···

       
14
       
 
       
    builtins.map

     

       
15
       
 
       
      (subsetname: {

     

       
16
       
 
       
        subsetname = subsetname;

     

       
17
       
-
       
        functions = libDefPos toplib."${subsetname}";

     

       
18
       
 
       
      })

     

       
19
       
 
       
      (builtins.filter

     

       
20
       
-
       
        (name: builtins.isAttrs toplib."${name}")

     

       
21
       
 
       
        (builtins.attrNames toplib));

     

       
22
       
 
       


     

       
23
       
 
       
  nixpkgsLib = pkgs.lib;

     

···

       
14
       
 
       
    builtins.map

     

       
15
       
 
       
      (subsetname: {

     

       
16
       
 
       
        subsetname = subsetname;

     

       
17
       
+
       
        functions = libDefPos toplib.${subsetname};

     

       
18
       
 
       
      })

     

       
19
       
 
       
      (builtins.filter

     

       
20
       
+
       
        (name: builtins.isAttrs toplib.${name})

     

       
21
       
 
       
        (builtins.attrNames toplib));

     

       
22
       
 
       


     

       
23
       
 
       
  nixpkgsLib = pkgs.lib;

     

···

       
446
       
 
       
      if length list < 2

     

       
447
       
 
       
      then # finish

     

       
448
       
 
       
           { result =  list; }

     

       
449
       
-
       
      else if dfsthis ? "cycle"

     

       
450
       
 
       
           then # there's a cycle, starting from the current vertex, return it

     

       
451
       
 
       
                { cycle = reverseList ([ dfsthis.cycle ] ++ dfsthis.visited);

     

       
452
       
 
       
                  inherit (dfsthis) loops; }

     

       
453
       
-
       
           else if toporest ? "cycle"

     

       
454
       
 
       
                then # there's a cycle somewhere else in the graph, return it

     

       
455
       
 
       
                     toporest

     

       
456
       
 
       
                # Slow, but short. Can be made a bit faster with an explicit stack.

     

···

       
446
       
 
       
      if length list < 2

     

       
447
       
 
       
      then # finish

     

       
448
       
 
       
           { result =  list; }

     

       
449
       
+
       
      else if dfsthis ? cycle

     

       
450
       
 
       
           then # there's a cycle, starting from the current vertex, return it

     

       
451
       
 
       
                { cycle = reverseList ([ dfsthis.cycle ] ++ dfsthis.visited);

     

       
452
       
 
       
                  inherit (dfsthis) loops; }

     

       
453
       
+
       
           else if toporest ? cycle

     

       
454
       
 
       
                then # there's a cycle somewhere else in the graph, return it

     

       
455
       
 
       
                     toporest

     

       
456
       
 
       
                # Slow, but short. Can be made a bit faster with an explicit stack.

     

···

       
58
       
 
       
      uname = {

     

       
59
       
 
       
        # uname -s

     

       
60
       
 
       
        system = {

     

       
61
       
-
       
          "linux" = "Linux";

     

       
62
       
-
       
          "windows" = "Windows";

     

       
63
       
-
       
          "darwin" = "Darwin";

     

       
64
       
-
       
          "netbsd" = "NetBSD";

     

       
65
       
-
       
          "freebsd" = "FreeBSD";

     

       
66
       
-
       
          "openbsd" = "OpenBSD";

     

       
67
       
-
       
          "wasi" = "Wasi";

     

       
68
       
 
       
        }.${final.parsed.kernel.name} or null;

     

       
69
       
 
       


     

       
70
       
 
       
         # uname -p

     
···

       
86
       
 
       
        else if final.isx86_64 then "x86_64"

     

       
87
       
 
       
        else if final.isx86 then "i386"

     

       
88
       
 
       
        else {

     

       
89
       
-
       
          "powerpc" = "ppc";

     

       
90
       
-
       
          "powerpcle" = "ppc";

     

       
91
       
-
       
          "powerpc64" = "ppc64";

     

       
92
       
-
       
          "powerpc64le" = "ppc64le";

     

       
93
       
 
       
        }.${final.parsed.cpu.name} or final.parsed.cpu.name;

     

       
94
       
 
       


     

       
95
       
 
       
      emulator = pkgs: let

     

···

       
58
       
 
       
      uname = {

     

       
59
       
 
       
        # uname -s

     

       
60
       
 
       
        system = {

     

       
61
       
+
       
          linux = "Linux";

     

       
62
       
+
       
          windows = "Windows";

     

       
63
       
+
       
          darwin = "Darwin";

     

       
64
       
+
       
          netbsd = "NetBSD";

     

       
65
       
+
       
          freebsd = "FreeBSD";

     

       
66
       
+
       
          openbsd = "OpenBSD";

     

       
67
       
+
       
          wasi = "Wasi";

     

       
68
       
 
       
        }.${final.parsed.kernel.name} or null;

     

       
69
       
 
       


     

       
70
       
 
       
         # uname -p

     
···

       
86
       
 
       
        else if final.isx86_64 then "x86_64"

     

       
87
       
 
       
        else if final.isx86 then "i386"

     

       
88
       
 
       
        else {

     

       
89
       
+
       
          powerpc = "ppc";

     

       
90
       
+
       
          powerpcle = "ppc";

     

       
91
       
+
       
          powerpc64 = "ppc64";

     

       
92
       
+
       
          powerpc64le = "ppc64le";

     

       
93
       
 
       
        }.${final.parsed.cpu.name} or final.parsed.cpu.name;

     

       
94
       
 
       


     

       
95
       
 
       
      emulator = pkgs: let

     

···

       
456
       
 
       
  };

     

       
457
       
 
       


     

       
458
       
 
       
  selectBySystem = system: {

     

       
459
       
-
       
      "i486-linux" = pc32;

     

       
460
       
-
       
      "i586-linux" = pc32;

     

       
461
       
-
       
      "i686-linux" = pc32;

     

       
462
       
-
       
      "x86_64-linux" = pc64;

     

       
463
       
-
       
      "armv5tel-linux" = sheevaplug;

     

       
464
       
-
       
      "armv6l-linux" = raspberrypi;

     

       
465
       
-
       
      "armv7a-linux" = armv7l-hf-multiplatform;

     

       
466
       
-
       
      "armv7l-linux" = armv7l-hf-multiplatform;

     

       
467
       
-
       
      "aarch64-linux" = aarch64-multiplatform;

     

       
468
       
-
       
      "mipsel-linux" = fuloong2f_n32;

     

       
469
       
-
       
      "powerpc64le-linux" = powernv;

     

       
470
       
 
       
    }.${system} or pcBase;

     

       
471
       
 
       
}

     

···

       
456
       
 
       
  };

     

       
457
       
 
       


     

       
458
       
 
       
  selectBySystem = system: {

     

       
459
       
+
       
      i486-linux = pc32;

     

       
460
       
+
       
      i586-linux = pc32;

     

       
461
       
+
       
      i686-linux = pc32;

     

       
462
       
+
       
      x86_64-linux = pc64;

     

       
463
       
+
       
      armv5tel-linux = sheevaplug;

     

       
464
       
+
       
      armv6l-linux = raspberrypi;

     

       
465
       
+
       
      armv7a-linux = armv7l-hf-multiplatform;

     

       
466
       
+
       
      armv7l-linux = armv7l-hf-multiplatform;

     

       
467
       
+
       
      aarch64-linux = aarch64-multiplatform;

     

       
468
       
+
       
      mipsel-linux = fuloong2f_n32;

     

       
469
       
+
       
      powerpc64le-linux = powernv;

     

       
470
       
 
       
    }.${system} or pcBase;

     

       
471
       
 
       
}

     

···

       
42
       
 
       
  # Default type functor

     

       
43
       
 
       
  defaultFunctor = name: {

     

       
44
       
 
       
    inherit name;

     

       
45
       
-
       
    type    = types."${name}" or null;

     

       
46
       
 
       
    wrapped = null;

     

       
47
       
 
       
    payload = null;

     

       
48
       
 
       
    binOp   = a: b: null;

     

···

       
42
       
 
       
  # Default type functor

     

       
43
       
 
       
  defaultFunctor = name: {

     

       
44
       
 
       
    inherit name;

     

       
45
       
+
       
    type    = types.${name} or null;

     

       
46
       
 
       
    wrapped = null;

     

       
47
       
 
       
    payload = null;

     

       
48
       
 
       
    binOp   = a: b: null;

     

···

       
17
       
 
       
        else throw "Unknown QEMU serial device for system '${pkgs.stdenv.hostPlatform.system}'";

     

       
18
       
 
       


     

       
19
       
 
       
  qemuBinary = qemuPkg: {

     

       
20
       
-
       
    "x86_64-linux" = "${qemuPkg}/bin/qemu-kvm -cpu kvm64";

     

       
21
       
-
       
    "armv7l-linux" = "${qemuPkg}/bin/qemu-system-arm -enable-kvm -machine virt -cpu host";

     

       
22
       
-
       
    "aarch64-linux" = "${qemuPkg}/bin/qemu-system-aarch64 -enable-kvm -machine virt,gic-version=host -cpu host";

     

       
23
       
-
       
    "x86_64-darwin" = "${qemuPkg}/bin/qemu-kvm -cpu kvm64";

     

       
24
       
 
       
  }.${pkgs.stdenv.hostPlatform.system} or "${qemuPkg}/bin/qemu-kvm";

     

       
25
       
 
       
}

     

···

       
17
       
 
       
        else throw "Unknown QEMU serial device for system '${pkgs.stdenv.hostPlatform.system}'";

     

       
18
       
 
       


     

       
19
       
 
       
  qemuBinary = qemuPkg: {

     

       
20
       
+
       
    x86_64-linux = "${qemuPkg}/bin/qemu-kvm -cpu kvm64";

     

       
21
       
+
       
    armv7l-linux = "${qemuPkg}/bin/qemu-system-arm -enable-kvm -machine virt -cpu host";

     

       
22
       
+
       
    aarch64-linux = "${qemuPkg}/bin/qemu-system-aarch64 -enable-kvm -machine virt,gic-version=host -cpu host";

     

       
23
       
+
       
    x86_64-darwin = "${qemuPkg}/bin/qemu-kvm -cpu kvm64";

     

       
24
       
 
       
  }.${pkgs.stdenv.hostPlatform.system} or "${qemuPkg}/bin/qemu-kvm";

     

       
25
       
 
       
}

     

···

       
35
       
 
       
                  then "fontconfig"

     

       
36
       
 
       
                  else "fontconfig_${version}";

     

       
37
       
 
       
      makeCache = fontconfig: pkgs.makeFontsCache { inherit fontconfig; fontDirectories = config.fonts.fonts; };

     

       
38
       
-
       
      cache     = makeCache pkgs."${fcPackage}";

     

       
39
       
-
       
      cache32   = makeCache pkgs.pkgsi686Linux."${fcPackage}";

     

       
40
       
 
       
    in

     

       
41
       
 
       
    pkgs.writeText "fc-00-nixos-cache.conf" ''

     

       
42
       
 
       
      <?xml version='1.0'?>

     

···

       
35
       
 
       
                  then "fontconfig"

     

       
36
       
 
       
                  else "fontconfig_${version}";

     

       
37
       
 
       
      makeCache = fontconfig: pkgs.makeFontsCache { inherit fontconfig; fontDirectories = config.fonts.fonts; };

     

       
38
       
+
       
      cache     = makeCache pkgs.${fcPackage};

     

       
39
       
+
       
      cache32   = makeCache pkgs.pkgsi686Linux.${fcPackage};

     

       
40
       
 
       
    in

     

       
41
       
 
       
    pkgs.writeText "fc-00-nixos-cache.conf" ''

     

       
42
       
 
       
      <?xml version='1.0'?>

     

···

       
79
       
 
       
  config = mkIf (config.fonts.fontconfig.enable && cfg.enable) {

     

       
80
       
 
       


     

       
81
       
 
       
    fonts.fontconfig.confPackages = [ confPkg ];

     

       
82
       
-
       
    environment.variables."INFINALITY_FT" = cfg.preset;

     

       
83
       
 
       


     

       
84
       
 
       
  };

     

       
85
       
 
       


     

···

       
79
       
 
       
  config = mkIf (config.fonts.fontconfig.enable && cfg.enable) {

     

       
80
       
 
       


     

       
81
       
 
       
    fonts.fontconfig.confPackages = [ confPkg ];

     

       
82
       
+
       
    environment.variables.INFINALITY_FT = cfg.preset;

     

       
83
       
 
       


     

       
84
       
 
       
  };

     

       
85
       
 
       


     

···

       
50
       
 
       
                    then "fontconfig"

     

       
51
       
 
       
                    else "fontconfig_${version}";

     

       
52
       
 
       
        makeCache = fontconfig: pkgs.makeFontsCache { inherit fontconfig; fontDirectories = config.fonts.fonts; };

     

       
53
       
-
       
        cache     = makeCache pkgs."${fcPackage}";

     

       
54
       
-
       
        cache32   = makeCache pkgs.pkgsi686Linux."${fcPackage}";

     

       
55
       
 
       
      in

     

       
56
       
 
       
      pkgs.writeText "fc-00-nixos-cache.conf" ''

     

       
57
       
 
       
        <?xml version='1.0'?>

     

···

       
50
       
 
       
                    then "fontconfig"

     

       
51
       
 
       
                    else "fontconfig_${version}";

     

       
52
       
 
       
        makeCache = fontconfig: pkgs.makeFontsCache { inherit fontconfig; fontDirectories = config.fonts.fonts; };

     

       
53
       
+
       
        cache     = makeCache pkgs.${fcPackage};

     

       
54
       
+
       
        cache32   = makeCache pkgs.pkgsi686Linux.${fcPackage};

     

       
55
       
 
       
      in

     

       
56
       
 
       
      pkgs.writeText "fc-00-nixos-cache.conf" ''

     

       
57
       
 
       
        <?xml version='1.0'?>

     

···

       
15
       
 
       
    realms = optionalAttrs (lib.all (value: value != null) [

     

       
16
       
 
       
      cfg.defaultRealm cfg.kdc cfg.kerberosAdminServer

     

       
17
       
 
       
    ]) {

     

       
18
       
-
       
      "${cfg.defaultRealm}" = {

     

       
19
       
 
       
        kdc = cfg.kdc;

     

       
20
       
 
       
        admin_server = cfg.kerberosAdminServer;

     

       
21
       
 
       
      };

     
···

       
25
       
 
       
      cfg.domainRealm cfg.defaultRealm

     

       
26
       
 
       
    ]) {

     

       
27
       
 
       
      ".${cfg.domainRealm}" = cfg.defaultRealm;

     

       
28
       
-
       
      "${cfg.domainRealm}" = cfg.defaultRealm;

     

       
29
       
 
       
    };

     

       
30
       
 
       
  };

     

       
31
       
 
       


     

···

       
15
       
 
       
    realms = optionalAttrs (lib.all (value: value != null) [

     

       
16
       
 
       
      cfg.defaultRealm cfg.kdc cfg.kerberosAdminServer

     

       
17
       
 
       
    ]) {

     

       
18
       
+
       
      ${cfg.defaultRealm} = {

     

       
19
       
 
       
        kdc = cfg.kdc;

     

       
20
       
 
       
        admin_server = cfg.kerberosAdminServer;

     

       
21
       
 
       
      };

     
···

       
25
       
 
       
      cfg.domainRealm cfg.defaultRealm

     

       
26
       
 
       
    ]) {

     

       
27
       
 
       
      ".${cfg.domainRealm}" = cfg.defaultRealm;

     

       
28
       
+
       
      ${cfg.domainRealm} = cfg.defaultRealm;

     

       
29
       
 
       
    };

     

       
30
       
 
       
  };

     

       
31
       
 
       


     

···

       
6
       
 
       


     

       
7
       
 
       
  # The set of alternative malloc(3) providers.

     

       
8
       
 
       
  providers = {

     

       
9
       
-
       
    "graphene-hardened" = rec {

     

       
10
       
 
       
      libPath = "${pkgs.graphene-hardened-malloc}/lib/libhardened_malloc.so";

     

       
11
       
 
       
      description = ''

     

       
12
       
 
       
        An allocator designed to mitigate memory corruption attacks, such as

     
···

       
14
       
 
       
      '';

     

       
15
       
 
       
    };

     

       
16
       
 
       


     

       
17
       
-
       
    "jemalloc" = {

     

       
18
       
 
       
      libPath = "${pkgs.jemalloc}/lib/libjemalloc.so";

     

       
19
       
 
       
      description = ''

     

       
20
       
 
       
        A general purpose allocator that emphasizes fragmentation avoidance

     
···

       
22
       
 
       
      '';

     

       
23
       
 
       
    };

     

       
24
       
 
       


     

       
25
       
-
       
    "scudo" = {

     

       
26
       
 
       
      libPath = "${pkgs.llvmPackages.compiler-rt}/lib/linux/libclang_rt.scudo-x86_64.so";

     

       
27
       
 
       
      description = ''

     

       
28
       
 
       
        A user-mode allocator based on LLVM Sanitizer’s CombinedAllocator,

     
···

       
32
       
 
       
    };

     

       
33
       
 
       
  };

     

       
34
       
 
       


     

       
35
       
-
       
  providerConf = providers."${cfg.provider}";

     

       
36
       
 
       


     

       
37
       
 
       
  # An output that contains only the shared library, to avoid

     

       
38
       
 
       
  # needlessly bloating the system closure

     

···

       
6
       
 
       


     

       
7
       
 
       
  # The set of alternative malloc(3) providers.

     

       
8
       
 
       
  providers = {

     

       
9
       
+
       
    graphene-hardened = rec {

     

       
10
       
 
       
      libPath = "${pkgs.graphene-hardened-malloc}/lib/libhardened_malloc.so";

     

       
11
       
 
       
      description = ''

     

       
12
       
 
       
        An allocator designed to mitigate memory corruption attacks, such as

     
···

       
14
       
 
       
      '';

     

       
15
       
 
       
    };

     

       
16
       
 
       


     

       
17
       
+
       
    jemalloc = {

     

       
18
       
 
       
      libPath = "${pkgs.jemalloc}/lib/libjemalloc.so";

     

       
19
       
 
       
      description = ''

     

       
20
       
 
       
        A general purpose allocator that emphasizes fragmentation avoidance

     
···

       
22
       
 
       
      '';

     

       
23
       
 
       
    };

     

       
24
       
 
       


     

       
25
       
+
       
    scudo = {

     

       
26
       
 
       
      libPath = "${pkgs.llvmPackages.compiler-rt}/lib/linux/libclang_rt.scudo-x86_64.so";

     

       
27
       
 
       
      description = ''

     

       
28
       
 
       
        A user-mode allocator based on LLVM Sanitizer’s CombinedAllocator,

     
···

       
32
       
 
       
    };

     

       
33
       
 
       
  };

     

       
34
       
 
       


     

       
35
       
+
       
  providerConf = providers.${cfg.provider};

     

       
36
       
 
       


     

       
37
       
 
       
  # An output that contains only the shared library, to avoid

     

       
38
       
 
       
  # needlessly bloating the system closure

     

···

       
171
       
 
       


     

       
172
       
 
       
    environment.etc =

     

       
173
       
 
       
      { # /etc/services: TCP/UDP port assignments.

     

       
174
       
-
       
        "services".source = pkgs.iana-etc + "/etc/services";

     

       
175
       
 
       


     

       
176
       
 
       
        # /etc/protocols: IP protocol numbers.

     

       
177
       
-
       
        "protocols".source  = pkgs.iana-etc + "/etc/protocols";

     

       
178
       
 
       


     

       
179
       
 
       
        # /etc/hosts: Hostname-to-IP mappings.

     

       
180
       
-
       
        "hosts".text = let

     

       
181
       
 
       
          oneToString = set: ip: ip + " " + concatStringsSep " " set.${ip};

     

       
182
       
 
       
          allToString = set: concatMapStringsSep "\n" (oneToString set) (attrNames set);

     

       
183
       
 
       
        in ''

     
···

       
190
       
 
       


     

       
191
       
 
       
      } // optionalAttrs (pkgs.stdenv.hostPlatform.libc == "glibc") {

     

       
192
       
 
       
        # /etc/rpc: RPC program numbers.

     

       
193
       
-
       
        "rpc".source = pkgs.glibc.out + "/etc/rpc";

     

       
194
       
 
       
      };

     

       
195
       
 
       


     

       
196
       
 
       
      networking.proxy.envVars =

     

···

       
171
       
 
       


     

       
172
       
 
       
    environment.etc =

     

       
173
       
 
       
      { # /etc/services: TCP/UDP port assignments.

     

       
174
       
+
       
        services.source = pkgs.iana-etc + "/etc/services";

     

       
175
       
 
       


     

       
176
       
 
       
        # /etc/protocols: IP protocol numbers.

     

       
177
       
+
       
        protocols.source  = pkgs.iana-etc + "/etc/protocols";

     

       
178
       
 
       


     

       
179
       
 
       
        # /etc/hosts: Hostname-to-IP mappings.

     

       
180
       
+
       
        hosts.text = let

     

       
181
       
 
       
          oneToString = set: ip: ip + " " + concatStringsSep " " set.${ip};

     

       
182
       
 
       
          allToString = set: concatMapStringsSep "\n" (oneToString set) (attrNames set);

     

       
183
       
 
       
        in ''

     
···

       
190
       
 
       


     

       
191
       
 
       
      } // optionalAttrs (pkgs.stdenv.hostPlatform.libc == "glibc") {

     

       
192
       
 
       
        # /etc/rpc: RPC program numbers.

     

       
193
       
+
       
        rpc.source = pkgs.glibc.out + "/etc/rpc";

     

       
194
       
 
       
      };

     

       
195
       
 
       


     

       
196
       
 
       
      networking.proxy.envVars =

     

···

       
78
       
 
       
    };

     

       
79
       
 
       


     

       
80
       
 
       
    # Service executed before suspending/hibernating.

     

       
81
       
-
       
    systemd.services."pre-sleep" =

     

       
82
       
 
       
      { description = "Pre-Sleep Actions";

     

       
83
       
 
       
        wantedBy = [ "sleep.target" ];

     

       
84
       
 
       
        before = [ "sleep.target" ];

     
···

       
89
       
 
       
        serviceConfig.Type = "oneshot";

     

       
90
       
 
       
      };

     

       
91
       
 
       


     

       
92
       
-
       
    systemd.services."post-resume" =

     

       
93
       
 
       
      { description = "Post-Resume Actions";

     

       
94
       
 
       
        after = [ "suspend.target" "hibernate.target" "hybrid-sleep.target" ];

     

       
95
       
 
       
        script =

     

···

       
78
       
 
       
    };

     

       
79
       
 
       


     

       
80
       
 
       
    # Service executed before suspending/hibernating.

     

       
81
       
+
       
    systemd.services.pre-sleep =

     

       
82
       
 
       
      { description = "Pre-Sleep Actions";

     

       
83
       
 
       
        wantedBy = [ "sleep.target" ];

     

       
84
       
 
       
        before = [ "sleep.target" ];

     
···

       
89
       
 
       
        serviceConfig.Type = "oneshot";

     

       
90
       
 
       
      };

     

       
91
       
 
       


     

       
92
       
+
       
    systemd.services.post-resume =

     

       
93
       
 
       
      { description = "Post-Resume Actions";

     

       
94
       
 
       
        after = [ "suspend.target" "hibernate.target" "hybrid-sleep.target" ];

     

       
95
       
 
       
        script =

     

···

       
163
       
 
       
      l  = "ls -alh";

     

       
164
       
 
       
    };

     

       
165
       
 
       


     

       
166
       
-
       
    environment.etc."shells".text =

     

       
167
       
 
       
      ''

     

       
168
       
 
       
        ${concatStringsSep "\n" (map utils.toShellPath cfg.shells)}

     

       
169
       
 
       
        /bin/sh

     
···

       
171
       
 
       


     

       
172
       
 
       
    # For resetting environment with `. /etc/set-environment` when needed

     

       
173
       
 
       
    # and discoverability (see motivation of #30418).

     

       
174
       
-
       
    environment.etc."set-environment".source = config.system.build.setEnvironment;

     

       
175
       
 
       


     

       
176
       
 
       
    system.build.setEnvironment = pkgs.writeText "set-environment"

     

       
177
       
 
       
      ''

     

···

       
163
       
 
       
      l  = "ls -alh";

     

       
164
       
 
       
    };

     

       
165
       
 
       


     

       
166
       
+
       
    environment.etc.shells.text =

     

       
167
       
 
       
      ''

     

       
168
       
 
       
        ${concatStringsSep "\n" (map utils.toShellPath cfg.shells)}

     

       
169
       
 
       
        /bin/sh

     
···

       
171
       
 
       


     

       
172
       
 
       
    # For resetting environment with `. /etc/set-environment` when needed

     

       
173
       
 
       
    # and discoverability (see motivation of #30418).

     

       
174
       
+
       
    environment.etc.set-environment.source = config.system.build.setEnvironment;

     

       
175
       
 
       


     

       
176
       
 
       
    system.build.setEnvironment = pkgs.writeText "set-environment"

     

       
177
       
 
       
      ''

     

···

       
8
       
 
       
      "/share/terminfo"

     

       
9
       
 
       
    ];

     

       
10
       
 
       


     

       
11
       
-
       
    environment.etc."terminfo" = {

     

       
12
       
 
       
      source = "${config.system.path}/share/terminfo";

     

       
13
       
 
       
    };

     

       
14
       
 
       


     

···

       
8
       
 
       
      "/share/terminfo"

     

       
9
       
 
       
    ];

     

       
10
       
 
       


     

       
11
       
+
       
    environment.etc.terminfo = {

     

       
12
       
 
       
      source = "${config.system.path}/share/terminfo";

     

       
13
       
 
       
    };

     

       
14
       
 
       


     

···

       
546
       
 
       
    environment.systemPackages = systemShells;

     

       
547
       
 
       


     

       
548
       
 
       
    environment.etc = {

     

       
549
       
-
       
      "subuid" = {

     

       
550
       
 
       
        text = subuidFile;

     

       
551
       
 
       
        mode = "0644";

     

       
552
       
 
       
      };

     

       
553
       
-
       
      "subgid" = {

     

       
554
       
 
       
        text = subgidFile;

     

       
555
       
 
       
        mode = "0644";

     

       
556
       
 
       
      };

     

···

       
546
       
 
       
    environment.systemPackages = systemShells;

     

       
547
       
 
       


     

       
548
       
 
       
    environment.etc = {

     

       
549
       
+
       
      subuid = {

     

       
550
       
 
       
        text = subuidFile;

     

       
551
       
 
       
        mode = "0644";

     

       
552
       
 
       
      };

     

       
553
       
+
       
      subgid = {

     

       
554
       
 
       
        text = subgidFile;

     

       
555
       
 
       
        mode = "0644";

     

       
556
       
 
       
      };

     

···

       
36
       
 
       
        { inherit (cfg) group; }

     

       
37
       
 
       
      ))

     

       
38
       
 
       
    ];

     

       
39
       
-
       
    users.groups."${cfg.group}" = {};

     

       
40
       
 
       
  };

     

       
41
       
 
       
}

     

···

       
36
       
 
       
        { inherit (cfg) group; }

     

       
37
       
 
       
      ))

     

       
38
       
 
       
    ];

     

       
39
       
+
       
    users.groups.${cfg.group} = {};

     

       
40
       
 
       
  };

     

       
41
       
 
       
}

     

···

       
33
       
 
       


     

       
34
       
 
       
    boot.blacklistedKernelModules = [ "radeon" ];

     

       
35
       
 
       


     

       
36
       
-
       
    environment.etc."ati".source = "${ati_x11}/etc/ati";

     

       
37
       
 
       


     

       
38
       
 
       
  };

     

       
39
       
 
       


     

···

       
33
       
 
       


     

       
34
       
 
       
    boot.blacklistedKernelModules = [ "radeon" ];

     

       
35
       
 
       


     

       
36
       
+
       
    environment.etc.ati.source = "${ati_x11}/etc/ati";

     

       
37
       
 
       


     

       
38
       
 
       
  };

     

       
39
       
 
       


     

···

       
85
       
 
       
    # Generate /etc/os-release.  See

     

       
86
       
 
       
    # https://www.freedesktop.org/software/systemd/man/os-release.html for the

     

       
87
       
 
       
    # format.

     

       
88
       
-
       
    environment.etc."os-release".text =

     

       
89
       
 
       
      ''

     

       
90
       
 
       
        NAME=NixOS

     

       
91
       
 
       
        ID=nixos

     

···

       
85
       
 
       
    # Generate /etc/os-release.  See

     

       
86
       
 
       
    # https://www.freedesktop.org/software/systemd/man/os-release.html for the

     

       
87
       
 
       
    # format.

     

       
88
       
+
       
    environment.etc.os-release.text =

     

       
89
       
 
       
      ''

     

       
90
       
 
       
        NAME=NixOS

     

       
91
       
 
       
        ID=nixos

     

···

       
30
       
 
       
  };

     

       
31
       
 
       


     

       
32
       
 
       
  config = mkIf (cfg.settings != {}) {

     

       
33
       
-
       
    environment.etc."atoprc".text =

     

       
34
       
 
       
      concatStrings (mapAttrsToList (n: v: "${n} ${toString v}\n") cfg.settings);

     

       
35
       
 
       
  };

     

       
36
       
 
       
}

     

···

       
30
       
 
       
  };

     

       
31
       
 
       


     

       
32
       
 
       
  config = mkIf (cfg.settings != {}) {

     

       
33
       
+
       
    environment.etc.atoprc.text =

     

       
34
       
 
       
      concatStrings (mapAttrsToList (n: v: "${n} ${toString v}\n") cfg.settings);

     

       
35
       
 
       
  };

     

       
36
       
 
       
}

     

···

       
159
       
 
       


     

       
160
       
 
       
    };

     

       
161
       
 
       


     

       
162
       
-
       
    environment.etc."profile".text =

     

       
163
       
 
       
      ''

     

       
164
       
 
       
        # /etc/profile: DO NOT EDIT -- this file has been generated automatically.

     

       
165
       
 
       
        # This file is read for login shells.

     
···

       
184
       
 
       
        fi

     

       
185
       
 
       
      '';

     

       
186
       
 
       


     

       
187
       
-
       
    environment.etc."bashrc".text =

     

       
188
       
 
       
      ''

     

       
189
       
 
       
        # /etc/bashrc: DO NOT EDIT -- this file has been generated automatically.

     

       
190
       
 
       


     
···

       
212
       
 
       


     

       
213
       
 
       
    # Configuration for readline in bash. We use "option default"

     

       
214
       
 
       
    # priority to allow user override using both .text and .source.

     

       
215
       
-
       
    environment.etc."inputrc".source = mkOptionDefault ./inputrc;

     

       
216
       
 
       


     

       
217
       
 
       
    users.defaultUserShell = mkDefault pkgs.bashInteractive;

     

       
218
       
 
       


     

···

       
159
       
 
       


     

       
160
       
 
       
    };

     

       
161
       
 
       


     

       
162
       
+
       
    environment.etc.profile.text =

     

       
163
       
 
       
      ''

     

       
164
       
 
       
        # /etc/profile: DO NOT EDIT -- this file has been generated automatically.

     

       
165
       
 
       
        # This file is read for login shells.

     
···

       
184
       
 
       
        fi

     

       
185
       
 
       
      '';

     

       
186
       
 
       


     

       
187
       
+
       
    environment.etc.bashrc.text =

     

       
188
       
 
       
      ''

     

       
189
       
 
       
        # /etc/bashrc: DO NOT EDIT -- this file has been generated automatically.

     

       
190
       
 
       


     
···

       
212
       
 
       


     

       
213
       
 
       
    # Configuration for readline in bash. We use "option default"

     

       
214
       
 
       
    # priority to allow user override using both .text and .source.

     

       
215
       
+
       
    environment.etc.inputrc.source = mkOptionDefault ./inputrc;

     

       
216
       
 
       


     

       
217
       
 
       
    users.defaultUserShell = mkDefault pkgs.bashInteractive;

     

       
218
       
 
       


     

···

       
54
       
 
       
        type = types.attrsOf types.str;

     

       
55
       
 
       
        default = {};

     

       
56
       
 
       
        example = {

     

       
57
       
-
       
          "h" = "noaction 5\e(";

     

       
58
       
-
       
          "l" = "noaction 5\e)";

     

       
59
       
 
       
        };

     

       
60
       
 
       
        description = "Defines new command keys.";

     

       
61
       
 
       
      };

     
···

       
74
       
 
       
        type = types.attrsOf types.str;

     

       
75
       
 
       
        default = {};

     

       
76
       
 
       
        example = {

     

       
77
       
-
       
          "\e" = "abort";

     

       
78
       
 
       
        };

     

       
79
       
 
       
        description = "Defines new line-editing keys.";

     

       
80
       
 
       
      };

     
···

       
111
       
 
       
    environment.systemPackages = [ pkgs.less ];

     

       
112
       
 
       


     

       
113
       
 
       
    environment.variables = {

     

       
114
       
-
       
      "LESSKEY_SYSTEM" = toString lessKey;

     

       
115
       
 
       
    } // optionalAttrs (cfg.lessopen != null) {

     

       
116
       
-
       
      "LESSOPEN" = cfg.lessopen;

     

       
117
       
 
       
    } // optionalAttrs (cfg.lessclose != null) {

     

       
118
       
-
       
      "LESSCLOSE" = cfg.lessclose;

     

       
119
       
 
       
    };

     

       
120
       
 
       


     

       
121
       
 
       
    warnings = optional (

     

···

       
54
       
 
       
        type = types.attrsOf types.str;

     

       
55
       
 
       
        default = {};

     

       
56
       
 
       
        example = {

     

       
57
       
+
       
          h = "noaction 5\e(";

     

       
58
       
+
       
          l = "noaction 5\e)";

     

       
59
       
 
       
        };

     

       
60
       
 
       
        description = "Defines new command keys.";

     

       
61
       
 
       
      };

     
···

       
74
       
 
       
        type = types.attrsOf types.str;

     

       
75
       
 
       
        default = {};

     

       
76
       
 
       
        example = {

     

       
77
       
+
       
          e = "abort";

     

       
78
       
 
       
        };

     

       
79
       
 
       
        description = "Defines new line-editing keys.";

     

       
80
       
 
       
      };

     
···

       
111
       
 
       
    environment.systemPackages = [ pkgs.less ];

     

       
112
       
 
       


     

       
113
       
 
       
    environment.variables = {

     

       
114
       
+
       
      LESSKEY_SYSTEM = toString lessKey;

     

       
115
       
 
       
    } // optionalAttrs (cfg.lessopen != null) {

     

       
116
       
+
       
      LESSOPEN = cfg.lessopen;

     

       
117
       
 
       
    } // optionalAttrs (cfg.lessclose != null) {

     

       
118
       
+
       
      LESSCLOSE = cfg.lessclose;

     

       
119
       
 
       
    };

     

       
120
       
 
       


     

       
121
       
 
       
    warnings = optional (

     

···

       
35
       
 
       
  ###### implementation

     

       
36
       
 
       


     

       
37
       
 
       
  config = lib.mkIf (cfg.nanorc != "" || cfg.syntaxHighlight) {

     

       
38
       
-
       
    environment.etc."nanorc".text = lib.concatStrings [ cfg.nanorc

     

       
39
       
 
       
      (lib.optionalString cfg.syntaxHighlight ''${LF}include "${pkgs.nano}/share/nano/*.nanorc"'') ];

     

       
40
       
 
       
  };

     

       
41
       
 
       


     

···

       
35
       
 
       
  ###### implementation

     

       
36
       
 
       


     

       
37
       
 
       
  config = lib.mkIf (cfg.nanorc != "" || cfg.syntaxHighlight) {

     

       
38
       
+
       
    environment.etc.nanorc.text = lib.concatStrings [ cfg.nanorc

     

       
39
       
 
       
      (lib.optionalString cfg.syntaxHighlight ''${LF}include "${pkgs.nano}/share/nano/*.nanorc"'') ];

     

       
40
       
 
       
  };

     

       
41
       
 
       


     

···

       
36
       
 
       
  ###### implementation

     

       
37
       
 
       


     

       
38
       
 
       
  config = lib.mkIf cfg.enable {

     

       
39
       
-
       
    environment.etc."npmrc".text = cfg.npmrc;

     

       
40
       
 
       


     

       
41
       
 
       
    environment.variables.NPM_CONFIG_GLOBALCONFIG = "/etc/npmrc";

     

       
42
       
 
       


     

···

       
36
       
 
       
  ###### implementation

     

       
37
       
 
       


     

       
38
       
 
       
  config = lib.mkIf cfg.enable {

     

       
39
       
+
       
    environment.etc.npmrc.text = cfg.npmrc;

     

       
40
       
 
       


     

       
41
       
 
       
    environment.variables.NPM_CONFIG_GLOBALCONFIG = "/etc/npmrc";

     

       
42
       
 
       


     

···

       
24
       
 
       
  ###### implementation

     

       
25
       
 
       


     

       
26
       
 
       
  config = mkIf (cfg.screenrc != "") {

     

       
27
       
-
       
    environment.etc."screenrc".text = cfg.screenrc;

     

       
28
       
 
       


     

       
29
       
 
       
    environment.systemPackages = [ pkgs.screen ];

     

       
30
       
 
       
  };

     

···

       
24
       
 
       
  ###### implementation

     

       
25
       
 
       


     

       
26
       
 
       
  config = mkIf (cfg.screenrc != "") {

     

       
27
       
+
       
    environment.etc.screenrc.text = cfg.screenrc;

     

       
28
       
 
       


     

       
29
       
 
       
    environment.systemPackages = [ pkgs.screen ];

     

       
30
       
 
       
  };

     

···

       
61
       
 
       
        description = "Setup of xfs_quota projects. Make sure the filesystem is mounted with the pquota option.";

     

       
62
       
 
       


     

       
63
       
 
       
        example = {

     

       
64
       
-
       
          "projname" = {

     

       
65
       
 
       
            id = 50;

     

       
66
       
 
       
            path = "/xfsprojects/projname";

     

       
67
       
 
       
            sizeHardLimit = "50g";

     

···

       
61
       
 
       
        description = "Setup of xfs_quota projects. Make sure the filesystem is mounted with the pquota option.";

     

       
62
       
 
       


     

       
63
       
 
       
        example = {

     

       
64
       
+
       
          projname = {

     

       
65
       
 
       
            id = 50;

     

       
66
       
 
       
            path = "/xfsprojects/projname";

     

       
67
       
 
       
            sizeHardLimit = "50g";

     

···

       
45
       
 
       


     

       
46
       
 
       
  config = mkIf cfg.enable {

     

       
47
       
 
       


     

       
48
       
-
       
    environment.etc."xonshrc".text = cfg.config;

     

       
49
       
 
       


     

       
50
       
 
       
    environment.systemPackages = [ cfg.package ];

     

       
51
       
 
       


     

···

       
45
       
 
       


     

       
46
       
 
       
  config = mkIf cfg.enable {

     

       
47
       
 
       


     

       
48
       
+
       
    environment.etc.xonshrc.text = cfg.config;

     

       
49
       
 
       


     

       
50
       
 
       
    environment.systemPackages = [ cfg.package ];

     

       
51
       
 
       


     

···

       
135
       
 
       


     

       
136
       
 
       
    programs.zsh.shellAliases = mapAttrs (name: mkDefault) cfge.shellAliases;

     

       
137
       
 
       


     

       
138
       
-
       
    environment.etc."zshenv".text =

     

       
139
       
 
       
      ''

     

       
140
       
 
       
        # /etc/zshenv: DO NOT EDIT -- this file has been generated automatically.

     

       
141
       
 
       
        # This file is read for all shells.

     
···

       
159
       
 
       
        fi

     

       
160
       
 
       
      '';

     

       
161
       
 
       


     

       
162
       
-
       
    environment.etc."zprofile".text =

     

       
163
       
 
       
      ''

     

       
164
       
 
       
        # /etc/zprofile: DO NOT EDIT -- this file has been generated automatically.

     

       
165
       
 
       
        # This file is read for login shells.

     
···

       
178
       
 
       
        fi

     

       
179
       
 
       
      '';

     

       
180
       
 
       


     

       
181
       
-
       
    environment.etc."zshrc".text =

     

       
182
       
 
       
      ''

     

       
183
       
 
       
        # /etc/zshrc: DO NOT EDIT -- this file has been generated automatically.

     

       
184
       
 
       
        # This file is read for interactive shells.

     
···

       
219
       
 
       
        fi

     

       
220
       
 
       
      '';

     

       
221
       
 
       


     

       
222
       
-
       
    environment.etc."zinputrc".source = ./zinputrc;

     

       
223
       
 
       


     

       
224
       
 
       
    environment.systemPackages = [ pkgs.zsh ]

     

       
225
       
 
       
      ++ optional cfg.enableCompletion pkgs.nix-zsh-completions;

     

···

       
135
       
 
       


     

       
136
       
 
       
    programs.zsh.shellAliases = mapAttrs (name: mkDefault) cfge.shellAliases;

     

       
137
       
 
       


     

       
138
       
+
       
    environment.etc.zshenv.text =

     

       
139
       
 
       
      ''

     

       
140
       
 
       
        # /etc/zshenv: DO NOT EDIT -- this file has been generated automatically.

     

       
141
       
 
       
        # This file is read for all shells.

     
···

       
159
       
 
       
        fi

     

       
160
       
 
       
      '';

     

       
161
       
 
       


     

       
162
       
+
       
    environment.etc.zprofile.text =

     

       
163
       
 
       
      ''

     

       
164
       
 
       
        # /etc/zprofile: DO NOT EDIT -- this file has been generated automatically.

     

       
165
       
 
       
        # This file is read for login shells.

     
···

       
178
       
 
       
        fi

     

       
179
       
 
       
      '';

     

       
180
       
 
       


     

       
181
       
+
       
    environment.etc.zshrc.text =

     

       
182
       
 
       
      ''

     

       
183
       
 
       
        # /etc/zshrc: DO NOT EDIT -- this file has been generated automatically.

     

       
184
       
 
       
        # This file is read for interactive shells.

     
···

       
219
       
 
       
        fi

     

       
220
       
 
       
      '';

     

       
221
       
 
       


     

       
222
       
+
       
    environment.etc.zinputrc.source = ./zinputrc;

     

       
223
       
 
       


     

       
224
       
 
       
    environment.systemPackages = [ pkgs.zsh ]

     

       
225
       
 
       
      ++ optional cfg.enableCompletion pkgs.nix-zsh-completions;

     

···

       
378
       
 
       
        })

     

       
379
       
 
       
      );

     

       
380
       
 
       


     

       
381
       
-
       
      systemd.targets."acme-selfsigned-certificates" = mkIf cfg.preliminarySelfsigned {};

     

       
382
       
-
       
      systemd.targets."acme-certificates" = {};

     

       
383
       
 
       
    })

     

       
384
       
 
       


     

       
385
       
 
       
  ];

     

···

       
378
       
 
       
        })

     

       
379
       
 
       
      );

     

       
380
       
 
       


     

       
381
       
+
       
      systemd.targets.acme-selfsigned-certificates = mkIf cfg.preliminarySelfsigned {};

     

       
382
       
+
       
      systemd.targets.acme-certificates = {};

     

       
383
       
 
       
    })

     

       
384
       
 
       


     

       
385
       
 
       
  ];

     

···

       
24
       
 
       


     

       
25
       
 
       
  config = mkIf cfg.enable {

     

       
26
       
 
       
    environment.systemPackages = [ sandbox ];

     

       
27
       
-
       
    security.wrappers."${sandbox.passthru.sandboxExecutableName}".source = "${sandbox}/bin/${sandbox.passthru.sandboxExecutableName}";

     

       
28
       
 
       
  };

     

       
29
       
 
       
}

     

···

       
24
       
 
       


     

       
25
       
 
       
  config = mkIf cfg.enable {

     

       
26
       
 
       
    environment.systemPackages = [ sandbox ];

     

       
27
       
+
       
    security.wrappers.${sandbox.passthru.sandboxExecutableName}.source = "${sandbox}/bin/${sandbox.passthru.sandboxExecutableName}";

     

       
28
       
 
       
  };

     

       
29
       
 
       
}

     

···

       
85
       
 
       


     

       
86
       
 
       
    security.wrappers = {

     

       
87
       
 
       
      pkexec.source = "${pkgs.polkit.bin}/bin/pkexec";

     

       
88
       
-
       
      "polkit-agent-helper-1".source = "${pkgs.polkit.out}/lib/polkit-1/polkit-agent-helper-1";

     

       
89
       
 
       
    };

     

       
90
       
 
       


     

       
91
       
 
       
    systemd.tmpfiles.rules = [

     

···

       
85
       
 
       


     

       
86
       
 
       
    security.wrappers = {

     

       
87
       
 
       
      pkexec.source = "${pkgs.polkit.bin}/bin/pkexec";

     

       
88
       
+
       
      polkit-agent-helper-1.source = "${pkgs.polkit.out}/lib/polkit-1/polkit-agent-helper-1";

     

       
89
       
 
       
    };

     

       
90
       
 
       


     

       
91
       
 
       
    systemd.tmpfiles.rules = [

     

···

       
4
       
 
       


     

       
5
       
 
       
let

     

       
6
       
 
       
  cfg = config.services.prey;

     

       
7
       
-
       
  myPrey = pkgs."prey-bash-client".override {

     

       
8
       
 
       
    apiKey = cfg.apiKey;

     

       
9
       
 
       
    deviceKey = cfg.deviceKey;

     

       
10
       
 
       
  };

     

···

       
4
       
 
       


     

       
5
       
 
       
let

     

       
6
       
 
       
  cfg = config.services.prey;

     

       
7
       
+
       
  myPrey = pkgs.prey-bash-client.override {

     

       
8
       
 
       
    apiKey = cfg.apiKey;

     

       
9
       
 
       
    deviceKey = cfg.deviceKey;

     

       
10
       
 
       
  };

     

···

       
7
       
 
       


     

       
8
       
 
       
  programs =

     

       
9
       
 
       
    (lib.mapAttrsToList

     

       
10
       
-
       
      (n: v: (if v ? "program" then v else v // {program=n;}))

     

       
11
       
 
       
      wrappers);

     

       
12
       
 
       


     

       
13
       
 
       
  securityWrapper = pkgs.stdenv.mkDerivation {

     
···

       
74
       
 
       


     

       
75
       
 
       
  mkWrappedPrograms =

     

       
76
       
 
       
    builtins.map

     

       
77
       
-
       
      (s: if (s ? "capabilities")

     

       
78
       
 
       
          then mkSetcapProgram

     

       
79
       
 
       
                 ({ owner = "root";

     

       
80
       
 
       
                    group = "root";

     

       
81
       
 
       
                  } // s)

     

       
82
       
 
       
          else if

     

       
83
       
-
       
             (s ? "setuid" && s.setuid) ||

     

       
84
       
-
       
             (s ? "setgid" && s.setgid) ||

     

       
85
       
-
       
             (s ? "permissions")

     

       
86
       
 
       
          then mkSetuidProgram s

     

       
87
       
 
       
          else mkSetuidProgram

     

       
88
       
 
       
                 ({ owner  = "root";

     

···

       
7
       
 
       


     

       
8
       
 
       
  programs =

     

       
9
       
 
       
    (lib.mapAttrsToList

     

       
10
       
+
       
      (n: v: (if v ? program then v else v // {program=n;}))

     

       
11
       
 
       
      wrappers);

     

       
12
       
 
       


     

       
13
       
 
       
  securityWrapper = pkgs.stdenv.mkDerivation {

     
···

       
74
       
 
       


     

       
75
       
 
       
  mkWrappedPrograms =

     

       
76
       
 
       
    builtins.map

     

       
77
       
+
       
      (s: if (s ? capabilities)

     

       
78
       
 
       
          then mkSetcapProgram

     

       
79
       
 
       
                 ({ owner = "root";

     

       
80
       
 
       
                    group = "root";

     

       
81
       
 
       
                  } // s)

     

       
82
       
 
       
          else if

     

       
83
       
+
       
             (s ? setuid && s.setuid) ||

     

       
84
       
+
       
             (s ? setgid && s.setgid) ||

     

       
85
       
+
       
             (s ? permissions)

     

       
86
       
 
       
          then mkSetuidProgram s

     

       
87
       
 
       
          else mkSetuidProgram

     

       
88
       
 
       
                 ({ owner  = "root";

     

···

       
99
       
 
       


     

       
100
       
 
       
    boot.kernelModules = optional config.sound.enableOSSEmulation "snd_pcm_oss";

     

       
101
       
 
       


     

       
102
       
-
       
    systemd.services."alsa-store" =

     

       
103
       
 
       
      { description = "Store Sound Card State";

     

       
104
       
 
       
        wantedBy = [ "multi-user.target" ];

     

       
105
       
 
       
        unitConfig.RequiresMountsFor = "/var/lib/alsa";

     

···

       
99
       
 
       


     

       
100
       
 
       
    boot.kernelModules = optional config.sound.enableOSSEmulation "snd_pcm_oss";

     

       
101
       
 
       


     

       
102
       
+
       
    systemd.services.alsa-store =

     

       
103
       
 
       
      { description = "Store Sound Card State";

     

       
104
       
 
       
        wantedBy = [ "multi-user.target" ];

     

       
105
       
 
       
        unitConfig.RequiresMountsFor = "/var/lib/alsa";

     

···

       
103
       
 
       
    }];

     

       
104
       
 
       


     

       
105
       
 
       
    systemd = {

     

       
106
       
-
       
      timers."mysql-backup" = {

     

       
107
       
 
       
        description = "Mysql backup timer";

     

       
108
       
 
       
        wantedBy = [ "timers.target" ];

     

       
109
       
 
       
        timerConfig = {

     
···

       
112
       
 
       
          Unit = "mysql-backup.service";

     

       
113
       
 
       
        };

     

       
114
       
 
       
      };

     

       
115
       
-
       
      services."mysql-backup" = {

     

       
116
       
 
       
        description = "Mysql backup service";

     

       
117
       
 
       
        enable = true;

     

       
118
       
 
       
        serviceConfig = {

     

···

       
103
       
 
       
    }];

     

       
104
       
 
       


     

       
105
       
 
       
    systemd = {

     

       
106
       
+
       
      timers.mysql-backup = {

     

       
107
       
 
       
        description = "Mysql backup timer";

     

       
108
       
 
       
        wantedBy = [ "timers.target" ];

     

       
109
       
 
       
        timerConfig = {

     
···

       
112
       
 
       
          Unit = "mysql-backup.service";

     

       
113
       
 
       
        };

     

       
114
       
 
       
      };

     

       
115
       
+
       
      services.mysql-backup = {

     

       
116
       
 
       
        description = "Mysql backup service";

     

       
117
       
 
       
        enable = true;

     

       
118
       
 
       
        serviceConfig = {

     

···

       
78
       
 
       
  config = mkIf cfg.enable {

     

       
79
       
 
       
    inherit assertions;

     

       
80
       
 
       
    programs.tsmClient.enable = true;

     

       
81
       
-
       
    programs.tsmClient.servers."${cfg.servername}".passwdDir =

     

       
82
       
 
       
      mkDefault "/var/lib/tsm-backup/password";

     

       
83
       
 
       
    systemd.services.tsm-backup = {

     

       
84
       
 
       
      description = "IBM Spectrum Protect (Tivoli Storage Manager) Backup";

     

···

       
78
       
 
       
  config = mkIf cfg.enable {

     

       
79
       
 
       
    inherit assertions;

     

       
80
       
 
       
    programs.tsmClient.enable = true;

     

       
81
       
+
       
    programs.tsmClient.servers.${cfg.servername}.passwdDir =

     

       
82
       
 
       
      mkDefault "/var/lib/tsm-backup/password";

     

       
83
       
 
       
    systemd.services.tsm-backup = {

     

       
84
       
 
       
      description = "IBM Spectrum Protect (Tivoli Storage Manager) Backup";

     

···

       
60
       
 
       
      pkgs.lz4

     

       
61
       
 
       
    ];

     

       
62
       
 
       


     

       
63
       
-
       
    systemd.services."zfs-replication" = {

     

       
64
       
 
       
      after = [

     

       
65
       
 
       
        "zfs-snapshot-daily.service"

     

       
66
       
 
       
        "zfs-snapshot-frequent.service"

     

···

       
60
       
 
       
      pkgs.lz4

     

       
61
       
 
       
    ];

     

       
62
       
 
       


     

       
63
       
+
       
    systemd.services.zfs-replication = {

     

       
64
       
 
       
      after = [

     

       
65
       
 
       
        "zfs-snapshot-daily.service"

     

       
66
       
 
       
        "zfs-snapshot-frequent.service"

     

···

       
361
       
 
       
    environment.systemPackages = [ pkgs.znapzend ];

     

       
362
       
 
       


     

       
363
       
 
       
    systemd.services = {

     

       
364
       
-
       
      "znapzend" = {

     

       
365
       
 
       
        description = "ZnapZend - ZFS Backup System";

     

       
366
       
 
       
        wantedBy    = [ "zfs.target" ];

     

       
367
       
 
       
        after       = [ "zfs.target" ];

     

···

       
361
       
 
       
    environment.systemPackages = [ pkgs.znapzend ];

     

       
362
       
 
       


     

       
363
       
 
       
    systemd.services = {

     

       
364
       
+
       
      znapzend = {

     

       
365
       
 
       
        description = "ZnapZend - ZFS Backup System";

     

       
366
       
 
       
        wantedBy    = [ "zfs.target" ];

     

       
367
       
 
       
        after       = [ "zfs.target" ];

     

···

       
24
       
 
       


     

       
25
       
 
       
  config = mkMerge [

     

       
26
       
 
       
    (mkIf cfg.hdfs.namenode.enabled {

     

       
27
       
-
       
      systemd.services."hdfs-namenode" = {

     

       
28
       
 
       
        description = "Hadoop HDFS NameNode";

     

       
29
       
 
       
        wantedBy = [ "multi-user.target" ];

     

       
30
       
 
       


     
···

       
44
       
 
       
      };

     

       
45
       
 
       
    })

     

       
46
       
 
       
    (mkIf cfg.hdfs.datanode.enabled {

     

       
47
       
-
       
      systemd.services."hdfs-datanode" = {

     

       
48
       
 
       
        description = "Hadoop HDFS DataNode";

     

       
49
       
 
       
        wantedBy = [ "multi-user.target" ];

     

       
50
       
 
       


     

···

       
24
       
 
       


     

       
25
       
 
       
  config = mkMerge [

     

       
26
       
 
       
    (mkIf cfg.hdfs.namenode.enabled {

     

       
27
       
+
       
      systemd.services.hdfs-namenode = {

     

       
28
       
 
       
        description = "Hadoop HDFS NameNode";

     

       
29
       
 
       
        wantedBy = [ "multi-user.target" ];

     

       
30
       
 
       


     
···

       
44
       
 
       
      };

     

       
45
       
 
       
    })

     

       
46
       
 
       
    (mkIf cfg.hdfs.datanode.enabled {

     

       
47
       
+
       
      systemd.services.hdfs-datanode = {

     

       
48
       
 
       
        description = "Hadoop HDFS DataNode";

     

       
49
       
 
       
        wantedBy = [ "multi-user.target" ];

     

       
50
       
 
       


     

···

       
35
       
 
       
    })

     

       
36
       
 
       


     

       
37
       
 
       
    (mkIf cfg.yarn.resourcemanager.enabled {

     

       
38
       
-
       
      systemd.services."yarn-resourcemanager" = {

     

       
39
       
 
       
        description = "Hadoop YARN ResourceManager";

     

       
40
       
 
       
        wantedBy = [ "multi-user.target" ];

     

       
41
       
 
       


     
···

       
53
       
 
       
    })

     

       
54
       
 
       


     

       
55
       
 
       
    (mkIf cfg.yarn.nodemanager.enabled {

     

       
56
       
-
       
      systemd.services."yarn-nodemanager" = {

     

       
57
       
 
       
        description = "Hadoop YARN NodeManager";

     

       
58
       
 
       
        wantedBy = [ "multi-user.target" ];

     

       
59
       
 
       


     

···

       
35
       
 
       
    })

     

       
36
       
 
       


     

       
37
       
 
       
    (mkIf cfg.yarn.resourcemanager.enabled {

     

       
38
       
+
       
      systemd.services.yarn-resourcemanager = {

     

       
39
       
 
       
        description = "Hadoop YARN ResourceManager";

     

       
40
       
 
       
        wantedBy = [ "multi-user.target" ];

     

       
41
       
 
       


     
···

       
53
       
 
       
    })

     

       
54
       
 
       


     

       
55
       
 
       
    (mkIf cfg.yarn.nodemanager.enabled {

     

       
56
       
+
       
      systemd.services.yarn-nodemanager = {

     

       
57
       
 
       
        description = "Hadoop YARN NodeManager";

     

       
58
       
 
       
        wantedBy = [ "multi-user.target" ];

     

       
59
       
 
       


     

···

       
74
       
 
       
        spec = {

     

       
75
       
 
       
          replicas = 1;

     

       
76
       
 
       
          revisionHistoryLimit = 10;

     

       
77
       
-
       
          selector.matchLabels."k8s-app" = "kubernetes-dashboard";

     

       
78
       
 
       
          template = {

     

       
79
       
 
       
            metadata = {

     

       
80
       
 
       
              labels = {

     

···

       
74
       
 
       
        spec = {

     

       
75
       
 
       
          replicas = 1;

     

       
76
       
 
       
          revisionHistoryLimit = 10;

     

       
77
       
+
       
          selector.matchLabels.k8s-app = "kubernetes-dashboard";

     

       
78
       
 
       
          template = {

     

       
79
       
 
       
            metadata = {

     

       
80
       
 
       
              labels = {

     

···

       
73
       
 
       
        metadata = {

     

       
74
       
 
       
          labels = {

     

       
75
       
 
       
            "addonmanager.kubernetes.io/mode" = "Reconcile";

     

       
76
       
-
       
            "k8s-app" = "kube-dns";

     

       
77
       
 
       
            "kubernetes.io/cluster-service" = "true";

     

       
78
       
 
       
            "kubernetes.io/bootstrapping" = "rbac-defaults";

     

       
79
       
 
       
          };

     
···

       
102
       
 
       
          };

     

       
103
       
 
       
          labels = {

     

       
104
       
 
       
            "addonmanager.kubernetes.io/mode" = "Reconcile";

     

       
105
       
-
       
            "k8s-app" = "kube-dns";

     

       
106
       
 
       
            "kubernetes.io/cluster-service" = "true";

     

       
107
       
 
       
            "kubernetes.io/bootstrapping" = "rbac-defaults";

     

       
108
       
 
       
          };

     
···

       
130
       
 
       
        metadata = {

     

       
131
       
 
       
          labels = {

     

       
132
       
 
       
            "addonmanager.kubernetes.io/mode" = "Reconcile";

     

       
133
       
-
       
            "k8s-app" = "kube-dns";

     

       
134
       
 
       
            "kubernetes.io/cluster-service" = "true";

     

       
135
       
 
       
          };

     

       
136
       
 
       
          name = "coredns";

     
···

       
144
       
 
       
        metadata = {

     

       
145
       
 
       
          labels = {

     

       
146
       
 
       
            "addonmanager.kubernetes.io/mode" = cfg.reconcileMode;

     

       
147
       
-
       
            "k8s-app" = "kube-dns";

     

       
148
       
 
       
            "kubernetes.io/cluster-service" = "true";

     

       
149
       
 
       
          };

     

       
150
       
 
       
          name = "coredns";

     
···

       
175
       
 
       
        metadata = {

     

       
176
       
 
       
          labels = {

     

       
177
       
 
       
            "addonmanager.kubernetes.io/mode" = cfg.reconcileMode;

     

       
178
       
-
       
            "k8s-app" = "kube-dns";

     

       
179
       
 
       
            "kubernetes.io/cluster-service" = "true";

     

       
180
       
 
       
            "kubernetes.io/name" = "CoreDNS";

     

       
181
       
 
       
          };

     
···

       
301
       
 
       
          };

     

       
302
       
 
       
          labels = {

     

       
303
       
 
       
            "addonmanager.kubernetes.io/mode" = "Reconcile";

     

       
304
       
-
       
            "k8s-app" = "kube-dns";

     

       
305
       
 
       
            "kubernetes.io/cluster-service" = "true";

     

       
306
       
 
       
            "kubernetes.io/name" = "CoreDNS";

     

       
307
       
 
       
          };

     

···

       
73
       
 
       
        metadata = {

     

       
74
       
 
       
          labels = {

     

       
75
       
 
       
            "addonmanager.kubernetes.io/mode" = "Reconcile";

     

       
76
       
+
       
            k8s-app = "kube-dns";

     

       
77
       
 
       
            "kubernetes.io/cluster-service" = "true";

     

       
78
       
 
       
            "kubernetes.io/bootstrapping" = "rbac-defaults";

     

       
79
       
 
       
          };

     
···

       
102
       
 
       
          };

     

       
103
       
 
       
          labels = {

     

       
104
       
 
       
            "addonmanager.kubernetes.io/mode" = "Reconcile";

     

       
105
       
+
       
            k8s-app = "kube-dns";

     

       
106
       
 
       
            "kubernetes.io/cluster-service" = "true";

     

       
107
       
 
       
            "kubernetes.io/bootstrapping" = "rbac-defaults";

     

       
108
       
 
       
          };

     
···

       
130
       
 
       
        metadata = {

     

       
131
       
 
       
          labels = {

     

       
132
       
 
       
            "addonmanager.kubernetes.io/mode" = "Reconcile";

     

       
133
       
+
       
            k8s-app = "kube-dns";

     

       
134
       
 
       
            "kubernetes.io/cluster-service" = "true";

     

       
135
       
 
       
          };

     

       
136
       
 
       
          name = "coredns";

     
···

       
144
       
 
       
        metadata = {

     

       
145
       
 
       
          labels = {

     

       
146
       
 
       
            "addonmanager.kubernetes.io/mode" = cfg.reconcileMode;

     

       
147
       
+
       
            k8s-app = "kube-dns";

     

       
148
       
 
       
            "kubernetes.io/cluster-service" = "true";

     

       
149
       
 
       
          };

     

       
150
       
 
       
          name = "coredns";

     
···

       
175
       
 
       
        metadata = {

     

       
176
       
 
       
          labels = {

     

       
177
       
 
       
            "addonmanager.kubernetes.io/mode" = cfg.reconcileMode;

     

       
178
       
+
       
            k8s-app = "kube-dns";

     

       
179
       
 
       
            "kubernetes.io/cluster-service" = "true";

     

       
180
       
 
       
            "kubernetes.io/name" = "CoreDNS";

     

       
181
       
 
       
          };

     
···

       
301
       
 
       
          };

     

       
302
       
 
       
          labels = {

     

       
303
       
 
       
            "addonmanager.kubernetes.io/mode" = "Reconcile";

     

       
304
       
+
       
            k8s-app = "kube-dns";

     

       
305
       
 
       
            "kubernetes.io/cluster-service" = "true";

     

       
306
       
 
       
            "kubernetes.io/name" = "CoreDNS";

     

       
307
       
 
       
          };

     

···

       
397
       
 
       
        }

     

       
398
       
 
       
      ];

     

       
399
       
 
       
    users = mkIf (cfg.user == defaultUser) {

     

       
400
       
-
       
      extraUsers."${defaultUser}" =

     

       
401
       
 
       
        {  group = cfg.group;

     

       
402
       
 
       
           home = cfg.homeDir;

     

       
403
       
 
       
           createHome = true;

     

       
404
       
 
       
           uid = config.ids.uids.cassandra;

     

       
405
       
 
       
           description = "Cassandra service user";

     

       
406
       
 
       
        };

     

       
407
       
-
       
      extraGroups."${defaultUser}".gid = config.ids.gids.cassandra;

     

       
408
       
 
       
    };

     

       
409
       
 
       


     

       
410
       
 
       
    systemd.services.cassandra =

     

···

       
397
       
 
       
        }

     

       
398
       
 
       
      ];

     

       
399
       
 
       
    users = mkIf (cfg.user == defaultUser) {

     

       
400
       
+
       
      extraUsers.${defaultUser} =

     

       
401
       
 
       
        {  group = cfg.group;

     

       
402
       
 
       
           home = cfg.homeDir;

     

       
403
       
 
       
           createHome = true;

     

       
404
       
 
       
           uid = config.ids.uids.cassandra;

     

       
405
       
 
       
           description = "Cassandra service user";

     

       
406
       
 
       
        };

     

       
407
       
+
       
      extraGroups.${defaultUser}.gid = config.ids.gids.cassandra;

     

       
408
       
 
       
    };

     

       
409
       
 
       


     

       
410
       
 
       
    systemd.services.cassandra =

     

···

       
59
       
 
       
      type = types.attrsOf types.str;

     

       
60
       
 
       
      default = {};

     

       
61
       
 
       
      example = {

     

       
62
       
-
       
        "nuc-server"  = "hostaddr=192.168.0.100 port=5432 dbname=postgres";

     

       
63
       
-
       
        "mini-server" = "hostaddr=127.0.0.1 port=5432 dbname=postgres sslmode=require";

     

       
64
       
 
       
      };

     

       
65
       
 
       
      description = ''

     

       
66
       
 
       
        pgmanage requires at least one PostgreSQL server be defined.

     
···

       
192
       
 
       
      };

     

       
193
       
 
       
    };

     

       
194
       
 
       
    users = {

     

       
195
       
-
       
      users."${pgmanage}" = {

     

       
196
       
 
       
        name  = pgmanage;

     

       
197
       
 
       
        group = pgmanage;

     

       
198
       
 
       
        home  = cfg.sqlRoot;

     

       
199
       
 
       
        createHome = true;

     

       
200
       
 
       
      };

     

       
201
       
-
       
      groups."${pgmanage}" = {

     

       
202
       
 
       
        name = pgmanage;

     

       
203
       
 
       
      };

     

       
204
       
 
       
    };

     

···

       
59
       
 
       
      type = types.attrsOf types.str;

     

       
60
       
 
       
      default = {};

     

       
61
       
 
       
      example = {

     

       
62
       
+
       
        nuc-server  = "hostaddr=192.168.0.100 port=5432 dbname=postgres";

     

       
63
       
+
       
        mini-server = "hostaddr=127.0.0.1 port=5432 dbname=postgres sslmode=require";

     

       
64
       
 
       
      };

     

       
65
       
 
       
      description = ''

     

       
66
       
 
       
        pgmanage requires at least one PostgreSQL server be defined.

     
···

       
192
       
 
       
      };

     

       
193
       
 
       
    };

     

       
194
       
 
       
    users = {

     

       
195
       
+
       
      users.${pgmanage} = {

     

       
196
       
 
       
        name  = pgmanage;

     

       
197
       
 
       
        group = pgmanage;

     

       
198
       
 
       
        home  = cfg.sqlRoot;

     

       
199
       
 
       
        createHome = true;

     

       
200
       
 
       
      };

     

       
201
       
+
       
      groups.${pgmanage} = {

     

       
202
       
 
       
        name = pgmanage;

     

       
203
       
 
       
      };

     

       
204
       
 
       
    };

     

···

       
202
       
 
       
    ];

     

       
203
       
 
       


     

       
204
       
 
       
    # restart geoclue service when the configuration changes

     

       
205
       
-
       
    systemd.services."geoclue".restartTriggers = [

     

       
206
       
 
       
      config.environment.etc."geoclue/geoclue.conf".source

     

       
207
       
 
       
    ];

     

       
208
       
 
       


     

       
209
       
 
       
    # this needs to run as a user service, since it's associated with the

     

       
210
       
 
       
    # user who is making the requests

     

       
211
       
 
       
    systemd.user.services = mkIf cfg.enableDemoAgent {

     

       
212
       
-
       
      "geoclue-agent" = {

     

       
213
       
 
       
        description = "Geoclue agent";

     

       
214
       
 
       
        script = "${package}/libexec/geoclue-2.0/demos/agent";

     

       
215
       
 
       
        # this should really be `partOf = [ "geoclue.service" ]`, but

     
···

       
219
       
 
       
      };

     

       
220
       
 
       
    };

     

       
221
       
 
       


     

       
222
       
-
       
    services.geoclue2.appConfig."epiphany" = {

     

       
223
       
 
       
      isAllowed = true;

     

       
224
       
 
       
      isSystem = false;

     

       
225
       
 
       
    };

     

       
226
       
 
       


     

       
227
       
-
       
    services.geoclue2.appConfig."firefox" = {

     

       
228
       
 
       
      isAllowed = true;

     

       
229
       
 
       
      isSystem = false;

     

       
230
       
 
       
    };

     

···

       
202
       
 
       
    ];

     

       
203
       
 
       


     

       
204
       
 
       
    # restart geoclue service when the configuration changes

     

       
205
       
+
       
    systemd.services.geoclue.restartTriggers = [

     

       
206
       
 
       
      config.environment.etc."geoclue/geoclue.conf".source

     

       
207
       
 
       
    ];

     

       
208
       
 
       


     

       
209
       
 
       
    # this needs to run as a user service, since it's associated with the

     

       
210
       
 
       
    # user who is making the requests

     

       
211
       
 
       
    systemd.user.services = mkIf cfg.enableDemoAgent {

     

       
212
       
+
       
      geoclue-agent = {

     

       
213
       
 
       
        description = "Geoclue agent";

     

       
214
       
 
       
        script = "${package}/libexec/geoclue-2.0/demos/agent";

     

       
215
       
 
       
        # this should really be `partOf = [ "geoclue.service" ]`, but

     
···

       
219
       
 
       
      };

     

       
220
       
 
       
    };

     

       
221
       
 
       


     

       
222
       
+
       
    services.geoclue2.appConfig.epiphany = {

     

       
223
       
 
       
      isAllowed = true;

     

       
224
       
 
       
      isSystem = false;

     

       
225
       
 
       
    };

     

       
226
       
 
       


     

       
227
       
+
       
    services.geoclue2.appConfig.firefox = {

     

       
228
       
 
       
      isAllowed = true;

     

       
229
       
 
       
      isSystem = false;

     

       
230
       
 
       
    };

     

···

       
4
       
 
       


     

       
5
       
 
       
let

     

       
6
       
 
       
  cfg   = config.services.terraria;

     

       
7
       
-
       
  worldSizeMap = { "small" = 1; "medium" = 2; "large" = 3; };

     

       
8
       
 
       
  valFlag = name: val: optionalString (val != null) "-${name} \"${escape ["\\" "\""] (toString val)}\"";

     

       
9
       
 
       
  boolFlag = name: val: optionalString val "-${name}";

     

       
10
       
 
       
  flags = [ 

     

···

       
4
       
 
       


     

       
5
       
 
       
let

     

       
6
       
 
       
  cfg   = config.services.terraria;

     

       
7
       
+
       
  worldSizeMap = { small = 1; medium = 2; large = 3; };

     

       
8
       
 
       
  valFlag = name: val: optionalString (val != null) "-${name} \"${escape ["\\" "\""] (toString val)}\"";

     

       
9
       
 
       
  boolFlag = name: val: optionalString val "-${name}";

     

       
10
       
 
       
  flags = [ 

     

···

       
124
       
 
       
      environment.sessionVariables = env;

     

       
125
       
 
       
      services.udev.packages = backends;

     

       
126
       
 
       


     

       
127
       
-
       
      users.groups."scanner".gid = config.ids.gids.scanner;

     

       
128
       
 
       
    })

     

       
129
       
 
       


     

       
130
       
 
       
    (mkIf config.services.saned.enable {

     
···

       
152
       
 
       
        };

     

       
153
       
 
       
      };

     

       
154
       
 
       


     

       
155
       
-
       
      users.users."scanner" = {

     

       
156
       
 
       
        uid = config.ids.uids.scanner;

     

       
157
       
 
       
        group = "scanner";

     

       
158
       
 
       
      };

     

···

       
124
       
 
       
      environment.sessionVariables = env;

     

       
125
       
 
       
      services.udev.packages = backends;

     

       
126
       
 
       


     

       
127
       
+
       
      users.groups.scanner.gid = config.ids.gids.scanner;

     

       
128
       
 
       
    })

     

       
129
       
 
       


     

       
130
       
 
       
    (mkIf config.services.saned.enable {

     
···

       
152
       
 
       
        };

     

       
153
       
 
       
      };

     

       
154
       
 
       


     

       
155
       
+
       
      users.users.scanner = {

     

       
156
       
 
       
        uid = config.ids.uids.scanner;

     

       
157
       
 
       
        group = "scanner";

     

       
158
       
 
       
      };

     

···

       
20
       
 
       
  config = mkIf cfg.enable {

     

       
21
       
 
       
    systemd.packages = [ pkgs.throttled ];

     

       
22
       
 
       
    # The upstream package has this in Install, but that's not enough, see the NixOS manual

     

       
23
       
-
       
    systemd.services."lenovo_fix".wantedBy = [ "multi-user.target" ];

     

       
24
       
 
       


     

       
25
       
 
       
    environment.etc."lenovo_fix.conf".source =

     

       
26
       
 
       
      if cfg.extraConfig != ""

     

···

       
20
       
 
       
  config = mkIf cfg.enable {

     

       
21
       
 
       
    systemd.packages = [ pkgs.throttled ];

     

       
22
       
 
       
    # The upstream package has this in Install, but that's not enough, see the NixOS manual

     

       
23
       
+
       
    systemd.services.lenovo_fix.wantedBy = [ "multi-user.target" ];

     

       
24
       
 
       


     

       
25
       
 
       
    environment.etc."lenovo_fix.conf".source =

     

       
26
       
 
       
      if cfg.extraConfig != ""

     

···

       
60
       
 
       
    powerManagement.cpufreq.max = null;

     

       
61
       
 
       
    powerManagement.cpufreq.min = null;

     

       
62
       
 
       


     

       
63
       
-
       
    systemd.sockets."systemd-rfkill".enable = false;

     

       
64
       
 
       


     

       
65
       
 
       
    systemd.services = {

     

       
66
       
 
       
      "systemd-rfkill@".enable = false;

     

       
67
       
-
       
      "systemd-rfkill".enable = false;

     

       
68
       
 
       


     

       
69
       
 
       
      tlp = {

     

       
70
       
 
       
        description = "TLP system startup/shutdown";

     

···

       
60
       
 
       
    powerManagement.cpufreq.max = null;

     

       
61
       
 
       
    powerManagement.cpufreq.min = null;

     

       
62
       
 
       


     

       
63
       
+
       
    systemd.sockets.systemd-rfkill.enable = false;

     

       
64
       
 
       


     

       
65
       
 
       
    systemd.services = {

     

       
66
       
 
       
      "systemd-rfkill@".enable = false;

     

       
67
       
+
       
      systemd-rfkill.enable = false;

     

       
68
       
 
       


     

       
69
       
 
       
      tlp = {

     

       
70
       
 
       
        description = "TLP system startup/shutdown";

     

···

       
23
       
 
       
  flags = "-r ${rulesDir} -c ${configFile} -L ${logFiles} -${levelFlag} -m ${cfg.mailTo}";

     

       
24
       
 
       


     

       
25
       
 
       
  levelFlag = getAttrFromPath [cfg.level]

     

       
26
       
-
       
    { "paranoid"    = "p";

     

       
27
       
-
       
      "server"      = "s";

     

       
28
       
-
       
      "workstation" = "w";

     

       
29
       
 
       
    };

     

       
30
       
 
       


     

       
31
       
 
       
  cronJob = ''

     

···

       
23
       
 
       
  flags = "-r ${rulesDir} -c ${configFile} -L ${logFiles} -${levelFlag} -m ${cfg.mailTo}";

     

       
24
       
 
       


     

       
25
       
 
       
  levelFlag = getAttrFromPath [cfg.level]

     

       
26
       
+
       
    { paranoid    = "p";

     

       
27
       
+
       
      server      = "s";

     

       
28
       
+
       
      workstation = "w";

     

       
29
       
 
       
    };

     

       
30
       
 
       


     

       
31
       
 
       
  cronJob = ''

     

···

       
137
       
 
       
          ${pkgs.postfix}/bin/postmap ${stateDir}/transports

     

       
138
       
 
       
      '';

     

       
139
       
 
       


     

       
140
       
-
       
    systemd.services."mlmmj-maintd" = {

     

       
141
       
 
       
      description = "mlmmj maintenance daemon";

     

       
142
       
 
       
      serviceConfig = {

     

       
143
       
 
       
        User = cfg.user;

     
···

       
146
       
 
       
      };

     

       
147
       
 
       
    };

     

       
148
       
 
       


     

       
149
       
-
       
    systemd.timers."mlmmj-maintd" = {

     

       
150
       
 
       
      description = "mlmmj maintenance timer";

     

       
151
       
 
       
      timerConfig.OnUnitActiveSec = cfg.maintInterval;

     

       
152
       
 
       
      wantedBy = [ "timers.target" ];

     

···

       
137
       
 
       
          ${pkgs.postfix}/bin/postmap ${stateDir}/transports

     

       
138
       
 
       
      '';

     

       
139
       
 
       


     

       
140
       
+
       
    systemd.services.mlmmj-maintd = {

     

       
141
       
 
       
      description = "mlmmj maintenance daemon";

     

       
142
       
 
       
      serviceConfig = {

     

       
143
       
 
       
        User = cfg.user;

     
···

       
146
       
 
       
      };

     

       
147
       
 
       
    };

     

       
148
       
 
       


     

       
149
       
+
       
    systemd.timers.mlmmj-maintd = {

     

       
150
       
 
       
      description = "mlmmj maintenance timer";

     

       
151
       
 
       
      timerConfig.OnUnitActiveSec = cfg.maintInterval;

     

       
152
       
 
       
      wantedBy = [ "timers.target" ];

     

···

       
40
       
 
       
      systemPackages = [ pkgs.pfixtools ];

     

       
41
       
 
       
    };

     

       
42
       
 
       


     

       
43
       
-
       
    systemd.services."pfix-srsd" = {

     

       
44
       
 
       
      description = "Postfix sender rewriting scheme daemon";

     

       
45
       
 
       
      before = [ "postfix.service" ];

     

       
46
       
 
       
      #note that we use requires rather than wants because postfix

     

···

       
40
       
 
       
      systemPackages = [ pkgs.pfixtools ];

     

       
41
       
 
       
    };

     

       
42
       
 
       


     

       
43
       
+
       
    systemd.services.pfix-srsd = {

     

       
44
       
 
       
      description = "Postfix sender rewriting scheme daemon";

     

       
45
       
 
       
      before = [ "postfix.service" ];

     

       
46
       
 
       
      #note that we use requires rather than wants because postfix

     

···

       
877
       
 
       
    }

     

       
878
       
 
       


     

       
879
       
 
       
    (mkIf haveAliases {

     

       
880
       
-
       
      services.postfix.aliasFiles."aliases" = aliasesFile;

     

       
881
       
 
       
    })

     

       
882
       
 
       
    (mkIf haveTransport {

     

       
883
       
-
       
      services.postfix.mapFiles."transport" = transportFile;

     

       
884
       
 
       
    })

     

       
885
       
 
       
    (mkIf haveVirtual {

     

       
886
       
-
       
      services.postfix.mapFiles."virtual" = virtualFile;

     

       
887
       
 
       
    })

     

       
888
       
 
       
    (mkIf haveLocalRecipients {

     

       
889
       
-
       
      services.postfix.mapFiles."local_recipients" = localRecipientMapFile;

     

       
890
       
 
       
    })

     

       
891
       
 
       
    (mkIf cfg.enableHeaderChecks {

     

       
892
       
-
       
      services.postfix.mapFiles."header_checks" = headerChecksFile;

     

       
893
       
 
       
    })

     

       
894
       
 
       
    (mkIf (cfg.dnsBlacklists != []) {

     

       
895
       
-
       
      services.postfix.mapFiles."client_access" = checkClientAccessFile;

     

       
896
       
 
       
    })

     

       
897
       
 
       
  ]);

     

       
898
       
 
       
}

     

···

       
877
       
 
       
    }

     

       
878
       
 
       


     

       
879
       
 
       
    (mkIf haveAliases {

     

       
880
       
+
       
      services.postfix.aliasFiles.aliases = aliasesFile;

     

       
881
       
 
       
    })

     

       
882
       
 
       
    (mkIf haveTransport {

     

       
883
       
+
       
      services.postfix.mapFiles.transport = transportFile;

     

       
884
       
 
       
    })

     

       
885
       
 
       
    (mkIf haveVirtual {

     

       
886
       
+
       
      services.postfix.mapFiles.virtual = virtualFile;

     

       
887
       
 
       
    })

     

       
888
       
 
       
    (mkIf haveLocalRecipients {

     

       
889
       
+
       
      services.postfix.mapFiles.local_recipients = localRecipientMapFile;

     

       
890
       
 
       
    })

     

       
891
       
 
       
    (mkIf cfg.enableHeaderChecks {

     

       
892
       
+
       
      services.postfix.mapFiles.header_checks = headerChecksFile;

     

       
893
       
 
       
    })

     

       
894
       
 
       
    (mkIf (cfg.dnsBlacklists != []) {

     

       
895
       
+
       
      services.postfix.mapFiles.client_access = checkClientAccessFile;

     

       
896
       
 
       
    })

     

       
897
       
 
       
  ]);

     

       
898
       
 
       
}

     

···

       
7
       
 
       
  natural = with types; addCheck int (x: x >= 0);

     

       
8
       
 
       
  natural' = with types; addCheck int (x: x > 0);

     

       
9
       
 
       


     

       
10
       
-
       
  socket = with types; addCheck (either (submodule unixSocket) (submodule inetSocket)) (x: x ? "path" || x ? "port");

     

       
11
       
 
       


     

       
12
       
 
       
  inetSocket = with types; {

     

       
13
       
 
       
    options = {

     
···

       
151
       
 
       
    };

     

       
152
       
 
       


     

       
153
       
 
       
    systemd.services.postgrey = let

     

       
154
       
-
       
      bind-flag = if cfg.socket ? "path" then

     

       
155
       
 
       
        ''--unix=${cfg.socket.path} --socketmode=${cfg.socket.mode}''

     

       
156
       
 
       
      else

     

       
157
       
 
       
        ''--inet=${optionalString (cfg.socket.addr != null) (cfg.socket.addr + ":")}${toString cfg.socket.port}'';