NIXOS_REBUILD_REEXEC" -a -n "$canRun" ]; then

     

···

       
97
       
 
       
    nix-channel --update nixos

     

       
98
       
 
       
fi

     

       
99
       
 
       


     

       
100
       
+
       
# Make sure that we use the Nix package we depend on, not something

     

       
101
       
+
       
# else from the PATH for nix-{env,instantiate,build}.  This is

     

       
102
       
+
       
# important, because NixOS defaults the architecture of the rebuilt

     

       
103
       
+
       
# system to the architecture of the nix-* binaries used.  So if on an

     

       
104
       
+
       
# amd64 system the user has an i686 Nix package in her PATH, then we

     

       
105
       
+
       
# would silently downgrade the whole system to be i686 NixOS on the

     

       
106
       
+
       
# next reboot.

     

       
107
       
+
       
if [ -z "$_NIXOS_REBUILD_REEXEC" ]; then

     

       
108
       
+
       
    export PATH=@nix@/bin:$PATH

     

       
109
       
+
       
fi

     

       
110
       
 
       


     

       
111
       
 
       
# Re-execute nixos-rebuild from the Nixpkgs tree.

     

       
112
       
 
       
if [ -z "$_NIXOS_REBUILD_REEXEC" -a -n "$canRun" ]; then

     

···

       
32
       
 
       
  nixos-rebuild = makeProg {

     

       
33
       
 
       
    name = "nixos-rebuild";

     

       
34
       
 
       
    src = ./nixos-rebuild.sh;

     

       
0
       
 
       

     

       
35
       
 
       
  };

     

       
36
       
 
       


     

       
37
       
 
       
  nixos-generate-config = makeProg {

     

···

       
32
       
 
       
  nixos-rebuild = makeProg {

     

       
33
       
 
       
    name = "nixos-rebuild";

     

       
34
       
 
       
    src = ./nixos-rebuild.sh;

     

       
35
       
+
       
    nix = config.nix.package;

     

       
36
       
 
       
  };

     

       
37
       
 
       


     

       
38
       
 
       
  nixos-generate-config = makeProg {

     

···

       
134
       
 
       
      teamspeak = 124;

     

       
135
       
 
       
      influxdb = 125;

     

       
136
       
 
       
      nsd = 126;

     

       
0
       
 
       

     

       
137
       
 
       


     

       
138
       
 
       
      # When adding a uid, make sure it doesn't match an existing gid. And don't use uids above 399!

     

       
139
       
 
       


     

···

       
134
       
 
       
      teamspeak = 124;

     

       
135
       
 
       
      influxdb = 125;

     

       
136
       
 
       
      nsd = 126;

     

       
137
       
+
       
      gitolite = 127;

     

       
138
       
 
       


     

       
139
       
 
       
      # When adding a uid, make sure it doesn't match an existing gid. And don't use uids above 399!

     

       
140
       
 
       


     

···

       
147
       
 
       
  ./services/misc/felix.nix

     

       
148
       
 
       
  ./services/misc/folding-at-home.nix

     

       
149
       
 
       
  ./services/misc/gpsd.nix

     

       
0
       
 
       

     

       
150
       
 
       
  ./services/misc/nix-daemon.nix

     

       
151
       
 
       
  ./services/misc/nix-gc.nix

     

       
152
       
 
       
  ./services/misc/nix-ssh-serve.nix

     
···

       
216
       
 
       
  ./services/networking/prayer.nix

     

       
217
       
 
       
  ./services/networking/privoxy.nix

     

       
218
       
 
       
  ./services/networking/quassel.nix

     

       
0
       
 
       

     

       
219
       
 
       
  ./services/networking/radvd.nix

     

       
220
       
 
       
  ./services/networking/rdnssd.nix

     

       
221
       
 
       
  ./services/networking/rpcbind.nix

     

···

       
147
       
 
       
  ./services/misc/felix.nix

     

       
148
       
 
       
  ./services/misc/folding-at-home.nix

     

       
149
       
 
       
  ./services/misc/gpsd.nix

     

       
150
       
+
       
  ./services/misc/gitolite.nix

     

       
151
       
 
       
  ./services/misc/nix-daemon.nix

     

       
152
       
 
       
  ./services/misc/nix-gc.nix

     

       
153
       
 
       
  ./services/misc/nix-ssh-serve.nix

     
···

       
217
       
 
       
  ./services/networking/prayer.nix

     

       
218
       
 
       
  ./services/networking/privoxy.nix

     

       
219
       
 
       
  ./services/networking/quassel.nix

     

       
220
       
+
       
  ./services/networking/radicale.nix

     

       
221
       
 
       
  ./services/networking/radvd.nix

     

       
222
       
 
       
  ./services/networking/rdnssd.nix

     

       
223
       
 
       
  ./services/networking/rpcbind.nix

     

···

       
22
       
 
       
          interval = 5;

     

       
23
       
 
       
        };

     

       
24
       
 
       
        description = ''

     

       
25
       
-
       
          Parameters to be written to <filename>/etc/atoprc</filename>

     

       
26
       
 
       
        '';

     

       
27
       
 
       
      };

     

       
28
       
 
       


     

···

       
22
       
 
       
          interval = 5;

     

       
23
       
 
       
        };

     

       
24
       
 
       
        description = ''

     

       
25
       
+
       
          Parameters to be written to <filename>/etc/atoprc</filename>.

     

       
26
       
 
       
        '';

     

       
27
       
 
       
      };

     

       
28
       
 
       


     

···

       
19
       
 
       
    environment.variables =

     

       
20
       
 
       
      { LOCATE_PATH = "/var/cache/locatedb";

     

       
21
       
 
       
        NIXPKGS_CONFIG = "/etc/nix/nixpkgs-config.nix";

     

       
22
       
-
       
        PAGER = "less -R";

     

       
23
       
-
       
        EDITOR = "nano";

     

       
24
       
 
       
      };

     

       
25
       
 
       


     

       
26
       
 
       
    environment.sessionVariables =

     

···

       
19
       
 
       
    environment.variables =

     

       
20
       
 
       
      { LOCATE_PATH = "/var/cache/locatedb";

     

       
21
       
 
       
        NIXPKGS_CONFIG = "/etc/nix/nixpkgs-config.nix";

     

       
22
       
+
       
        PAGER = mkDefault "less -R";

     

       
23
       
+
       
        EDITOR = mkDefault "nano";

     

       
24
       
 
       
      };

     

       
25
       
 
       


     

       
26
       
 
       
    environment.sessionVariables =

     

···

       
189
       
 
       
          session required pam_env.so envfile=${config.system.build.pamEnvironment}

     

       
190
       
 
       
          session required pam_unix.so

     

       
191
       
 
       
          ${optionalString cfg.setLoginUid

     

       
192
       
-
       
              "session required pam_loginuid.so"}

     

       
0
       
 
       

     

       
0
       
 
       

     

       
193
       
 
       
          ${optionalString cfg.updateWtmp

     

       
194
       
 
       
              "session required ${pkgs.pam}/lib/security/pam_lastlog.so silent"}

     

       
195
       
 
       
          ${optionalString config.users.ldap.enable

     

···

       
189
       
 
       
          session required pam_env.so envfile=${config.system.build.pamEnvironment}

     

       
190
       
 
       
          session required pam_unix.so

     

       
191
       
 
       
          ${optionalString cfg.setLoginUid

     

       
192
       
+
       
              "session ${

     

       
193
       
+
       
                if config.boot.isContainer then "optional" else "required"

     

       
194
       
+
       
              } pam_loginuid.so"}

     

       
195
       
 
       
          ${optionalString cfg.updateWtmp

     

       
196
       
 
       
              "session required ${pkgs.pam}/lib/security/pam_lastlog.so silent"}

     

       
197
       
 
       
          ${optionalString config.users.ldap.enable

     

···

       
68
       
 
       


     

       
69
       
 
       
    users.extraUsers = optionalAttrs (cfg.user == "openldap") (singleton

     

       
70
       
 
       
      { name = "openldap";

     

       
71
       
-
       
        group = "openldap";

     

       
72
       
 
       
        uid = config.ids.uids.openldap;

     

       
73
       
 
       
      });

     

       
74
       
 
       


     

···

       
68
       
 
       


     

       
69
       
 
       
    users.extraUsers = optionalAttrs (cfg.user == "openldap") (singleton

     

       
70
       
 
       
      { name = "openldap";

     

       
71
       
+
       
        group = cfg.group;

     

       
72
       
 
       
        uid = config.ids.uids.openldap;

     

       
73
       
 
       
      });

     

       
74
       
 
       


     

···

       
50
       
 
       


     

       
51
       
 
       
      user = mkOption {

     

       
52
       
 
       
        default = "redis";

     

       
53
       
-
       
        description = "User account under which Redis runs";

     

       
54
       
 
       
      };

     

       
55
       
 
       


     

       
56
       
 
       
      pidFile = mkOption {

     
···

       
60
       
 
       


     

       
61
       
 
       
      port = mkOption {

     

       
62
       
 
       
        default = 6379;

     

       
63
       
-
       
        description = "The port for Redis to listen to";

     

       
64
       
 
       
        type = with types; int;

     

       
65
       
 
       
      };

     

       
66
       
 
       


     

       
67
       
 
       
      bind = mkOption {

     

       
68
       
 
       
        default = null; # All interfaces

     

       
69
       
-
       
        description = "The IP interface to bind to";

     

       
70
       
 
       
        example = "127.0.0.1";

     

       
71
       
 
       
      };

     

       
72
       
 
       


     

       
73
       
 
       
      unixSocket = mkOption {

     

       
74
       
 
       
        default = null;

     

       
75
       
-
       
        description = "The path to the socket to bind to";

     

       
76
       
 
       
        example = "/var/run/redis.sock";

     

       
77
       
 
       
      };

     

       
78
       
 
       


     

       
79
       
 
       
      logLevel = mkOption {

     

       
80
       
 
       
        default = "notice"; # debug, verbose, notice, warning

     

       
81
       
 
       
        example = "debug";

     

       
82
       
-
       
        description = "Specify the server verbosity level, options: debug, verbose, notice, warning";

     

       
83
       
 
       
        type = with types; string;

     

       
84
       
 
       
      };

     

       
85
       
 
       


     
···

       
110
       
 
       


     

       
111
       
 
       
      dbFilename = mkOption {

     

       
112
       
 
       
        default = "dump.rdb";

     

       
113
       
-
       
        description = "The filename where to dump the DB";

     

       
114
       
 
       
        type = with types; string;

     

       
115
       
 
       
      };

     

       
116
       
 
       


     

       
117
       
 
       
      dbpath = mkOption {

     

       
118
       
 
       
        default = "/var/lib/redis";

     

       
119
       
-
       
        description = "The DB will be written inside this directory, with the filename specified using the 'dbFilename' configuration";

     

       
120
       
 
       
        type = with types; string;

     

       
121
       
 
       
      };

     

       
122
       
 
       


     

       
123
       
 
       
      slaveOf = mkOption {

     

       
124
       
 
       
        default = null; # { ip, port }

     

       
125
       
-
       
        description = "An attribute set with two attributes: ip and port to which this redis instance acts as a slave";

     

       
126
       
 
       
        example = { ip = "192.168.1.100"; port = 6379; };

     

       
127
       
 
       
      };

     

       
128
       
 
       


     
···

       
154
       
 
       


     

       
155
       
 
       
      appendFsync = mkOption {

     

       
156
       
 
       
        default = "everysec"; # no, always, everysec

     

       
157
       
-
       
        description = "How often to fsync the append-only log, options: no, always, everysec";

     

       
158
       
 
       
        type = with types; string;

     

       
159
       
 
       
      };

     

       
160
       
 
       


     

       
161
       
 
       
      slowLogLogSlowerThan = mkOption {

     

       
162
       
 
       
        default = 10000;

     

       
163
       
-
       
        description = "Log queries whose execution take longer than X in milliseconds";

     

       
164
       
 
       
        example = 1000;

     

       
165
       
 
       
        type = with types; int;

     

       
166
       
 
       
      };

     

       
167
       
 
       


     

       
168
       
 
       
      slowLogMaxLen = mkOption {

     

       
169
       
 
       
        default = 128;

     

       
170
       
-
       
        description = "Maximum number of items to keep in slow log";

     

       
171
       
 
       
        type = with types; int;

     

       
172
       
 
       
      };

     

       
173
       
 
       


     

       
174
       
 
       
      extraConfig = mkOption {

     

       
175
       
 
       
        default = "";

     

       
176
       
-
       
        description = "Extra configuration options for redis.conf";

     

       
177
       
 
       
        type = with types; string;

     

       
178
       
 
       
      };

     

       
179
       
 
       
    };

     

···

       
50
       
 
       


     

       
51
       
 
       
      user = mkOption {

     

       
52
       
 
       
        default = "redis";

     

       
53
       
+
       
        description = "User account under which Redis runs.";

     

       
54
       
 
       
      };

     

       
55
       
 
       


     

       
56
       
 
       
      pidFile = mkOption {

     
···

       
60
       
 
       


     

       
61
       
 
       
      port = mkOption {

     

       
62
       
 
       
        default = 6379;

     

       
63
       
+
       
        description = "The port for Redis to listen to.";

     

       
64
       
 
       
        type = with types; int;

     

       
65
       
 
       
      };

     

       
66
       
 
       


     

       
67
       
 
       
      bind = mkOption {

     

       
68
       
 
       
        default = null; # All interfaces

     

       
69
       
+
       
        description = "The IP interface to bind to.";

     

       
70
       
 
       
        example = "127.0.0.1";

     

       
71
       
 
       
      };

     

       
72
       
 
       


     

       
73
       
 
       
      unixSocket = mkOption {

     

       
74
       
 
       
        default = null;

     

       
75
       
+
       
        description = "The path to the socket to bind to.";

     

       
76
       
 
       
        example = "/var/run/redis.sock";

     

       
77
       
 
       
      };

     

       
78
       
 
       


     

       
79
       
 
       
      logLevel = mkOption {

     

       
80
       
 
       
        default = "notice"; # debug, verbose, notice, warning

     

       
81
       
 
       
        example = "debug";

     

       
82
       
+
       
        description = "Specify the server verbosity level, options: debug, verbose, notice, warning.";

     

       
83
       
 
       
        type = with types; string;

     

       
84
       
 
       
      };

     

       
85
       
 
       


     
···

       
110
       
 
       


     

       
111
       
 
       
      dbFilename = mkOption {

     

       
112
       
 
       
        default = "dump.rdb";

     

       
113
       
+
       
        description = "The filename where to dump the DB.";

     

       
114
       
 
       
        type = with types; string;

     

       
115
       
 
       
      };

     

       
116
       
 
       


     

       
117
       
 
       
      dbpath = mkOption {

     

       
118
       
 
       
        default = "/var/lib/redis";

     

       
119
       
+
       
        description = "The DB will be written inside this directory, with the filename specified using the 'dbFilename' configuration.";

     

       
120
       
 
       
        type = with types; string;

     

       
121
       
 
       
      };

     

       
122
       
 
       


     

       
123
       
 
       
      slaveOf = mkOption {

     

       
124
       
 
       
        default = null; # { ip, port }

     

       
125
       
+
       
        description = "An attribute set with two attributes: ip and port to which this redis instance acts as a slave.";

     

       
126
       
 
       
        example = { ip = "192.168.1.100"; port = 6379; };

     

       
127
       
 
       
      };

     

       
128
       
 
       


     
···

       
154
       
 
       


     

       
155
       
 
       
      appendFsync = mkOption {

     

       
156
       
 
       
        default = "everysec"; # no, always, everysec

     

       
157
       
+
       
        description = "How often to fsync the append-only log, options: no, always, everysec.";

     

       
158
       
 
       
        type = with types; string;

     

       
159
       
 
       
      };

     

       
160
       
 
       


     

       
161
       
 
       
      slowLogLogSlowerThan = mkOption {

     

       
162
       
 
       
        default = 10000;

     

       
163
       
+
       
        description = "Log queries whose execution take longer than X in milliseconds.";

     

       
164
       
 
       
        example = 1000;

     

       
165
       
 
       
        type = with types; int;

     

       
166
       
 
       
      };

     

       
167
       
 
       


     

       
168
       
 
       
      slowLogMaxLen = mkOption {

     

       
169
       
 
       
        default = 128;

     

       
170
       
+
       
        description = "Maximum number of items to keep in slow log.";

     

       
171
       
 
       
        type = with types; int;

     

       
172
       
 
       
      };

     

       
173
       
 
       


     

       
174
       
 
       
      extraConfig = mkOption {

     

       
175
       
 
       
        default = "";

     

       
176
       
+
       
        description = "Extra configuration options for redis.conf.";

     

       
177
       
 
       
        type = with types; string;

     

       
178
       
 
       
      };

     

       
179
       
 
       
    };

     

···

       
17
       
 
       
        description = "Enable logstash";

     

       
18
       
 
       
      };

     

       
19
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
20
       
 
       
      inputConfig = mkOption {

     

       
21
       
 
       
        default = ''stdin { type => "example" }'';

     

       
22
       
 
       
        description = "Logstash input configuration";

     
···

       
62
       
 
       


     

       
63
       
 
       
  config = mkIf cfg.enable {

     

       
64
       
 
       
    systemd.services.logstash = with pkgs; {

     

       
65
       
-
       
      description = "Logstash daemon";

     

       
66
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
67
       
 
       


     

       
68
       
 
       
      serviceConfig = {

     
···

       
78
       
 
       
          output {

     

       
79
       
 
       
            ${cfg.outputConfig}

     

       
80
       
 
       
          }

     

       
81
       
-
       
        ''}";

     

       
82
       
 
       
      };

     

       
83
       
 
       
    };

     

       
84
       
 
       
  };

     

···

       
17
       
 
       
        description = "Enable logstash";

     

       
18
       
 
       
      };

     

       
19
       
 
       


     

       
20
       
+
       
      enableWeb = mkOption {

     

       
21
       
+
       
        default = false;

     

       
22
       
+
       
        description = "Enable logstash web interface";

     

       
23
       
+
       
      };

     

       
24
       
+
       


     

       
25
       
 
       
      inputConfig = mkOption {

     

       
26
       
 
       
        default = ''stdin { type => "example" }'';

     

       
27
       
 
       
        description = "Logstash input configuration";

     
···

       
67
       
 
       


     

       
68
       
 
       
  config = mkIf cfg.enable {

     

       
69
       
 
       
    systemd.services.logstash = with pkgs; {

     

       
70
       
+
       
      description = "Logstash Daemon";

     

       
71
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
72
       
 
       


     

       
73
       
 
       
      serviceConfig = {

     
···

       
83
       
 
       
          output {

     

       
84
       
 
       
            ${cfg.outputConfig}

     

       
85
       
 
       
          }

     

       
86
       
+
       
        ''} ${optionalString cfg.enableWeb "-- web"}";

     

       
87
       
 
       
      };

     

       
88
       
 
       
    };

     

       
89
       
 
       
  };

     

···

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

···

       
1
       
+
       
{ config, lib, pkgs, ... }:

     

       
2
       
+
       


     

       
3
       
+
       
with lib;

     

       
4
       
+
       


     

       
5
       
+
       
let

     

       
6
       
+
       
  cfg = config.services.gitolite;

     

       
7
       
+
       
  pubkeyFile = pkgs.writeText "gitolite-admin.pub" cfg.adminPubkey;

     

       
8
       
+
       
in

     

       
9
       
+
       
{

     

       
10
       
+
       
  options = {

     

       
11
       
+
       
    services.gitolite = {

     

       
12
       
+
       
      enable = mkOption {

     

       
13
       
+
       
        type = types.bool;

     

       
14
       
+
       
        default = false;

     

       
15
       
+
       
        description = ''

     

       
16
       
+
       
          Enable gitolite management under the

     

       
17
       
+
       
          <literal>gitolite</literal> user. The Gitolite home

     

       
18
       
+
       
          directory is <literal>/var/lib/gitolite</literal>. After

     

       
19
       
+
       
          switching to a configuration with Gitolite enabled, you can

     

       
20
       
+
       
          then run <literal>git clone

     

       
21
       
+
       
          gitolite@host:gitolite-admin.git</literal> to manage it further.

     

       
22
       
+
       
        '';

     

       
23
       
+
       
      };

     

       
24
       
+
       


     

       
25
       
+
       
      adminPubkey = mkOption {

     

       
26
       
+
       
        type = types.str;

     

       
27
       
+
       
        description = ''

     

       
28
       
+
       
          Initial administrative public key for Gitolite. This should

     

       
29
       
+
       
          be an SSH Public Key. Note that this key will only be used

     

       
30
       
+
       
          once, upon the first initialization of the Gitolite user.

     

       
31
       
+
       
        '';

     

       
32
       
+
       
      };

     

       
33
       
+
       
    };

     

       
34
       
+
       
  };

     

       
35
       
+
       


     

       
36
       
+
       
  config = mkIf cfg.enable {

     

       
37
       
+
       
    users.extraUsers.gitolite = {

     

       
38
       
+
       
      description     = "Gitolite user";

     

       
39
       
+
       
      home            = "/var/lib/gitolite";

     

       
40
       
+
       
      createHome      = true;

     

       
41
       
+
       
      uid             = config.ids.uids.gitolite;

     

       
42
       
+
       
      useDefaultShell = true;

     

       
43
       
+
       
    };

     

       
44
       
+
       


     

       
45
       
+
       
    systemd.services."gitolite-init" = {

     

       
46
       
+
       
      description = "Gitolite initialization";

     

       
47
       
+
       
      wantedBy    = [ "multi-user.target" ];

     

       
48
       
+
       


     

       
49
       
+
       
      serviceConfig.User = "gitolite";

     

       
50
       
+
       
      serviceConfig.Type = "oneshot";

     

       
51
       
+
       
      serviceConfig.RemainAfterExit = true;

     

       
52
       
+
       


     

       
53
       
+
       
      path = [ pkgs.gitolite pkgs.git pkgs.perl pkgs.bash pkgs.openssh ];

     

       
54
       
+
       
      script = ''

     

       
55
       
+
       
        cd /var/lib/gitolite

     

       
56
       
+
       
        mkdir -p .gitolite/logs

     

       
57
       
+
       
        if [ ! -d repositories ]; then

     

       
58
       
+
       
          gitolite setup -pk ${pubkeyFile}

     

       
59
       
+
       
        fi

     

       
60
       
+
       
        gitolite setup # Upgrade if needed

     

       
61
       
+
       
      '';

     

       
62
       
+
       
    };

     

       
63
       
+
       


     

       
64
       
+
       
    environment.systemPackages = [ pkgs.gitolite pkgs.git ];

     

       
65
       
+
       
  };

     

       
66
       
+
       
}

     

···

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

···

       
1
       
+
       
{config, lib, pkgs, ...}:

     

       
2
       
+
       


     

       
3
       
+
       
with lib;

     

       
4
       
+
       


     

       
5
       
+
       
let

     

       
6
       
+
       


     

       
7
       
+
       
  cfg = config.services.radicale;

     

       
8
       
+
       


     

       
9
       
+
       
  confFile = pkgs.writeText "radicale.conf" cfg.config;

     

       
10
       
+
       


     

       
11
       
+
       
in

     

       
12
       
+
       


     

       
13
       
+
       
{

     

       
14
       
+
       


     

       
15
       
+
       
  options = {

     

       
16
       
+
       


     

       
17
       
+
       
    services.radicale.enable = mkOption {

     

       
18
       
+
       
      type = types.bool;

     

       
19
       
+
       
      default = false;

     

       
20
       
+
       
      description = ''

     

       
21
       
+
       
          Enable Radicale CalDAV and CardDAV server

     

       
22
       
+
       
      '';

     

       
23
       
+
       
    };

     

       
24
       
+
       


     

       
25
       
+
       
    services.radicale.config = mkOption {

     

       
26
       
+
       
      type = types.string;

     

       
27
       
+
       
      default = "";

     

       
28
       
+
       
      description = ''

     

       
29
       
+
       
        Radicale configuration, this will set the service

     

       
30
       
+
       
        configuration file

     

       
31
       
+
       
      '';

     

       
32
       
+
       
      };

     

       
33
       
+
       
  };

     

       
34
       
+
       


     

       
35
       
+
       
  config = mkIf cfg.enable {

     

       
36
       
+
       


     

       
37
       
+
       
    environment.systemPackages = [ pkgs.pythonPackages.radicale ];

     

       
38
       
+
       


     

       
39
       
+
       
    jobs.radicale = {

     

       
40
       
+
       
      description = "A Simple Calendar and Contact Server";

     

       
41
       
+
       
      startOn = "started network-interfaces";

     

       
42
       
+
       
      exec = "${pkgs.pythonPackages.radicale}/bin/radicale -C ${confFile} -d";

     

       
43
       
+
       
      daemonType = "fork";

     

       
44
       
+
       
    };

     

       
45
       
+
       


     

       
46
       
+
       
  };

     

       
47
       
+
       


     

       
48
       
+
       
}

     

···

       
27
       
 
       


     

       
28
       
 
       
  options.services.elasticsearch = {

     

       
29
       
 
       
    enable = mkOption {

     

       
30
       
-
       
      description = "Whether to enable elasticsearch";

     

       
31
       
 
       
      default = false;

     

       
32
       
 
       
      type = types.uniq types.bool;

     

       
33
       
 
       
    };

     

       
34
       
 
       


     

       
35
       
 
       
    host = mkOption {

     

       
36
       
-
       
      description = "Elasticsearch listen address";

     

       
37
       
 
       
      default = "127.0.0.1";

     

       
38
       
 
       
      type = types.str;

     

       
39
       
 
       
    };

     

       
40
       
 
       


     

       
41
       
 
       
    port = mkOption {

     

       
42
       
-
       
      description = "Elasticsearch port to listen for HTTP traffic";

     

       
43
       
 
       
      default = 9200;

     

       
44
       
 
       
      type = types.int;

     

       
45
       
 
       
    };

     

       
46
       
 
       


     

       
47
       
 
       
    tcp_port = mkOption {

     

       
48
       
-
       
      description = "Elasticsearch port for the node to node communication";

     

       
49
       
 
       
      default = 9300;

     

       
50
       
 
       
      type = types.int;

     

       
51
       
 
       
    };

     

       
52
       
 
       


     

       
53
       
 
       
    cluster_name = mkOption {

     

       
54
       
-
       
      description = "Elasticsearch name that identifies your cluster for auto-discovery";

     

       
55
       
 
       
      default = "elasticsearch";

     

       
56
       
 
       
      type = types.str;

     

       
57
       
 
       
    };

     

       
58
       
 
       


     

       
59
       
 
       
    extraConf = mkOption {

     

       
60
       
-
       
      description = "Extra configuration for elasticsearch";

     

       
61
       
 
       
      default = "";

     

       
62
       
 
       
      type = types.str;

     

       
63
       
 
       
      example = ''

     
···

       
70
       
 
       
    };

     

       
71
       
 
       


     

       
72
       
 
       
    logging = mkOption {

     

       
73
       
-
       
      description = "Elasticsearch logging configuration";

     

       
74
       
 
       
      default = ''

     

       
75
       
 
       
        rootLogger: INFO, console

     

       
76
       
 
       
        logger:

     
···

       
95
       
 
       
    };

     

       
96
       
 
       


     

       
97
       
 
       
    extraCmdLineOptions = mkOption {

     

       
98
       
-
       
      description = "Extra command line options for the elasticsearch launcher";

     

       
99
       
 
       
      default = [];

     

       
100
       
 
       
      type = types.listOf types.string;

     

       
101
       
 
       
      example = [ "-Djava.net.preferIPv4Stack=true" ];

     
···

       
107
       
 
       


     

       
108
       
 
       
  config = mkIf cfg.enable {

     

       
109
       
 
       
    systemd.services.elasticsearch = {

     

       
110
       
-
       
      description = "Elasticsearch daemon";

     

       
111
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
112
       
 
       
      after = [ "network-interfaces.target" ];

     

       
113
       
 
       
      environment = { ES_HOME = cfg.dataDir; };

     

···

       
27
       
 
       


     

       
28
       
 
       
  options.services.elasticsearch = {

     

       
29
       
 
       
    enable = mkOption {

     

       
30
       
+
       
      description = "Whether to enable elasticsearch.";

     

       
31
       
 
       
      default = false;

     

       
32
       
 
       
      type = types.uniq types.bool;

     

       
33
       
 
       
    };

     

       
34
       
 
       


     

       
35
       
 
       
    host = mkOption {

     

       
36
       
+
       
      description = "Elasticsearch listen address.";

     

       
37
       
 
       
      default = "127.0.0.1";

     

       
38
       
 
       
      type = types.str;

     

       
39
       
 
       
    };

     

       
40
       
 
       


     

       
41
       
 
       
    port = mkOption {

     

       
42
       
+
       
      description = "Elasticsearch port to listen for HTTP traffic.";

     

       
43
       
 
       
      default = 9200;

     

       
44
       
 
       
      type = types.int;

     

       
45
       
 
       
    };

     

       
46
       
 
       


     

       
47
       
 
       
    tcp_port = mkOption {

     

       
48
       
+
       
      description = "Elasticsearch port for the node to node communication.";

     

       
49
       
 
       
      default = 9300;

     

       
50
       
 
       
      type = types.int;

     

       
51
       
 
       
    };

     

       
52
       
 
       


     

       
53
       
 
       
    cluster_name = mkOption {

     

       
54
       
+
       
      description = "Elasticsearch name that identifies your cluster for auto-discovery.";

     

       
55
       
 
       
      default = "elasticsearch";

     

       
56
       
 
       
      type = types.str;

     

       
57
       
 
       
    };

     

       
58
       
 
       


     

       
59
       
 
       
    extraConf = mkOption {

     

       
60
       
+
       
      description = "Extra configuration for elasticsearch.";

     

       
61
       
 
       
      default = "";

     

       
62
       
 
       
      type = types.str;

     

       
63
       
 
       
      example = ''

     
···

       
70
       
 
       
    };

     

       
71
       
 
       


     

       
72
       
 
       
    logging = mkOption {

     

       
73
       
+
       
      description = "Elasticsearch logging configuration.";

     

       
74
       
 
       
      default = ''

     

       
75
       
 
       
        rootLogger: INFO, console

     

       
76
       
 
       
        logger:

     
···

       
95
       
 
       
    };

     

       
96
       
 
       


     

       
97
       
 
       
    extraCmdLineOptions = mkOption {

     

       
98
       
+
       
      description = "Extra command line options for the elasticsearch launcher.";

     

       
99
       
 
       
      default = [];

     

       
100
       
 
       
      type = types.listOf types.string;

     

       
101
       
 
       
      example = [ "-Djava.net.preferIPv4Stack=true" ];

     
···

       
107
       
 
       


     

       
108
       
 
       
  config = mkIf cfg.enable {

     

       
109
       
 
       
    systemd.services.elasticsearch = {

     

       
110
       
+
       
      description = "Elasticsearch Daemon";

     

       
111
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
112
       
 
       
      after = [ "network-interfaces.target" ];

     

       
113
       
 
       
      environment = { ES_HOME = cfg.dataDir; };

     

···

       
594
       
 
       
                     message = "SSL is enabled for HTTPD, but sslServerCert and/or sslServerKey haven't been specified."; }

     

       
595
       
 
       
                 ];

     

       
596
       
 
       


     

       
597
       
-
       
    users.extraUsers = optional (mainCfg.user == "wwwrun")

     

       
598
       
 
       
      { name = "wwwrun";

     

       
599
       
-
       
        group = "wwwrun";

     

       
600
       
 
       
        description = "Apache httpd user";

     

       
601
       
 
       
        uid = config.ids.uids.wwwrun;

     

       
602
       
-
       
      };

     

       
603
       
 
       


     

       
604
       
-
       
    users.extraGroups = optional (mainCfg.group == "wwwrun")

     

       
605
       
 
       
      { name = "wwwrun";

     

       
606
       
 
       
        gid = config.ids.gids.wwwrun;

     

       
607
       
-
       
      };

     

       
608
       
 
       


     

       
609
       
 
       
    environment.systemPackages = [httpd] ++ concatMap (svc: svc.extraPath) allSubservices;

     

       
610
       
 
       


     

···

       
594
       
 
       
                     message = "SSL is enabled for HTTPD, but sslServerCert and/or sslServerKey haven't been specified."; }

     

       
595
       
 
       
                 ];

     

       
596
       
 
       


     

       
597
       
+
       
    users.extraUsers = optionalAttrs (mainCfg.user == "wwwrun") (singleton

     

       
598
       
 
       
      { name = "wwwrun";

     

       
599
       
+
       
        group = mainCfg.group;

     

       
600
       
 
       
        description = "Apache httpd user";

     

       
601
       
 
       
        uid = config.ids.uids.wwwrun;

     

       
602
       
+
       
      });

     

       
603
       
 
       


     

       
604
       
+
       
    users.extraGroups = optionalAttrs (mainCfg.group == "wwwrun") (singleton

     

       
605
       
 
       
      { name = "wwwrun";

     

       
606
       
 
       
        gid = config.ids.gids.wwwrun;

     

       
607
       
+
       
      });

     

       
608
       
 
       


     

       
609
       
 
       
    environment.systemPackages = [httpd] ++ concatMap (svc: svc.extraPath) allSubservices;

     

       
610
       
 
       


     

···

       
16
       
 
       
      enable = mkOption {

     

       
17
       
 
       
        default = false;

     

       
18
       
 
       
        type = types.bool;

     

       
19
       
-
       
        description = "The block device is backed by an encrypted one, adds this device as a initrd luks entry";

     

       
20
       
 
       
      };

     

       
21
       
 
       


     

       
22
       
 
       
      blkDev = mkOption {

     

       
23
       
 
       
        default = null;

     

       
24
       
 
       
        example = "/dev/sda1";

     

       
25
       
 
       
        type = types.uniq (types.nullOr types.string);

     

       
26
       
-
       
        description = "Location of the backing encrypted device";

     

       
27
       
 
       
      };

     

       
28
       
 
       


     

       
29
       
 
       
      label = mkOption {

     

       
30
       
 
       
        default = null;

     

       
31
       
 
       
        example = "rootfs";

     

       
32
       
 
       
        type = types.uniq (types.nullOr types.string);

     

       
33
       
-
       
        description = "Label of the backing encrypted device";

     

       
34
       
 
       
      };

     

       
35
       
 
       


     

       
36
       
 
       
      keyFile = mkOption {

     

       
37
       
 
       
        default = null;

     

       
38
       
 
       
        example = "/root/.swapkey";

     

       
39
       
 
       
        type = types.uniq (types.nullOr types.string);

     

       
40
       
-
       
        description = "File system location of keyfile";

     

       
41
       
 
       
      };

     

       
42
       
 
       
    };

     

       
43
       
 
       
  };

     

···

       
16
       
 
       
      enable = mkOption {

     

       
17
       
 
       
        default = false;

     

       
18
       
 
       
        type = types.bool;

     

       
19
       
+
       
        description = "The block device is backed by an encrypted one, adds this device as a initrd luks entry.";

     

       
20
       
 
       
      };

     

       
21
       
 
       


     

       
22
       
 
       
      blkDev = mkOption {

     

       
23
       
 
       
        default = null;

     

       
24
       
 
       
        example = "/dev/sda1";

     

       
25
       
 
       
        type = types.uniq (types.nullOr types.string);

     

       
26
       
+
       
        description = "Location of the backing encrypted device.";

     

       
27
       
 
       
      };

     

       
28
       
 
       


     

       
29
       
 
       
      label = mkOption {

     

       
30
       
 
       
        default = null;

     

       
31
       
 
       
        example = "rootfs";

     

       
32
       
 
       
        type = types.uniq (types.nullOr types.string);

     

       
33
       
+
       
        description = "Label of the backing encrypted device.";

     

       
34
       
 
       
      };

     

       
35
       
 
       


     

       
36
       
 
       
      keyFile = mkOption {

     

       
37
       
 
       
        default = null;

     

       
38
       
 
       
        example = "/root/.swapkey";

     

       
39
       
 
       
        type = types.uniq (types.nullOr types.string);

     

       
40
       
+
       
        description = "File system location of keyfile.";

     

       
41
       
 
       
      };

     

       
42
       
 
       
    };

     

       
43
       
 
       
  };

     

···

       
1
       
 
       
# Test whether `avahi-daemon' and `libnss-mdns' work as expected.

     

       
2
       
 
       


     

       
3
       
 
       
import ./make-test.nix {

     

       
0
       
 
       

     

       
4
       
 
       


     

       
5
       
 
       
  nodes = {

     

       
6
       
 
       
    one =

     

···

       
1
       
 
       
# Test whether `avahi-daemon' and `libnss-mdns' work as expected.

     

       
2
       
 
       


     

       
3
       
 
       
import ./make-test.nix {

     

       
4
       
+
       
  name = "avahi";

     

       
5
       
 
       


     

       
6
       
 
       
  nodes = {

     

       
7
       
 
       
    one =

     

···

       
23
       
 
       
in

     

       
24
       
 
       


     

       
25
       
 
       
{

     

       
0
       
 
       

     

       
26
       
 
       


     

       
27
       
 
       
  nodes =

     

       
28
       
 
       
    { tracker =

     

···

       
23
       
 
       
in

     

       
24
       
 
       


     

       
25
       
 
       
{

     

       
26
       
+
       
  name = "bittorrent";

     

       
27
       
 
       


     

       
28
       
 
       
  nodes =

     

       
29
       
 
       
    { tracker =

     

···

       
6
       
 
       
with import ../lib/build-vms.nix { inherit nixos nixpkgs system; };

     

       
7
       
 
       


     

       
8
       
 
       
rec {

     

       
0
       
 
       

     

       
0
       
 
       

     

       
9
       
 
       
  nodes = {

     

       
10
       
 
       
    share = {pkgs, config, ...}: {

     

       
11
       
 
       
      services.nfs.server.enable = true;

     

···

       
6
       
 
       
with import ../lib/build-vms.nix { inherit nixos nixpkgs system; };

     

       
7
       
 
       


     

       
8
       
 
       
rec {

     

       
9
       
+
       
  name = "check-filesystems";

     

       
10
       
+
       


     

       
11
       
 
       
  nodes = {

     

       
12
       
 
       
    share = {pkgs, config, ...}: {

     

       
13
       
 
       
      services.nfs.server.enable = true;

     

···

       
1
       
 
       
# Test for NixOS' container support.

     

       
2
       
 
       


     

       
3
       
 
       
import ./make-test.nix {

     

       
0
       
 
       

     

       
4
       
 
       


     

       
5
       
 
       
  machine =

     

       
6
       
 
       
    { config, pkgs, ... }:

     

···

       
1
       
 
       
# Test for NixOS' container support.

     

       
2
       
 
       


     

       
3
       
 
       
import ./make-test.nix {

     

       
4
       
+
       
  name = "containers";

     

       
5
       
 
       


     

       
6
       
 
       
  machine =

     

       
7
       
 
       
    { config, pkgs, ... }:

     

···

       
1
       
 
       
import ./make-test.nix ({ pkgs, ... }: {

     

       
0
       
 
       

     

       
2
       
 
       


     

       
3
       
 
       
  machine =

     

       
4
       
 
       
    { config, pkgs, ... }:

     

···

       
1
       
 
       
import ./make-test.nix ({ pkgs, ... }: {

     

       
2
       
+
       
  name = "firefox";

     

       
3
       
 
       


     

       
4
       
 
       
  machine =

     

       
5
       
 
       
    { config, pkgs, ... }:

     

···

       
1
       
 
       
# Test the firewall module.

     

       
2
       
 
       


     

       
3
       
 
       
import ./make-test.nix {

     

       
0
       
 
       

     

       
4
       
 
       


     

       
5
       
 
       
  nodes =

     

       
6
       
 
       
    { walled =

     

···

       
1
       
 
       
# Test the firewall module.

     

       
2
       
 
       


     

       
3
       
 
       
import ./make-test.nix {

     

       
4
       
+
       
  name = "firewall";

     

       
5
       
 
       


     

       
6
       
 
       
  nodes =

     

       
7
       
 
       
    { walled =

     

···

       
1
       
 
       
import ./make-test.nix {

     

       
0
       
 
       

     

       
2
       
 
       


     

       
3
       
 
       
  machine =

     

       
4
       
 
       
    { config, pkgs, ... }:

     

···

       
1
       
 
       
import ./make-test.nix {

     

       
2
       
+
       
  name = "gnome3";

     

       
3
       
 
       


     

       
4
       
 
       
  machine =

     

       
5
       
 
       
    { config, pkgs, ... }:

     

···

       
1
       
 
       
import ./make-test.nix {

     

       
0
       
 
       

     

       
2
       
 
       


     

       
3
       
 
       
  machine =

     

       
4
       
 
       
    { config, pkgs, ... }:

     

···

       
1
       
 
       
import ./make-test.nix {

     

       
2
       
+
       
  name = "gnome3_12";

     

       
3
       
 
       


     

       
4
       
 
       
  machine =

     

       
5
       
 
       
    { config, pkgs, ... }:

     

···

       
1
       
 
       
# This test runs influxdb and checks if influxdb is up and running

     

       
2
       
 
       


     

       
3
       
 
       
import ./make-test.nix {

     

       
0
       
 
       

     

       
0
       
 
       

     

       
4
       
 
       
  nodes = {

     

       
5
       
 
       
    one = { config, pkgs, ... }: {

     

       
6
       
 
       
      services.influxdb.enable = true;

     

···

       
1
       
 
       
# This test runs influxdb and checks if influxdb is up and running

     

       
2
       
 
       


     

       
3
       
 
       
import ./make-test.nix {

     

       
4
       
+
       
  name = "influxdb";

     

       
5
       
+
       


     

       
6
       
 
       
  nodes = {

     

       
7
       
 
       
    one = { config, pkgs, ... }: {

     

       
8
       
 
       
      services.influxdb.enable = true;

     

···

       
215
       
 
       
    '';

     

       
216
       
 
       


     

       
217
       
 
       


     

       
218
       
-
       
  makeInstallerTest =

     

       
219
       
 
       
    { createPartitions, testChannel ? false, useEFI ? false, grubVersion ? 2, grubDevice ? "/dev/vda" }:

     

       
220
       
 
       
    makeTest {

     

       
221
       
 
       
      inherit iso;

     

       
0
       
 
       

     

       
222
       
 
       
      nodes = if testChannel then { inherit webserver; } else { };

     

       
223
       
 
       
      testScript = testScriptFun {

     

       
224
       
 
       
        inherit createPartitions testChannel useEFI grubVersion grubDevice;

     
···

       
233
       
 
       


     

       
234
       
 
       
  # The (almost) simplest partitioning scheme: a swap partition and

     

       
235
       
 
       
  # one big filesystem partition.

     

       
236
       
-
       
  simple = makeInstallerTest

     

       
237
       
 
       
    { createPartitions =

     

       
238
       
 
       
        ''

     

       
239
       
 
       
          $machine->succeed(

     
···

       
251
       
 
       
    };

     

       
252
       
 
       


     

       
253
       
 
       
  # Same as the previous, but now with a separate /boot partition.

     

       
254
       
-
       
  separateBoot = makeInstallerTest

     

       
255
       
 
       
    { createPartitions =

     

       
256
       
 
       
        ''

     

       
257
       
 
       
          $machine->succeed(

     
···

       
273
       
 
       


     

       
274
       
 
       
  # Create two physical LVM partitions combined into one volume group

     

       
275
       
 
       
  # that contains the logical swap and root partitions.

     

       
276
       
-
       
  lvm = makeInstallerTest

     

       
277
       
 
       
    { createPartitions =

     

       
278
       
 
       
        ''

     

       
279
       
 
       
          $machine->succeed(

     
···

       
295
       
 
       
        '';

     

       
296
       
 
       
    };

     

       
297
       
 
       


     

       
298
       
-
       
  swraid = makeInstallerTest

     

       
299
       
 
       
    { createPartitions =

     

       
300
       
 
       
        ''

     

       
301
       
 
       
          $machine->succeed(

     
···

       
328
       
 
       
    };

     

       
329
       
 
       


     

       
330
       
 
       
  # Test a basic install using GRUB 1.

     

       
331
       
-
       
  grub1 = makeInstallerTest

     

       
332
       
 
       
    { createPartitions =

     

       
333
       
 
       
        ''

     

       
334
       
 
       
          $machine->succeed(

     
···

       
348
       
 
       
    };

     

       
349
       
 
       


     

       
350
       
 
       
  # Test an EFI install.

     

       
351
       
-
       
  efi = makeInstallerTest

     

       
352
       
 
       
    { createPartitions =

     

       
353
       
 
       
        ''

     

       
354
       
 
       
          $machine->succeed(

     
···

       
369
       
 
       
  # Rebuild the CD configuration with a little modification.

     

       
370
       
 
       
  rebuildCD = makeTest

     

       
371
       
 
       
    { inherit iso;

     

       
0
       
 
       

     

       
372
       
 
       
      nodes = { };

     

       
373
       
 
       
      testScript =

     

       
374
       
 
       
        ''

     

···

       
215
       
 
       
    '';

     

       
216
       
 
       


     

       
217
       
 
       


     

       
218
       
+
       
  makeInstallerTest = name:

     

       
219
       
 
       
    { createPartitions, testChannel ? false, useEFI ? false, grubVersion ? 2, grubDevice ? "/dev/vda" }:

     

       
220
       
 
       
    makeTest {

     

       
221
       
 
       
      inherit iso;

     

       
222
       
+
       
      name = "installer-" + name;

     

       
223
       
 
       
      nodes = if testChannel then { inherit webserver; } else { };

     

       
224
       
 
       
      testScript = testScriptFun {

     

       
225
       
 
       
        inherit createPartitions testChannel useEFI grubVersion grubDevice;

     
···

       
234
       
 
       


     

       
235
       
 
       
  # The (almost) simplest partitioning scheme: a swap partition and

     

       
236
       
 
       
  # one big filesystem partition.

     

       
237
       
+
       
  simple = makeInstallerTest "simple"

     

       
238
       
 
       
    { createPartitions =

     

       
239
       
 
       
        ''

     

       
240
       
 
       
          $machine->succeed(

     
···

       
252
       
 
       
    };

     

       
253
       
 
       


     

       
254
       
 
       
  # Same as the previous, but now with a separate /boot partition.

     

       
255
       
+
       
  separateBoot = makeInstallerTest "separateBoot"

     

       
256
       
 
       
    { createPartitions =

     

       
257
       
 
       
        ''

     

       
258
       
 
       
          $machine->succeed(

     
···

       
274
       
 
       


     

       
275
       
 
       
  # Create two physical LVM partitions combined into one volume group

     

       
276
       
 
       
  # that contains the logical swap and root partitions.

     

       
277
       
+
       
  lvm = makeInstallerTest "lvm"

     

       
278
       
 
       
    { createPartitions =

     

       
279
       
 
       
        ''

     

       
280
       
 
       
          $machine->succeed(

     
···

       
296
       
 
       
        '';

     

       
297
       
 
       
    };

     

       
298
       
 
       


     

       
299
       
+
       
  swraid = makeInstallerTest "swraid"

     

       
300
       
 
       
    { createPartitions =

     

       
301
       
 
       
        ''

     

       
302
       
 
       
          $machine->succeed(

     
···

       
329
       
 
       
    };

     

       
330
       
 
       


     

       
331
       
 
       
  # Test a basic install using GRUB 1.

     

       
332
       
+
       
  grub1 = makeInstallerTest "grub1"

     

       
333
       
 
       
    { createPartitions =

     

       
334
       
 
       
        ''

     

       
335
       
 
       
          $machine->succeed(

     
···

       
349
       
 
       
    };

     

       
350
       
 
       


     

       
351
       
 
       
  # Test an EFI install.

     

       
352
       
+
       
  efi = makeInstallerTest "efi"

     

       
353
       
 
       
    { createPartitions =

     

       
354
       
 
       
        ''

     

       
355
       
 
       
          $machine->succeed(

     
···

       
370
       
 
       
  # Rebuild the CD configuration with a little modification.

     

       
371
       
 
       
  rebuildCD = makeTest

     

       
372
       
 
       
    { inherit iso;

     

       
373
       
+
       
      name = "rebuild-CD";

     

       
374
       
 
       
      nodes = { };

     

       
375
       
 
       
      testScript =

     

       
376
       
 
       
        ''

     

···

       
2
       
 
       
# solicication/advertisement using radvd works.

     

       
3
       
 
       


     

       
4
       
 
       
import ./make-test.nix {

     

       
0
       
 
       

     

       
5
       
 
       


     

       
6
       
 
       
  nodes =

     

       
7
       
 
       
    { client = { config, pkgs, ... }: { };

     

···

       
2
       
 
       
# solicication/advertisement using radvd works.

     

       
3
       
 
       


     

       
4
       
 
       
import ./make-test.nix {

     

       
5
       
+
       
  name = "ipv6";

     

       
6
       
 
       


     

       
7
       
 
       
  nodes =

     

       
8
       
 
       
    { client = { config, pkgs, ... }: { };

     

···

       
4
       
 
       
#   3. jenkins service not started on slave node

     

       
5
       
 
       


     

       
6
       
 
       
import ./make-test.nix {

     

       
0
       
 
       

     

       
7
       
 
       


     

       
8
       
 
       
  nodes = {

     

       
9
       
 
       


     

···

       
4
       
 
       
#   3. jenkins service not started on slave node

     

       
5
       
 
       


     

       
6
       
 
       
import ./make-test.nix {

     

       
7
       
+
       
  name = "jenkins";

     

       
8
       
 
       


     

       
9
       
 
       
  nodes = {

     

       
10
       
 
       


     

···

       
1
       
 
       
import ./make-test.nix ({ pkgs, ... }: {

     

       
0
       
 
       

     

       
2
       
 
       


     

       
3
       
 
       
  machine =

     

       
4
       
 
       
    { config, pkgs, ... }:

     

···

       
1
       
 
       
import ./make-test.nix ({ pkgs, ... }: {

     

       
2
       
+
       
  name = "kde4";

     

       
3
       
 
       


     

       
4
       
 
       
  machine =

     

       
5
       
 
       
    { config, pkgs, ... }:

     

···

       
1
       
 
       
# Test whether fast reboots via kexec work.

     

       
2
       
 
       


     

       
3
       
 
       
import ./make-test.nix  {

     

       
0
       
 
       

     

       
4
       
 
       


     

       
5
       
 
       
  machine = { config, pkgs, ... }:

     

       
6
       
 
       
    { virtualisation.vlans = [ ]; };

     

···

       
1
       
 
       
# Test whether fast reboots via kexec work.

     

       
2
       
 
       


     

       
3
       
 
       
import ./make-test.nix  {

     

       
4
       
+
       
  name = "kexec";

     

       
5
       
 
       


     

       
6
       
 
       
  machine = { config, pkgs, ... }:

     

       
7
       
 
       
    { virtualisation.vlans = [ ]; };

     

···

       
1
       
 
       
import ./make-test.nix ({ pkgs, latestKernel ? false, ... }:

     

       
2
       
 
       


     

       
3
       
 
       
{

     

       
0
       
 
       

     

       
4
       
 
       


     

       
5
       
 
       
  machine =

     

       
6
       
 
       
    { config, pkgs, lib, ... }:

     

···

       
1
       
 
       
import ./make-test.nix ({ pkgs, latestKernel ? false, ... }:

     

       
2
       
 
       


     

       
3
       
 
       
{

     

       
4
       
+
       
  name = "login";

     

       
5
       
 
       


     

       
6
       
 
       
  machine =

     

       
7
       
 
       
    { config, pkgs, lib, ... }:

     

···

       
2
       
 
       
# elasticsearch is started.

     

       
3
       
 
       


     

       
4
       
 
       
import ./make-test.nix {

     

       
0
       
 
       

     

       
5
       
 
       


     

       
6
       
 
       
  nodes = {

     

       
7
       
 
       
    one =

     

···

       
2
       
 
       
# elasticsearch is started.

     

       
3
       
 
       


     

       
4
       
 
       
import ./make-test.nix {

     

       
5
       
+
       
  name = "logstash";

     

       
6
       
 
       


     

       
7
       
 
       
  nodes = {

     

       
8
       
 
       
    one =

     

···

       
1
       
 
       
# Miscellaneous small tests that don't warrant their own VM run.

     

       
2
       
 
       


     

       
3
       
 
       
import ./make-test.nix {

     

       
0
       
 
       

     

       
4
       
 
       


     

       
5
       
 
       
  machine =

     

       
6
       
 
       
    { config, lib, pkgs, ... }:

     

···

       
1
       
 
       
# Miscellaneous small tests that don't warrant their own VM run.

     

       
2
       
 
       


     

       
3
       
 
       
import ./make-test.nix {

     

       
4
       
+
       
  name = "misc";

     

       
5
       
 
       


     

       
6
       
 
       
  machine =

     

       
7
       
 
       
    { config, lib, pkgs, ... }:

     

···

       
1
       
 
       
# Simple example to showcase distributed tests using NixOS VMs.

     

       
2
       
 
       


     

       
3
       
 
       
import ./make-test.nix {

     

       
0
       
 
       

     

       
0
       
 
       

     

       
4
       
 
       
  nodes = {

     

       
5
       
 
       
    master =

     

       
6
       
 
       
      { config, pkgs, ... }: {

     

···

       
1
       
 
       
# Simple example to showcase distributed tests using NixOS VMs.

     

       
2
       
 
       


     

       
3
       
 
       
import ./make-test.nix {

     

       
4
       
+
       
  name = "mpich";

     

       
5
       
+
       


     

       
6
       
 
       
  nodes = {

     

       
7
       
 
       
    master =

     

       
8
       
 
       
      { config, pkgs, ... }: {

     

···

       
7
       
 
       
  };

     

       
8
       
 
       
in

     

       
9
       
 
       
{

     

       
0
       
 
       

     

       
0
       
 
       

     

       
10
       
 
       
  nodes = {

     

       
11
       
 
       
    server = { config, pkgs, ... }: {

     

       
12
       
 
       
      services.murmur.enable       = true;