···

       
94
       
 
       
      ] else []

     

       
95
       
 
       
    ) env))));

     

       
96
       
 
       


     

       
97
       
-
       
  mastodonTootctl = pkgs.writeShellScriptBin "mastodon-tootctl" ''

     

       
0
       
 
       

     

       
0
       
 
       

     

       
98
       
 
       
    set -a

     

       
99
       
 
       
    export RAILS_ROOT="${cfg.package}"

     

       
100
       
 
       
    source "${envFile}"

     

       
101
       
 
       
    source /var/lib/mastodon/.secrets_env

     

       
0
       
 
       

     

       
102
       
 
       


     

       
103
       
 
       
    sudo=exec

     

       
104
       
 
       
    if [[ "$USER" != ${cfg.user} ]]; then

     
···

       
427
       
 
       
        '';

     

       
428
       
 
       
      };

     

       
429
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
430
       
 
       
      automaticMigrations = lib.mkOption {

     

       
431
       
 
       
        type = lib.types.bool;

     

       
432
       
 
       
        default = true;

     
···

       
579
       
 
       
      };

     

       
580
       
 
       
      serviceConfig = {

     

       
581
       
 
       
        Type = "oneshot";

     

       
582
       
-
       
        EnvironmentFile = [ "/var/lib/mastodon/.secrets_env" ];

     

       
583
       
 
       
        WorkingDirectory = cfg.package;

     

       
584
       
 
       
        # System Call Filtering

     

       
585
       
 
       
        SystemCallFilter = [ ("~" + lib.concatStringsSep " " (systemCallsList ++ [ "@resources" ])) "@chown" "pipe" "pipe2" ];

     
···

       
607
       
 
       
        ExecStart = "${cfg.package}/run-streaming.sh";

     

       
608
       
 
       
        Restart = "always";

     

       
609
       
 
       
        RestartSec = 20;

     

       
610
       
-
       
        EnvironmentFile = [ "/var/lib/mastodon/.secrets_env" ];

     

       
611
       
 
       
        WorkingDirectory = cfg.package;

     

       
612
       
 
       
        # Runtime directory and mode

     

       
613
       
 
       
        RuntimeDirectory = "mastodon-streaming";

     
···

       
634
       
 
       
        ExecStart = "${cfg.package}/bin/puma -C config/puma.rb";

     

       
635
       
 
       
        Restart = "always";

     

       
636
       
 
       
        RestartSec = 20;

     

       
637
       
-
       
        EnvironmentFile = [ "/var/lib/mastodon/.secrets_env" ];

     

       
638
       
 
       
        WorkingDirectory = cfg.package;

     

       
639
       
 
       
        # Runtime directory and mode

     

       
640
       
 
       
        RuntimeDirectory = "mastodon-web";

     
···

       
662
       
 
       
        ExecStart = "${cfg.package}/bin/sidekiq -c ${toString cfg.sidekiqThreads} -r ${cfg.package}";

     

       
663
       
 
       
        Restart = "always";

     

       
664
       
 
       
        RestartSec = 20;

     

       
665
       
-
       
        EnvironmentFile = [ "/var/lib/mastodon/.secrets_env" ];

     

       
666
       
 
       
        WorkingDirectory = cfg.package;

     

       
667
       
 
       
        # System Call Filtering

     

       
668
       
 
       
        SystemCallFilter = [ ("~" + lib.concatStringsSep " " systemCallsList) "@chown" "pipe" "pipe2" ];

     
···

       
675
       
 
       
      environment = env;

     

       
676
       
 
       
      serviceConfig = {

     

       
677
       
 
       
        Type = "oneshot";

     

       
678
       
-
       
        EnvironmentFile = [ "/var/lib/mastodon/.secrets_env" ];

     

       
679
       
 
       
      } // cfgService;

     

       
680
       
 
       
      script = let

     

       
681
       
 
       
        olderThanDays = toString cfg.mediaAutoRemove.olderThanDays;

     

···

       
94
       
 
       
      ] else []

     

       
95
       
 
       
    ) env))));

     

       
96
       
 
       


     

       
97
       
+
       
  mastodonTootctl = let

     

       
98
       
+
       
    sourceExtraEnv = lib.concatMapStrings (p: "source ${p}\n") cfg.extraEnvFiles;

     

       
99
       
+
       
  in pkgs.writeShellScriptBin "mastodon-tootctl" ''

     

       
100
       
 
       
    set -a

     

       
101
       
 
       
    export RAILS_ROOT="${cfg.package}"

     

       
102
       
 
       
    source "${envFile}"

     

       
103
       
 
       
    source /var/lib/mastodon/.secrets_env

     

       
104
       
+
       
    ${sourceExtraEnv}

     

       
105
       
 
       


     

       
106
       
 
       
    sudo=exec

     

       
107
       
 
       
    if [[ "$USER" != ${cfg.user} ]]; then

     
···

       
430
       
 
       
        '';

     

       
431
       
 
       
      };

     

       
432
       
 
       


     

       
433
       
+
       
      extraEnvFiles = lib.mkOption {

     

       
434
       
+
       
        type = with lib.types; listOf path;

     

       
435
       
+
       
        default = [];

     

       
436
       
+
       
        description = lib.mdDoc ''

     

       
437
       
+
       
          Extra environment files to pass to all mastodon services. Useful for passing down environemntal secrets.

     

       
438
       
+
       
        '';

     

       
439
       
+
       
        example = [ "/etc/mastodon/s3config.env" ];

     

       
440
       
+
       
      };

     

       
441
       
+
       


     

       
442
       
 
       
      automaticMigrations = lib.mkOption {

     

       
443
       
 
       
        type = lib.types.bool;

     

       
444
       
 
       
        default = true;

     
···

       
591
       
 
       
      };

     

       
592
       
 
       
      serviceConfig = {

     

       
593
       
 
       
        Type = "oneshot";

     

       
594
       
+
       
        EnvironmentFile = [ "/var/lib/mastodon/.secrets_env" ] ++ cfg.extraEnvFiles;

     

       
595
       
 
       
        WorkingDirectory = cfg.package;

     

       
596
       
 
       
        # System Call Filtering

     

       
597
       
 
       
        SystemCallFilter = [ ("~" + lib.concatStringsSep " " (systemCallsList ++ [ "@resources" ])) "@chown" "pipe" "pipe2" ];

     
···

       
619
       
 
       
        ExecStart = "${cfg.package}/run-streaming.sh";

     

       
620
       
 
       
        Restart = "always";

     

       
621
       
 
       
        RestartSec = 20;

     

       
622
       
+
       
        EnvironmentFile = [ "/var/lib/mastodon/.secrets_env" ] ++ cfg.extraEnvFiles;

     

       
623
       
 
       
        WorkingDirectory = cfg.package;

     

       
624
       
 
       
        # Runtime directory and mode

     

       
625
       
 
       
        RuntimeDirectory = "mastodon-streaming";

     
···

       
646
       
 
       
        ExecStart = "${cfg.package}/bin/puma -C config/puma.rb";

     

       
647
       
 
       
        Restart = "always";

     

       
648
       
 
       
        RestartSec = 20;

     

       
649
       
+
       
        EnvironmentFile = [ "/var/lib/mastodon/.secrets_env" ] ++ cfg.extraEnvFiles;

     

       
650
       
 
       
        WorkingDirectory = cfg.package;

     

       
651
       
 
       
        # Runtime directory and mode

     

       
652
       
 
       
        RuntimeDirectory = "mastodon-web";

     
···

       
674
       
 
       
        ExecStart = "${cfg.package}/bin/sidekiq -c ${toString cfg.sidekiqThreads} -r ${cfg.package}";

     

       
675
       
 
       
        Restart = "always";

     

       
676
       
 
       
        RestartSec = 20;

     

       
677
       
+
       
        EnvironmentFile = [ "/var/lib/mastodon/.secrets_env" ] ++ cfg.extraEnvFiles;

     

       
678
       
 
       
        WorkingDirectory = cfg.package;

     

       
679
       
 
       
        # System Call Filtering

     

       
680
       
 
       
        SystemCallFilter = [ ("~" + lib.concatStringsSep " " systemCallsList) "@chown" "pipe" "pipe2" ];

     
···

       
687
       
 
       
      environment = env;

     

       
688
       
 
       
      serviceConfig = {

     

       
689
       
 
       
        Type = "oneshot";

     

       
690
       
+
       
        EnvironmentFile = [ "/var/lib/mastodon/.secrets_env" ] ++ cfg.extraEnvFiles;

     

       
691
       
 
       
      } // cfgService;

     

       
692
       
 
       
      script = let

     

       
693
       
 
       
        olderThanDays = toString cfg.mediaAutoRemove.olderThanDays;