nexus: Add module for nexus.

Add also myself as maintainer
Add simple test of the nexus service

Changed files
+136
lib
nixos
modules
services
web-apps
tests
+1
lib/maintainers.nix
···
igsha = "Igor Sharonov <igor.sharonov@gmail.com>";
ikervagyok = "Balázs Lengyel <ikervagyok@gmail.com>";
infinisil = "Silvan Mosberger <infinisil@icloud.com>";
ivan-tkatchev = "Ivan Tkatchev <tkatchev@gmail.com>";
j-keck = "Jürgen Keck <jhyphenkeck@gmail.com>";
jagajaga = "Arseniy Seroka <ars.seroka@gmail.com>";
···
igsha = "Igor Sharonov <igor.sharonov@gmail.com>";
ikervagyok = "Balázs Lengyel <ikervagyok@gmail.com>";
infinisil = "Silvan Mosberger <infinisil@icloud.com>";
+
ironpinguin = "Michele Catalano <michele@catalano.de>";
ivan-tkatchev = "Ivan Tkatchev <tkatchev@gmail.com>";
j-keck = "Jürgen Keck <jhyphenkeck@gmail.com>";
jagajaga = "Arseniy Seroka <ars.seroka@gmail.com>";
+1
nixos/modules/module-list.nix
···
./services/web-apps/frab.nix
./services/web-apps/mattermost.nix
./services/web-apps/nixbot.nix
./services/web-apps/pgpkeyserver-lite.nix
./services/web-apps/piwik.nix
./services/web-apps/pump.io.nix
···
./services/web-apps/frab.nix
./services/web-apps/mattermost.nix
./services/web-apps/nixbot.nix
+
./services/web-apps/nexus.nix
./services/web-apps/pgpkeyserver-lite.nix
./services/web-apps/piwik.nix
./services/web-apps/pump.io.nix
+100
nixos/modules/services/web-apps/nexus.nix
···
···
+
{ config, lib, pkgs, ... }:
+
+
with lib;
+
+
let
+
+
cfg = config.services.nexus;
+
+
in
+
+
{
+
options = {
+
services.nexus = {
+
enable = mkEnableOption "SonarType Nexus3 OSS service";
+
+
user = mkOption {
+
type = types.str;
+
default = "nexus";
+
description = "User which runs Nexus3.";
+
};
+
+
group = mkOption {
+
type = types.str;
+
default = "nexus";
+
description = "Group which runs Nexus3.";
+
};
+
+
home = mkOption {
+
type = types.str;
+
default = "/var/lib/sonatype-work";
+
description = "Home directory of the Nexus3 instance.";
+
};
+
+
listenAddress = mkOption {
+
type = types.str;
+
default = "127.0.0.1";
+
description = "Address to listen on.";
+
};
+
+
listenPort = mkOption {
+
type = types.int;
+
default = 8081;
+
description = "Port to listen on.";
+
};
+
};
+
};
+
+
config = mkIf cfg.enable {
+
users.extraUsers."${cfg.user}" = {
+
isSystemUser = true;
+
group = cfg.group;
+
};
+
+
users.extraGroups."${cfg.group}" = {};
+
+
systemd.services.nexus = {
+
description = "SonarType Nexus3";
+
+
wantedBy = [ "multi-user.target" ];
+
+
path = [ cfg.home ];
+
+
environment = {
+
NEXUS_USER = cfg.user;
+
NEXUS_HOME = cfg.home;
+
};
+
+
preStart = ''
+
mkdir -p ${cfg.home}/nexus3/etc
+
+
ln -sf ${cfg.home} /run/sonatype-work
+
+
chown -R ${cfg.user}:${cfg.group} ${cfg.home}
+
+
if [ ! -f ${cfg.home}/nexus3/etc/nexus.properties ]; then
+
echo "# Jetty section" > ${cfg.home}/nexus3/etc/nexus.properties
+
echo "application-port=${toString cfg.listenPort}" >> ${cfg.home}/nexus3/etc/nexus.properties
+
echo "application-host=${toString cfg.listenAddress}" >> ${cfg.home}/nexus3/etc/nexus.properties
+
else
+
sed 's/^application-port=.*/application-port=${toString cfg.listenPort}/' -i ${cfg.home}/nexus3/etc/nexus.properties
+
sed 's/^# application-port=.*/application-port=${toString cfg.listenPort}/' -i ${cfg.home}/nexus3/etc/nexus.properties
+
sed 's/^application-host=.*/application-host=${toString cfg.listenAddress}/' -i ${cfg.home}/nexus3/etc/nexus.properties
+
sed 's/^# application-host=.*/application-host=${toString cfg.listenAddress}/' -i ${cfg.home}/nexus3/etc/nexus.properties
+
fi
+
'';
+
+
script = "${pkgs.nexus}/bin/nexus run";
+
+
serviceConfig = {
+
User = cfg.user;
+
Group = cfg.group;
+
PrivateTmp = true;
+
PermissionsStartOnly = true;
+
LimitNOFILE = 102642;
+
};
+
};
+
};
+
+
meta.maintainers = with stdenv.lib.maintainers; [ ironpinguin ];
+
}
+34
nixos/tests/nexus.nix
···
···
+
# verifies:
+
# 1. nexus service starts on server
+
# 2. nexus user can be extended on server
+
# 3. nexus service not can startup on server (creating database and all other initial stuff)
+
+
import ./make-test.nix ({ pkgs, ...} : {
+
name = "nexus";
+
meta = with pkgs.stdenv.lib.maintainers; {
+
maintainers = [ ironpinguin ];
+
};
+
+
nodes = {
+
+
server =
+
{ config, pkgs, ... }:
+
{ virtualisation.memorySize = 2048;
+
+
services.nexus.enable = true;
+
+
users.extraUsers.nexus.extraGroups = [ "users" ];
+
};
+
};
+
+
testScript = ''
+
startAll;
+
+
$server->waitForUnit("nexus");
+
+
print $server->execute("sudo -u nexus groups");
+
$server->mustSucceed("sudo -u nexus groups | grep nexus | grep users");
+
+
$server->waitForOpenPort(8081);
+
'';
+
})