···

       
41
       
 
       
    ${lib.optionalString (cfg.registerHostname != "") "registerHostname=${cfg.registerHostname}"}

     

       
42
       
 
       


     

       
43
       
 
       
    certrequired=${lib.boolToString cfg.clientCertRequired}

     

       
44
       
-
       
    ${lib.optionalString (cfg.sslCert != "") "sslCert=${cfg.sslCert}"}

     

       
45
       
-
       
    ${lib.optionalString (cfg.sslKey != "") "sslKey=${cfg.sslKey}"}

     

       
46
       
-
       
    ${lib.optionalString (cfg.sslCa != "") "sslCA=${cfg.sslCa}"}

     

       
47
       
 
       


     

       
48
       
 
       
    ${lib.optionalString (cfg.dbus != null) "dbus=${cfg.dbus}"}

     

       
49
       
 
       


     
···

       
238
       
 
       
      clientCertRequired = lib.mkEnableOption "requiring clients to authenticate via certificates";

     

       
239
       
 
       


     

       
240
       
 
       
      sslCert = lib.mkOption {

     

       
241
       
-
       
        type = lib.types.str;

     

       
242
       
-
       
        default = "";

     

       
243
       
 
       
        description = "Path to your SSL certificate.";

     

       
244
       
 
       
      };

     

       
245
       
 
       


     

       
246
       
 
       
      sslKey = lib.mkOption {

     

       
247
       
-
       
        type = lib.types.str;

     

       
248
       
-
       
        default = "";

     

       
249
       
 
       
        description = "Path to your SSL key.";

     

       
250
       
 
       
      };

     

       
251
       
 
       


     

       
252
       
 
       
      sslCa = lib.mkOption {

     

       
253
       
-
       
        type = lib.types.str;

     

       
254
       
-
       
        default = "";

     

       
255
       
 
       
        description = "Path to your SSL CA certificate.";

     

       
256
       
 
       
      };

     

       
257
       
 
       


     
···

       
418
       
 
       
    + lib.optionalString cfg.logToFile ''

     

       
419
       
 
       
      rw /var/log/murmur/murmurd.log,

     

       
420
       
 
       
    ''

     

       
421
       
-
       
    + lib.optionalString (cfg.sslCert != "") ''

     

       
422
       
 
       
      r ${cfg.sslCert},

     

       
423
       
 
       
    ''

     

       
424
       
-
       
    + lib.optionalString (cfg.sslKey != "") ''

     

       
425
       
 
       
      r ${cfg.sslKey},

     

       
426
       
 
       
    ''

     

       
427
       
-
       
    + lib.optionalString (cfg.sslCa != "") ''

     

       
428
       
 
       
      r ${cfg.sslCa},

     

       
429
       
 
       
    ''

     

       
430
       
 
       
    + lib.optionalString (cfg.dbus != null) ''

     

···

       
41
       
 
       
    ${lib.optionalString (cfg.registerHostname != "") "registerHostname=${cfg.registerHostname}"}

     

       
42
       
 
       


     

       
43
       
 
       
    certrequired=${lib.boolToString cfg.clientCertRequired}

     

       
44
       
+
       
    ${lib.optionalString (cfg.sslCert != null) "sslCert=${cfg.sslCert}"}

     

       
45
       
+
       
    ${lib.optionalString (cfg.sslKey != null) "sslKey=${cfg.sslKey}"}

     

       
46
       
+
       
    ${lib.optionalString (cfg.sslCa != null) "sslCA=${cfg.sslCa}"}

     

       
47
       
 
       


     

       
48
       
 
       
    ${lib.optionalString (cfg.dbus != null) "dbus=${cfg.dbus}"}

     

       
49
       
 
       


     
···

       
238
       
 
       
      clientCertRequired = lib.mkEnableOption "requiring clients to authenticate via certificates";

     

       
239
       
 
       


     

       
240
       
 
       
      sslCert = lib.mkOption {

     

       
241
       
+
       
        type = lib.types.nullOr lib.types.path;

     

       
242
       
+
       
        default = null;

     

       
243
       
 
       
        description = "Path to your SSL certificate.";

     

       
244
       
 
       
      };

     

       
245
       
 
       


     

       
246
       
 
       
      sslKey = lib.mkOption {

     

       
247
       
+
       
        type = lib.types.nullOr lib.types.path;

     

       
248
       
+
       
        default = null;

     

       
249
       
 
       
        description = "Path to your SSL key.";

     

       
250
       
 
       
      };

     

       
251
       
 
       


     

       
252
       
 
       
      sslCa = lib.mkOption {

     

       
253
       
+
       
        type = lib.types.nullOr lib.types.path;

     

       
254
       
+
       
        default = null;

     

       
255
       
 
       
        description = "Path to your SSL CA certificate.";

     

       
256
       
 
       
      };

     

       
257
       
 
       


     
···

       
418
       
 
       
    + lib.optionalString cfg.logToFile ''

     

       
419
       
 
       
      rw /var/log/murmur/murmurd.log,

     

       
420
       
 
       
    ''

     

       
421
       
+
       
    + lib.optionalString (cfg.sslCert != null) ''

     

       
422
       
 
       
      r ${cfg.sslCert},

     

       
423
       
 
       
    ''

     

       
424
       
+
       
    + lib.optionalString (cfg.sslKey != null) ''

     

       
425
       
 
       
      r ${cfg.sslKey},

     

       
426
       
 
       
    ''

     

       
427
       
+
       
    + lib.optionalString (cfg.sslCa != null) ''

     

       
428
       
 
       
      r ${cfg.sslCa},

     

       
429
       
 
       
    ''

     

       
430
       
 
       
    + lib.optionalString (cfg.dbus != null) ''