···

       
21
       
 
       
        configure a number of bepasty servers which will be started with

     

       
22
       
 
       
        gunicorn.

     

       
23
       
 
       
        '';

     

       
24
       
-
       
      type = with types ; attrsOf (submodule ({

     

       
25
       
 
       


     

       
26
       
 
       
        options = {

     

       
27
       
 
       


     
···

       
33
       
 
       
            example = "0.0.0.0:8000";

     

       
34
       
 
       
            default = "127.0.0.1:8000";

     

       
35
       
 
       
          };

     

       
36
       
-
       


     

       
37
       
 
       


     

       
38
       
 
       
          dataDir = mkOption {

     

       
39
       
 
       
            type = types.str;

     
···

       
73
       
 
       
            type = types.str;

     

       
74
       
 
       
            description = ''

     

       
75
       
 
       
              server secret for safe session cookies, must be set.

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
76
       
 
       
              '';

     

       
77
       
 
       
            default = "";

     

       
78
       
 
       
          };

     

       
79
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
80
       
 
       
          workDir = mkOption {

     

       
81
       
 
       
            type = types.str;

     

       
82
       
 
       
            description = ''

     
···

       
87
       
 
       
          };

     

       
88
       
 
       


     

       
89
       
 
       
        };

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
90
       
 
       
      }));

     

       
91
       
 
       
    };

     

       
92
       
 
       
  };

     

       
93
       
 
       


     

       
94
       
 
       
  config = mkIf cfg.enable {

     

       
0
       
 
       

     

       
95
       
 
       
    environment.systemPackages = [ bepasty ];

     

       
96
       
 
       


     

       
97
       
 
       
    # creates gunicorn systemd service for each configured server

     
···

       
115
       
 
       
          serviceConfig = {

     

       
116
       
 
       
            Type = "simple";

     

       
117
       
 
       
            PrivateTmp = true;

     

       
118
       
-
       
            ExecStartPre = assert server.secretKey != ""; pkgs.writeScript "bepasty-server.${name}-init" ''

     

       
119
       
 
       
              #!/bin/sh

     

       
120
       
 
       
              mkdir -p "${server.workDir}"

     

       
121
       
 
       
              mkdir -p "${server.dataDir}"

     
···

       
123
       
 
       
              cat > ${server.workDir}/bepasty-${name}.conf <<EOF

     

       
124
       
 
       
              SITENAME="${name}"

     

       
125
       
 
       
              STORAGE_FILESYSTEM_DIRECTORY="${server.dataDir}"

     

       
126
       
-
       
              SECRET_KEY="${server.secretKey}"

     

       
127
       
 
       
              DEFAULT_PERMISSIONS="${server.defaultPermissions}"

     

       
128
       
 
       
              ${server.extraConfig}

     

       
129
       
 
       
              EOF

     

···

       
21
       
 
       
        configure a number of bepasty servers which will be started with

     

       
22
       
 
       
        gunicorn.

     

       
23
       
 
       
        '';

     

       
24
       
+
       
      type = with types ; attrsOf (submodule ({ config, ... } : {

     

       
25
       
 
       


     

       
26
       
 
       
        options = {

     

       
27
       
 
       


     
···

       
33
       
 
       
            example = "0.0.0.0:8000";

     

       
34
       
 
       
            default = "127.0.0.1:8000";

     

       
35
       
 
       
          };

     

       
0
       
 
       

     

       
36
       
 
       


     

       
37
       
 
       
          dataDir = mkOption {

     

       
38
       
 
       
            type = types.str;

     
···

       
72
       
 
       
            type = types.str;

     

       
73
       
 
       
            description = ''

     

       
74
       
 
       
              server secret for safe session cookies, must be set.

     

       
75
       
+
       


     

       
76
       
+
       
              Warning: this secret is stored in the WORLD-READABLE Nix store!

     

       
77
       
+
       


     

       
78
       
+
       
              It's recommended to use <option>secretKeyFile</option>

     

       
79
       
+
       
              which takes precedence over <option>secretKey</option>.

     

       
80
       
 
       
              '';

     

       
81
       
 
       
            default = "";

     

       
82
       
 
       
          };

     

       
83
       
 
       


     

       
84
       
+
       
          secretKeyFile = mkOption {

     

       
85
       
+
       
            type = types.nullOr types.str;

     

       
86
       
+
       
            default = null;

     

       
87
       
+
       
            description = ''

     

       
88
       
+
       
              A file that contains the server secret for safe session cookies, must be set.

     

       
89
       
+
       


     

       
90
       
+
       
              <option>secretKeyFile</option> takes precedence over <option>secretKey</option>.

     

       
91
       
+
       


     

       
92
       
+
       
              Warning: when <option>secretKey</option> is non-empty <option>secretKeyFile</option>

     

       
93
       
+
       
              defaults to a file in the WORLD-READABLE Nix store containing that secret.

     

       
94
       
+
       
              '';

     

       
95
       
+
       
          };

     

       
96
       
+
       


     

       
97
       
 
       
          workDir = mkOption {

     

       
98
       
 
       
            type = types.str;

     

       
99
       
 
       
            description = ''

     
···

       
104
       
 
       
          };

     

       
105
       
 
       


     

       
106
       
 
       
        };

     

       
107
       
+
       
        config = {

     

       
108
       
+
       
          secretKeyFile = mkDefault (

     

       
109
       
+
       
            if config.secretKey != ""

     

       
110
       
+
       
            then toString (pkgs.writeTextFile {

     

       
111
       
+
       
              name = "bepasty-secret-key";

     

       
112
       
+
       
              text = config.secretKey;

     

       
113
       
+
       
            })

     

       
114
       
+
       
            else null

     

       
115
       
+
       
          );

     

       
116
       
+
       
        };

     

       
117
       
 
       
      }));

     

       
118
       
 
       
    };

     

       
119
       
 
       
  };

     

       
120
       
 
       


     

       
121
       
 
       
  config = mkIf cfg.enable {

     

       
122
       
+
       


     

       
123
       
 
       
    environment.systemPackages = [ bepasty ];

     

       
124
       
 
       


     

       
125
       
 
       
    # creates gunicorn systemd service for each configured server

     
···

       
143
       
 
       
          serviceConfig = {

     

       
144
       
 
       
            Type = "simple";

     

       
145
       
 
       
            PrivateTmp = true;

     

       
146
       
+
       
            ExecStartPre = assert !isNull server.secretKeyFile; pkgs.writeScript "bepasty-server.${name}-init" ''

     

       
147
       
 
       
              #!/bin/sh

     

       
148
       
 
       
              mkdir -p "${server.workDir}"

     

       
149
       
 
       
              mkdir -p "${server.dataDir}"

     
···

       
151
       
 
       
              cat > ${server.workDir}/bepasty-${name}.conf <<EOF

     

       
152
       
 
       
              SITENAME="${name}"

     

       
153
       
 
       
              STORAGE_FILESYSTEM_DIRECTORY="${server.dataDir}"

     

       
154
       
+
       
              SECRET_KEY="$(cat "${server.secretKeyFile}")"

     

       
155
       
 
       
              DEFAULT_PERMISSIONS="${server.defaultPermissions}"

     

       
156
       
 
       
              ${server.extraConfig}

     

       
157
       
 
       
              EOF