···
cfg = config.services.cassandra;
-
cassandraPackage = cfg.package.override {
-
home = "/var/lib/cassandra";
-
description = "Cassandra role user";
-
cassandraRackDcProperties = ''
-
cluster_name: ${cfg.clusterName}
-
auto_bootstrap: ${boolToString cfg.autoBootstrap}
-
hinted_handoff_enabled: ${boolToString cfg.hintedHandOff}
-
hinted_handoff_throttle_in_kb: ${builtins.toString cfg.hintedHandOffThrottle}
-
max_hints_delivery_threads: 2
-
max_hint_window_in_ms: 10800000 # 3 hours
-
authenticator: ${cfg.authenticator}
-
authorizer: ${cfg.authorizer}
-
permissions_validity_in_ms: 2000
-
partitioner: org.apache.cassandra.dht.Murmur3Partitioner
-
${builtins.concatStringsSep "\n" (map (v: " - "+v) cfg.dataDirs)}
-
commitlog_directory: ${cfg.commitLogDirectory}
-
disk_failure_policy: stop
-
key_cache_save_period: 14400
-
row_cache_size_in_mb: 0
-
row_cache_save_period: 0
-
saved_caches_directory: ${cfg.savedCachesDirectory}
-
commitlog_sync: ${cfg.commitLogSync}
-
commitlog_sync_period_in_ms: ${builtins.toString cfg.commitLogSyncPeriod}
-
commitlog_segment_size_in_mb: 32
-
- class_name: org.apache.cassandra.locator.SimpleSeedProvider
-
- seeds: "${builtins.concatStringsSep "," cfg.seeds}"
-
concurrent_reads: ${builtins.toString cfg.concurrentReads}
-
concurrent_writes: ${builtins.toString cfg.concurrentWrites}
-
memtable_flush_queue_size: 4
-
trickle_fsync_interval_in_kb: 10240
-
listen_address: ${cfg.listenAddress}
-
start_native_transport: true
-
native_transport_port: 9042
-
rpc_address: ${cfg.rpcAddress}
-
thrift_framed_transport_size_in_mb: 15
-
incremental_backups: ${boolToString cfg.incrementalBackups}
-
snapshot_before_compaction: false
-
column_index_size_in_kb: 64
-
in_memory_compaction_limit_in_mb: 64
-
multithreaded_compaction: false
-
compaction_throughput_mb_per_sec: 16
-
compaction_preheat_key_cache: true
-
read_request_timeout_in_ms: 10000
-
range_request_timeout_in_ms: 10000
-
write_request_timeout_in_ms: 10000
-
cas_contention_timeout_in_ms: 1000
-
truncate_request_timeout_in_ms: 60000
-
request_timeout_in_ms: 10000
-
cross_node_timeout: false
-
endpoint_snitch: ${cfg.snitch}
-
dynamic_snitch_update_interval_in_ms: 100
-
dynamic_snitch_reset_interval_in_ms: 600000
-
dynamic_snitch_badness_threshold: 0.1
-
request_scheduler: org.apache.cassandra.scheduler.NoScheduler
-
server_encryption_options:
-
internode_encryption: ${cfg.internodeEncryption}
-
keystore: ${cfg.keyStorePath}
-
keystore_password: ${cfg.keyStorePassword}
-
truststore: ${cfg.trustStorePath}
-
truststore_password: ${cfg.trustStorePassword}
-
client_encryption_options:
-
enabled: ${boolToString cfg.clientEncryption}
-
keystore: ${cfg.keyStorePath}
-
keystore_password: ${cfg.keyStorePassword}
-
internode_compression: all
-
inter_dc_tcp_nodelay: false
-
preheat_kernel_page_cache: false
-
streaming_socket_timeout_in_ms: ${toString cfg.streamingSocketTimoutInMS}
-
log4j.rootLogger=${cfg.logLevel},stdout
-
log4j.appender.stdout=org.apache.log4j.ConsoleAppender
-
log4j.appender.stdout.layout=org.apache.log4j.PatternLayout
-
log4j.appender.stdout.layout.ConversionPattern=%5p [%t] %d{HH:mm:ss,SSS} %m%n
-
cassandraConfFile = pkgs.writeText "cassandra.yaml" cassandraConf;
-
cassandraLogFile = pkgs.writeText "log4j-server.properties" cassandraLog;
-
cassandraRackFile = pkgs.writeText "cassandra-rackdc.properties" cassandraRackDcProperties;
-
cassandraEnvironment = {
-
CASSANDRA_HOME = cassandraPackage;
-
CASSANDRA_CONF = "/etc/cassandra";
options.services.cassandra = {
-
description = "Whether to enable cassandra.";
-
description = "Cassandra package to use.";
-
default = pkgs.cassandra;
-
defaultText = "pkgs.cassandra";
-
description = "JRE package to run cassandra service.";
-
defaultText = "pkgs.jre";
-
description = "User that runs cassandra service.";
-
description = "Group that runs cassandra service.";
-
description = "path to cassandra-env.sh";
-
default = "${cassandraPackage}/conf/cassandra-env.sh";
-
defaultText = "\${cassandraPackage}/conf/cassandra-env.sh";
-
clusterName = mkOption {
-
description = "set cluster name";
-
example = "prod-cluster0";
-
commitLogDirectory = mkOption {
-
description = "directory for commit logs";
-
default = "/var/lib/cassandra/commit_log";
-
savedCachesDirectory = mkOption {
-
description = "directory for saved caches";
-
default = "/var/lib/cassandra/saved_caches";
-
hintedHandOff = mkOption {
-
description = "enable hinted handoff";
-
hintedHandOffThrottle = mkOption {
-
description = "hinted hand off throttle rate in kb";
-
commitLogSync = mkOption {
-
description = "commitlog sync method";
-
commitLogSyncPeriod = mkOption {
-
description = "commitlog sync period in ms ";
-
default = "${cassandraPackage}/conf/cassandra-env.sh";
-
defaultText = "\${cassandraPackage}/conf/cassandra-env.sh";
-
description = "Supply your own cassandra-env.sh rather than using the default";
-
extraParams = mkOption {
-
description = "add additional lines to cassandra-env.sh";
-
example = [''JVM_OPTS="$JVM_OPTS -Dcassandra.available_processors=1"''];
-
type = types.listOf types.str;
-
type = types.listOf types.path;
-
default = [ "/var/lib/cassandra/data" ];
-
description = "Data directories for cassandra";
-
description = "default logging level for log4j";
-
internodeEncryption = mkOption {
-
description = "enable internode encryption";
-
clientEncryption = mkOption {
-
description = "enable client encryption";
-
trustStorePath = mkOption {
-
description = "path to truststore";
-
default = ".conf/truststore";
-
keyStorePath = mkOption {
-
description = "path to keystore";
-
default = ".conf/keystore";
-
keyStorePassword = mkOption {
-
description = "password to keystore";
-
trustStorePassword = mkOption {
-
description = "password to truststore";
-
description = "password to truststore";
-
default = [ "127.0.0.1" ];
type = types.listOf types.str;
-
concurrentWrites = mkOption {
-
description = "number of concurrent writes allowed";
-
concurrentReads = mkOption {
-
description = "number of concurrent reads allowed";
listenAddress = mkOption {
-
description = "listen address";
-
rpcAddress = mkOption {
-
description = "rpc listener address";
-
incrementalBackups = mkOption {
-
description = "enable incremental backups";
-
description = "snitch to use for topology discovery";
-
default = "GossipingPropertyFileSnitch";
-
description = "datacenter for use in topology configuration";
-
description = "rack for use in topology configuration";
-
authorizer = mkOption {
-
Authorization backend, implementing IAuthorizer; used to limit access/provide permissions
-
default = "AllowAllAuthorizer";
-
example = "CassandraAuthorizer";
-
authenticator = mkOption {
-
Authentication backend, implementing IAuthenticator; used to identify users
-
default = "AllowAllAuthenticator";
-
example = "PasswordAuthenticator";
-
autoBootstrap = mkOption {
-
description = "It makes new (non-seed) nodes automatically migrate the right data to themselves.";
-
streamingSocketTimoutInMS = mkOption {
-
description = "Enable or disable socket timeout for streaming operations";
-
default = 3600000; #CASSANDRA-8611
-
repairStartAt = mkOption {
-
Defines realtime (i.e. wallclock) timers with calendar event
-
expressions. For more details re: systemd OnCalendar at
-
https://www.freedesktop.org/software/systemd/man/systemd.time.html#Displaying%20Time%20Spans
-
example = ["weekly" "daily" "08:05:40" "mon,fri *-1/2-1,3 *:30:45"];
-
repairRandomizedDelayInSec = mkOption {
-
description = ''Delay the timer by a randomly selected, evenly distributed
-
amount of time between 0 and the specified time value. re: systemd timer
-
RandomizedDelaySec for more details
-
repairPostStop = mkOption {
-
type = types.nullOr types.string;
-
Run a script when repair is over. One can use it to send statsd events, email, etc.
-
repairPostStart = mkOption {
-
type = types.nullOr types.string;
-
Run a script when repair starts. One can use it to send statsd events, email, etc.
-
It has same semantics as systemd ExecStopPost; So, if it fails, unit is consisdered
-
config = mkIf cfg.enable {
-
environment.etc."cassandra/cassandra-rackdc.properties" = {
-
source = cassandraRackFile;
-
environment.etc."cassandra/cassandra.yaml" = {
-
source = cassandraConfFile;
-
environment.etc."cassandra/log4j-server.properties" = {
-
source = cassandraLogFile;
-
environment.etc."cassandra/cassandra-env.sh" = {
-
${builtins.readFile cfg.envFile}
-
${concatStringsSep "\n" cfg.extraParams}
-
systemd.services.cassandra = {
-
description = "Cassandra Daemon";
-
wantedBy = [ "multi-user.target" ];
-
after = [ "network.target" ];
-
environment = cassandraEnvironment;
-
restartTriggers = [ cassandraConfFile cassandraLogFile cassandraRackFile ];
-
PermissionsStartOnly = true;
-
LimitNOFILE = "100000";
-
LimitMEMLOCK = "infinity";
-
${cassandraPackage}/bin/cassandra -f
-
mkdir -m 0700 -p /etc/cassandra/triggers
-
mkdir -m 0700 -p /var/lib/cassandra /var/log/cassandra
-
chown ${cfg.user} /var/lib/cassandra /var/log/cassandra /etc/cassandra/triggers
-
while ! nodetool status >/dev/null 2>&1; do
-
environment.systemPackages = [ cassandraPackage ];
-
networking.firewall.allowedTCPPorts = [
-
users.users.cassandra =
-
if config.ids.uids ? "cassandra"
-
then { uid = config.ids.uids.cassandra; } // cassandraUser
-
boot.kernel.sysctl."vm.swappiness" = pkgs.lib.mkOptionDefault 0;
-
systemd.timers."cassandra-repair" = {
-
OnCalendar = "${toString cfg.repairStartAt}";
-
RandomizedDelaySec = cfg.repairRandomizedDelayInSec;
-
systemd.services."cassandra-repair" = {
-
description = "Cassandra repair daemon";
-
environment = cassandraEnvironment;
-
script = "${cassandraPackage}/bin/nodetool repair -pr";
-
postStop = mkIf (cfg.repairPostStop != null) cfg.repairPostStop;
-
postStart = mkIf (cfg.repairPostStart != null) cfg.repairPostStart;
pyrox.dev