commit 69a4836df5f586468755d4897cba02fc40dac24e · pyrox.dev/nixpkgs

nixos/doc/manual/release-notes/rl-1709.xml

···

       154
        
             variables as parameters.

     

       155
        
           </para>

     

       156
        
         </listitem>

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       157
        
       </itemizedlist>

     

       158
        
       

     

       159
        
       <para>Other notable improvements:</para>

···

       154
        
             variables as parameters.

     

       155
        
           </para>

     

       156
        
         </listitem>

     

       157
       +
         <listitem>

     

       158
       +
           <para>

     

       159
       +
             <literal>services.firefox.syncserver</literal> now runs by default as a

     

       160
       +
             non-root user. To accomodate this change, the default sqlite database

     

       161
       +
             location has also been changed. Migration should work automatically.

     

       162
       +
             Refer to the description of the options for more details.

     

       163
       +
           </para>

     

       164
       +
         </listitem>

     

       165
        
       </itemizedlist>

     

       166
        
       

     

       167
        
       <para>Other notable improvements:</para>

+49 -3

nixos/modules/services/networking/firefox/sync-server.nix

···

       4
        
       

     

       5
        
       let

     

       6
        
         cfg = config.services.firefox.syncserver;

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       7
        
         syncServerIni = pkgs.writeText "syncserver.ini" ''

     

       8
        
           [DEFAULT]

     

       9
        
           overrides = ${cfg.privateConfig}

     
···

       25
        
           backend = tokenserver.verifiers.LocalVerifier

     

       26
        
           audiences = ${removeSuffix "/" cfg.publicUrl}

     

       27
        
         '';

     

       0
        
       
     

       28
        
       in

     

       29
        
       

     

       30
        
       {

     
···

       65
        
               '';

     

       66
        
             };

     

       67
        
       

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       68
        
             publicUrl = mkOption {

     

       69
        
               type = types.str;

     

       70
        
               default = "http://localhost:5000/";

     
···

       85
        
       

     

       86
        
             sqlUri = mkOption {

     

       87
        
               type = types.str;

     

       88
       -
               default = "sqlite:////var/db/firefox-sync-server.db";

     

       89
        
               example = "postgresql://scott:tiger@localhost/test";

     

       90
        
               description = ''

     

       91
        
                 The location of the database. This URL is composed of

     
···

       126
        
             description = "Firefox Sync Server";

     

       127
        
             wantedBy = [ "multi-user.target" ];

     

       128
        
             path = [ pkgs.coreutils syncServerEnv ];

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       129
        
             preStart = ''

     

       130
        
               if ! test -e ${cfg.privateConfig}; then

     

       131
       -
                 umask u=rwx,g=x,o=x

     

       132
       -
                 mkdir -p $(dirname ${cfg.privateConfig})

     

       133
        
                 echo  > ${cfg.privateConfig} '[syncserver]'

     

       134
        
                 echo >> ${cfg.privateConfig} "secret = $(head -c 20 /dev/urandom | sha1sum | tr -d ' -')"

     

       135
        
               fi

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       136
        
             '';

     

       137
        
             serviceConfig.ExecStart = "${syncServerEnv}/bin/paster serve ${syncServerIni}";

     

       138
        
           };

     

       139
        
       

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       140
        
         };

     

       141
        
       }

···

       4
        
       

     

       5
        
       let

     

       6
        
         cfg = config.services.firefox.syncserver;

     

       7
       +
       

     

       8
       +
         defaultDbLocation = "/var/db/firefox-sync-server/firefox-sync-server.db";

     

       9
       +
         defaultSqlUri = "sqlite:///${defaultDbLocation}";

     

       10
       +
       

     

       11
        
         syncServerIni = pkgs.writeText "syncserver.ini" ''

     

       12
        
           [DEFAULT]

     

       13
        
           overrides = ${cfg.privateConfig}

     
···

       29
        
           backend = tokenserver.verifiers.LocalVerifier

     

       30
        
           audiences = ${removeSuffix "/" cfg.publicUrl}

     

       31
        
         '';

     

       32
       +
       

     

       33
        
       in

     

       34
        
       

     

       35
        
       {

     
···

       70
        
               '';

     

       71
        
             };

     

       72
        
       

     

       73
       +
             user = mkOption {

     

       74
       +
               type = types.str;

     

       75
       +
               default = "syncserver";

     

       76
       +
               description = "User account under which syncserver runs.";

     

       77
       +
             };

     

       78
       +
       

     

       79
       +
             group = mkOption {

     

       80
       +
               type = types.str;

     

       81
       +
               default = "syncserver";

     

       82
       +
               description = "Group account under which syncserver runs.";

     

       83
       +
             };

     

       84
       +
       

     

       85
        
             publicUrl = mkOption {

     

       86
        
               type = types.str;

     

       87
        
               default = "http://localhost:5000/";

     
···

       102
        
       

     

       103
        
             sqlUri = mkOption {

     

       104
        
               type = types.str;

     

       105
       +
               default = defaultSqlUri;

     

       106
        
               example = "postgresql://scott:tiger@localhost/test";

     

       107
        
               description = ''

     

       108
        
                 The location of the database. This URL is composed of

     
···

       143
        
             description = "Firefox Sync Server";

     

       144
        
             wantedBy = [ "multi-user.target" ];

     

       145
        
             path = [ pkgs.coreutils syncServerEnv ];

     

       146
       +
       

     

       147
       +
             serviceConfig = {

     

       148
       +
               User = cfg.user;

     

       149
       +
               Group = cfg.group;

     

       150
       +
               PermissionsStartOnly = true;

     

       151
       +
             };

     

       152
       +
       

     

       153
        
             preStart = ''

     

       154
        
               if ! test -e ${cfg.privateConfig}; then

     

       155
       +
                 mkdir -m 700 -p $(dirname ${cfg.privateConfig})

     

       0
        
       
     

       156
        
                 echo  > ${cfg.privateConfig} '[syncserver]'

     

       157
        
                 echo >> ${cfg.privateConfig} "secret = $(head -c 20 /dev/urandom | sha1sum | tr -d ' -')"

     

       158
        
               fi

     

       159
       +
               chown ${cfg.user}:${cfg.group} ${cfg.privateConfig}

     

       160
       +
             '' + optionalString (cfg.sqlUri == defaultSqlUri) ''

     

       161
       +
               if ! test -e $(dirname ${defaultDbLocation}); then

     

       162
       +
                 mkdir -m 700 -p $(dirname ${defaultDbLocation})

     

       163
       +
                 chown ${cfg.user}:${cfg.group} $(dirname ${defaultDbLocation})

     

       164
       +
               fi

     

       165
       +
               # Move previous database file if it exists

     

       166
       +
               oldDb="/var/db/firefox-sync-server.db"

     

       167
       +
               if test -f $oldDb; then

     

       168
       +
                 mv $oldDb ${defaultDbLocation}

     

       169
       +
                 chown ${cfg.user}:${cfg.group} ${defaultDbLocation}

     

       170
       +
               fi

     

       171
        
             '';

     

       172
        
             serviceConfig.ExecStart = "${syncServerEnv}/bin/paster serve ${syncServerIni}";

     

       173
        
           };

     

       174
        
       

     

       175
       +
           users.extraUsers = optionalAttrs (cfg.user == "syncserver")

     

       176
       +
             (singleton {

     

       177
       +
               name = "syncserver";

     

       178
       +
               group = cfg.group;

     

       179
       +
               isSystemUser = true;

     

       180
       +
             });

     

       181
       +
       

     

       182
       +
           users.extraGroups = optionalAttrs (cfg.group == "syncserver")

     

       183
       +
             (singleton {

     

       184
       +
               name = "syncserver";

     

       185
       +
             });

     

       186
        
         };

     

       187
        
       }