···

       
14
       
 
       
         ++ (concatLists (mapAttrsToList (_k: _v: [ "--client-option" "${_k}=${_v}" ]) cfg.clientOptions))

     

       
15
       
 
       
         ++ [ "--terminal-type" cfg.terminalType ]

     

       
16
       
 
       
         ++ optionals cfg.checkOrigin [ "--check-origin" ]

     

       
0
       
 
       

     

       
17
       
 
       
         ++ [ "--max-clients" (toString cfg.maxClients) ]

     

       
18
       
 
       
         ++ optionals (cfg.indexFile != null) [ "--index" cfg.indexFile ]

     

       
19
       
 
       
         ++ optionals cfg.enableIPv6 [ "--ipv6" ]

     
···

       
73
       
 
       
        type = types.ints.u8;

     

       
74
       
 
       
        default = 1;

     

       
75
       
 
       
        description = lib.mdDoc "Signal to send to the command on session close.";

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
76
       
 
       
      };

     

       
77
       
 
       


     

       
78
       
 
       
      clientOptions = mkOption {

     
···

       
165
       
 
       
      [ { assertion = cfg.enableSSL

     

       
166
       
 
       
            -> cfg.certFile != null && cfg.keyFile != null && cfg.caFile != null;

     

       
167
       
 
       
          message = "SSL is enabled for ttyd, but no certFile, keyFile or caFile has been specified."; }

     

       
0
       
 
       

     

       
0
       
 
       

     

       
168
       
 
       
        { assertion = ! (cfg.interface != null && cfg.socket != null);

     

       
169
       
 
       
          message = "Cannot set both interface and socket for ttyd."; }

     

       
170
       
 
       
        { assertion = (cfg.username != null) == (cfg.passwordFile != null);

     

···

       
14
       
 
       
         ++ (concatLists (mapAttrsToList (_k: _v: [ "--client-option" "${_k}=${_v}" ]) cfg.clientOptions))

     

       
15
       
 
       
         ++ [ "--terminal-type" cfg.terminalType ]

     

       
16
       
 
       
         ++ optionals cfg.checkOrigin [ "--check-origin" ]

     

       
17
       
+
       
         ++ optionals cfg.writeable [ "--writable" ] # the typo is correct

     

       
18
       
 
       
         ++ [ "--max-clients" (toString cfg.maxClients) ]

     

       
19
       
 
       
         ++ optionals (cfg.indexFile != null) [ "--index" cfg.indexFile ]

     

       
20
       
 
       
         ++ optionals cfg.enableIPv6 [ "--ipv6" ]

     
···

       
74
       
 
       
        type = types.ints.u8;

     

       
75
       
 
       
        default = 1;

     

       
76
       
 
       
        description = lib.mdDoc "Signal to send to the command on session close.";

     

       
77
       
+
       
      };

     

       
78
       
+
       


     

       
79
       
+
       
      writeable = mkOption {

     

       
80
       
+
       
        type = types.nullOr types.bool;

     

       
81
       
+
       
        default = null; # null causes an eval error, forcing the user to consider attack surface

     

       
82
       
+
       
        example = true;

     

       
83
       
+
       
        description = lib.mdDoc "Allow clients to write to the TTY.";

     

       
84
       
 
       
      };

     

       
85
       
 
       


     

       
86
       
 
       
      clientOptions = mkOption {

     
···

       
173
       
 
       
      [ { assertion = cfg.enableSSL

     

       
174
       
 
       
            -> cfg.certFile != null && cfg.keyFile != null && cfg.caFile != null;

     

       
175
       
 
       
          message = "SSL is enabled for ttyd, but no certFile, keyFile or caFile has been specified."; }

     

       
176
       
+
       
        { assertion = cfg.writeable != null;

     

       
177
       
+
       
          message = "services.ttyd.writeable must be set"; }

     

       
178
       
 
       
        { assertion = ! (cfg.interface != null && cfg.socket != null);

     

       
179
       
 
       
          message = "Cannot set both interface and socket for ttyd."; }

     

       
180
       
 
       
        { assertion = (cfg.username != null) == (cfg.passwordFile != null);

     

···

       
2
       
 
       
  name = "ttyd";

     

       
3
       
 
       
  meta.maintainers = with lib.maintainers; [ stunkymonkey ];

     

       
4
       
 
       


     

       
5
       
-
       
  nodes.machine = { pkgs, ... }: {

     

       
6
       
 
       
    services.ttyd = {

     

       
7
       
 
       
      enable = true;

     

       
8
       
 
       
      username = "foo";

     

       
9
       
 
       
      passwordFile = pkgs.writeText "password" "bar";

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
10
       
 
       
    };

     

       
11
       
 
       
  };

     

       
12
       
 
       


     

       
13
       
 
       
  testScript = ''

     

       
14
       
-
       
    machine.wait_for_unit("ttyd.service")

     

       
15
       
-
       
    machine.wait_for_open_port(7681)

     

       
16
       
-
       
    response = machine.succeed("curl -vvv -u foo:bar -s -H 'Host: ttyd' http://127.0.0.1:7681/")

     

       
17
       
-
       
    assert '<title>ttyd - Terminal</title>' in response, "Page didn't load successfully"

     

       
0
       
 
       

     

       
18
       
 
       
  '';

     

       
19
       
 
       
})

     

···

       
2
       
 
       
  name = "ttyd";

     

       
3
       
 
       
  meta.maintainers = with lib.maintainers; [ stunkymonkey ];

     

       
4
       
 
       


     

       
5
       
+
       
  nodes.readonly = { pkgs, ... }: {

     

       
6
       
 
       
    services.ttyd = {

     

       
7
       
 
       
      enable = true;

     

       
8
       
 
       
      username = "foo";

     

       
9
       
 
       
      passwordFile = pkgs.writeText "password" "bar";

     

       
10
       
+
       
      writeable = false;

     

       
11
       
+
       
    };

     

       
12
       
+
       
  };

     

       
13
       
+
       


     

       
14
       
+
       
  nodes.writeable = { pkgs, ... }: {

     

       
15
       
+
       
    services.ttyd = {

     

       
16
       
+
       
      enable = true;

     

       
17
       
+
       
      username = "foo";

     

       
18
       
+
       
      passwordFile = pkgs.writeText "password" "bar";

     

       
19
       
+
       
      writeable = true;

     

       
20
       
 
       
    };

     

       
21
       
 
       
  };

     

       
22
       
 
       


     

       
23
       
 
       
  testScript = ''

     

       
24
       
+
       
    for machine in [readonly, writeable]:

     

       
25
       
+
       
      machine.wait_for_unit("ttyd.service")

     

       
26
       
+
       
      machine.wait_for_open_port(7681)

     

       
27
       
+
       
      response = machine.succeed("curl -vvv -u foo:bar -s -H 'Host: ttyd' http://127.0.0.1:7681/")

     

       
28
       
+
       
      assert '<title>ttyd - Terminal</title>' in response, "Page didn't load successfully"

     

       
29
       
 
       
  '';

     

       
30
       
 
       
})