commit 9cf61a285c2daa532ecb24ad2c5634d971cc477f · pyrox.dev/nixpkgs

+18 -6
nixos/modules/services/web-apps/mastodon.nix
···

       94
       94
        
             ] else []

     

       95
       95
        
           ) env))));

     

       96
       96
        
       

     

       97
       97
       -
         mastodonTootctl = pkgs.writeShellScriptBin "mastodon-tootctl" ''

     

       97
       97
       +
         mastodonTootctl = let

     

       98
       98
       +
           sourceExtraEnv = lib.concatMapStrings (p: "source ${p}\n") cfg.extraEnvFiles;

     

       99
       99
       +
         in pkgs.writeShellScriptBin "mastodon-tootctl" ''

     

       98
       100
        
           set -a

     

       99
       101
        
           export RAILS_ROOT="${cfg.package}"

     

       100
       102
        
           source "${envFile}"

     

       101
       103
        
           source /var/lib/mastodon/.secrets_env

     

       104
       104
       +
           ${sourceExtraEnv}

     

       102
       105
        
       

     

       103
       106
        
           sudo=exec

     

       104
       107
        
           if [[ "$USER" != ${cfg.user} ]]; then

     
···

       427
       430
        
               '';

     

       428
       431
        
             };

     

       429
       432
        
       

     

       433
       433
       +
             extraEnvFiles = lib.mkOption {

     

       434
       434
       +
               type = with lib.types; listOf path;

     

       435
       435
       +
               default = [];

     

       436
       436
       +
               description = lib.mdDoc ''

     

       437
       437
       +
                 Extra environment files to pass to all mastodon services. Useful for passing down environemntal secrets.

     

       438
       438
       +
               '';

     

       439
       439
       +
               example = [ "/etc/mastodon/s3config.env" ];

     

       440
       440
       +
             };

     

       441
       441
       +
       

     

       430
       442
        
             automaticMigrations = lib.mkOption {

     

       431
       443
        
               type = lib.types.bool;

     

       432
       444
        
               default = true;

     
···

       579
       591
        
             };

     

       580
       592
        
             serviceConfig = {

     

       581
       593
        
               Type = "oneshot";

     

       582
       582
       -
               EnvironmentFile = [ "/var/lib/mastodon/.secrets_env" ];

     

       594
       594
       +
               EnvironmentFile = [ "/var/lib/mastodon/.secrets_env" ] ++ cfg.extraEnvFiles;

     

       583
       595
        
               WorkingDirectory = cfg.package;

     

       584
       596
        
               # System Call Filtering

     

       585
       597
        
               SystemCallFilter = [ ("~" + lib.concatStringsSep " " (systemCallsList ++ [ "@resources" ])) "@chown" "pipe" "pipe2" ];

     
···

       607
       619
        
               ExecStart = "${cfg.package}/run-streaming.sh";

     

       608
       620
        
               Restart = "always";

     

       609
       621
        
               RestartSec = 20;

     

       610
       610
       -
               EnvironmentFile = [ "/var/lib/mastodon/.secrets_env" ];

     

       622
       622
       +
               EnvironmentFile = [ "/var/lib/mastodon/.secrets_env" ] ++ cfg.extraEnvFiles;

     

       611
       623
        
               WorkingDirectory = cfg.package;

     

       612
       624
        
               # Runtime directory and mode

     

       613
       625
        
               RuntimeDirectory = "mastodon-streaming";

     
···

       634
       646
        
               ExecStart = "${cfg.package}/bin/puma -C config/puma.rb";

     

       635
       647
        
               Restart = "always";

     

       636
       648
        
               RestartSec = 20;

     

       637
       637
       -
               EnvironmentFile = [ "/var/lib/mastodon/.secrets_env" ];

     

       649
       649
       +
               EnvironmentFile = [ "/var/lib/mastodon/.secrets_env" ] ++ cfg.extraEnvFiles;

     

       638
       650
        
               WorkingDirectory = cfg.package;

     

       639
       651
        
               # Runtime directory and mode

     

       640
       652
        
               RuntimeDirectory = "mastodon-web";

     
···

       662
       674
        
               ExecStart = "${cfg.package}/bin/sidekiq -c ${toString cfg.sidekiqThreads} -r ${cfg.package}";

     

       663
       675
        
               Restart = "always";

     

       664
       676
        
               RestartSec = 20;

     

       665
       665
       -
               EnvironmentFile = [ "/var/lib/mastodon/.secrets_env" ];

     

       677
       677
       +
               EnvironmentFile = [ "/var/lib/mastodon/.secrets_env" ] ++ cfg.extraEnvFiles;

     

       666
       678
        
               WorkingDirectory = cfg.package;

     

       667
       679
        
               # System Call Filtering

     

       668
       680
        
               SystemCallFilter = [ ("~" + lib.concatStringsSep " " systemCallsList) "@chown" "pipe" "pipe2" ];

     
···

       675
       687
        
             environment = env;

     

       676
       688
        
             serviceConfig = {

     

       677
       689
        
               Type = "oneshot";

     

       678
       678
       -
               EnvironmentFile = [ "/var/lib/mastodon/.secrets_env" ];

     

       690
       690
       +
               EnvironmentFile = [ "/var/lib/mastodon/.secrets_env" ] ++ cfg.extraEnvFiles;

     

       679
       691
        
             } // cfgService;

     

       680
       692
        
             script = let

     

       681
       693
        
               olderThanDays = toString cfg.mediaAutoRemove.olderThanDays;