···

       
5
       
 
       
let

     

       
6
       
 
       
  cfg = config.services.powerdns;

     

       
7
       
 
       
  configDir = pkgs.writeTextDir "pdns.conf" "${cfg.extraConfig}";

     

       
0
       
 
       

     

       
8
       
 
       
in {

     

       
9
       
 
       
  options = {

     

       
10
       
 
       
    services.powerdns = {

     
···

       
19
       
 
       
          for details on supported values.

     

       
20
       
 
       
        '';

     

       
21
       
 
       
      };

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
22
       
 
       
    };

     

       
23
       
 
       
  };

     

       
24
       
 
       


     
···

       
31
       
 
       
      after = [ "network.target" "mysql.service" "postgresql.service" "openldap.service" ];

     

       
32
       
 
       


     

       
33
       
 
       
      serviceConfig = {

     

       
34
       
-
       
        ExecStart = [ "" "${pkgs.pdns}/bin/pdns_server --config-dir=${configDir} --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no" ];

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
35
       
 
       
      };

     

       
36
       
 
       
    };

     

       
37
       
 
       


     

···

       
5
       
 
       
let

     

       
6
       
 
       
  cfg = config.services.powerdns;

     

       
7
       
 
       
  configDir = pkgs.writeTextDir "pdns.conf" "${cfg.extraConfig}";

     

       
8
       
+
       
  finalConfigDir = if cfg.secretFile == null then configDir else "/run/pdns";

     

       
9
       
 
       
in {

     

       
10
       
 
       
  options = {

     

       
11
       
 
       
    services.powerdns = {

     
···

       
20
       
 
       
          for details on supported values.

     

       
21
       
 
       
        '';

     

       
22
       
 
       
      };

     

       
23
       
+
       


     

       
24
       
+
       
      secretFile = mkOption {

     

       
25
       
+
       
        type = types.nullOr types.path;

     

       
26
       
+
       
        default = null;

     

       
27
       
+
       
        example = "/run/keys/powerdns.env";

     

       
28
       
+
       
        description = lib.mdDoc ''

     

       
29
       
+
       
          Environment variables from this file will be interpolated into the

     

       
30
       
+
       
          final config file using envsubst with this syntax: `$ENVIRONMENT`

     

       
31
       
+
       
          or `''${VARIABLE}`.

     

       
32
       
+
       
          The file should contain lines formatted as `SECRET_VAR=SECRET_VALUE`.

     

       
33
       
+
       
          This is useful to avoid putting secrets into the nix store.

     

       
34
       
+
       
        '';

     

       
35
       
+
       
      };

     

       
36
       
 
       
    };

     

       
37
       
 
       
  };

     

       
38
       
 
       


     
···

       
45
       
 
       
      after = [ "network.target" "mysql.service" "postgresql.service" "openldap.service" ];

     

       
46
       
 
       


     

       
47
       
 
       
      serviceConfig = {

     

       
48
       
+
       
        EnvironmentFile = lib.optional (cfg.secretFile != null) cfg.secretFile;

     

       
49
       
+
       
        ExecStartPre = lib.optional (cfg.secretFile != null)

     

       
50
       
+
       
          (pkgs.writeShellScript "pdns-pre-start" ''

     

       
51
       
+
       
            umask 077

     

       
52
       
+
       
            ${pkgs.envsubst}/bin/envsubst -i "${configDir}/pdns.conf" > ${finalConfigDir}/pdns.conf

     

       
53
       
+
       
          '');

     

       
54
       
+
       
        ExecStart = [ "" "${pkgs.pdns}/bin/pdns_server --config-dir=${finalConfigDir} --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no" ];

     

       
55
       
 
       
      };

     

       
56
       
 
       
    };

     

       
57