commit a3ff62d48cae111a350bef4a98f8963236284c75 · pyrox.dev/nixpkgs

+132 -79

nixos/modules/services/networking/namecoind.nix

···

       3
        
       with lib;

     

       4
        
       

     

       5
        
       let

     

       6
       -
         cfg = config.services.namecoind;

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       7
        
       

     

       8
       -
         namecoinConf =

     

       9
       -
         let

     

       10
       -
           useSSL = (cfg.rpcCertificate != null) && (cfg.rpcKey != null);

     

       11
       -
         in

     

       12
       -
         pkgs.writeText "namecoin.conf" ''

     

       13
        
           server=1

     

       14
        
           daemon=0

     

       15
       -
           rpcallowip=127.0.0.1

     

       0
        
       
     

       16
        
           walletpath=${cfg.wallet}

     

       17
        
           gen=${if cfg.generate then "1" else "0"}

     

       18
       -
           rpcssl=${if useSSL then "1" else "0"}

     

       19
       -
           ${optionalString useSSL "rpcsslcertificatechainfile=${cfg.rpcCertificate}"}

     

       20
       -
           ${optionalString useSSL "rpcsslprivatekeyfile=${cfg.rpcKey}"}

     

       21
       -
           ${optionalString useSSL "rpcsslciphers=TLSv1.2+HIGH:TLSv1+HIGH:!SSLv2:!aNULL:!eNULL:!3DES:@STRENGTH"}

     

       22
       -
           txindex=1

     

       23
       -
           txprevcache=1

     

       24
       -
         '';

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       25
        
       

     

       26
        
       in

     

       27
        
       

     
···

       33
        
       

     

       34
        
           services.namecoind = {

     

       35
        
       

     

       36
       -
             enable = mkOption {

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       37
        
               type = types.bool;

     

       38
        
               default = false;

     

       39
        
               description = ''

     

       40
       -
                 Whether to run namecoind.

     

       41
        
               '';

     

       42
        
             };

     

       43
        
       

     

       44
       -
             wallet = mkOption {

     

       45
       -
               type = types.path;

     

       46
       -
               example = "/etc/namecoin/wallet.dat";

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       47
        
               description = ''

     

       48
       -
                 Wallet file. The ownership of the file has to be

     

       49
       -
                 namecoin:namecoin, and the permissions must be 0640.

     

       50
        
               '';

     

       51
        
             };

     

       52
        
       

     

       53
       -
             userFile = mkOption {

     

       54
       -
               type = types.nullOr types.path;

     

       55
        
               default = null;

     

       56
       -
               example = "/etc/namecoin/user";

     

       57
        
               description = ''

     

       58
       -
                 File containing the user name and user password to

     

       59
       -
                 authenticate RPC connections to namecoind.

     

       60
       -
                 The content of the file is of the form:

     

       61
       -
                 <literal>

     

       62
       -
                 USER=namecoin

     

       63
       -
                 PASSWORD=secret

     

       64
       -
                 </literal>

     

       65
       -
                 The ownership of the file has to be namecoin:namecoin,

     

       66
       -
                 and the permissions must be 0640.

     

       67
        
               '';

     

       68
        
             };

     

       69
        
       

     

       70
       -
             generate = mkOption {

     

       71
       -
               type = types.bool;

     

       72
       -
               default = false;

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       73
        
               description = ''

     

       74
       -
                 Whether to generate (mine) Namecoins.

     

       75
        
               '';

     

       76
        
             };

     

       77
        
       

     

       78
       -
             rpcCertificate = mkOption {

     

       79
        
               type = types.nullOr types.path;

     

       80
        
               default = null;

     

       81
       -
               example = "/etc/namecoin/server.cert";

     

       82
        
               description = ''

     

       83
        
                 Certificate file for securing RPC connections.

     

       84
        
               '';

     

       85
        
             };

     

       86
        
       

     

       87
       -
             rpcKey = mkOption {

     

       88
        
               type = types.nullOr types.path;

     

       89
        
               default = null;

     

       90
       -
               example = "/etc/namecoin/server.pem";

     

       91
        
               description = ''

     

       92
        
                 Key file for securing RPC connections.

     

       93
        
               '';

     

       94
        
             };

     

       95
        
       

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       96
        
           };

     

       97
        
       

     

       98
        
         };

     
···

       102
        
       

     

       103
        
         config = mkIf cfg.enable {

     

       104
        
       

     

       105
       -
           users.extraUsers = singleton

     

       106
       -
             { name = "namecoin";

     

       107
       -
               uid = config.ids.uids.namecoin;

     

       108
       -
               description = "Namecoin daemon user";

     

       109
       -
               home = "/var/lib/namecoin";

     

       110
       -
               createHome = true;

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       111
        
             };

     

       112
        
       

     

       113
       -
           users.extraGroups = singleton

     

       114
       -
             { name = "namecoin";

     

       115
       -
               gid = config.ids.gids.namecoin;

     

       116
       -
             };

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       117
        
       

     

       118
       -
           systemd.services.namecoind = {

     

       119
       -
               description = "Namecoind Daemon";

     

       120
       -
               after = [ "network.target" ];

     

       121
       -
               wantedBy = [ "multi-user.target" ];

     

       122
       -
               preStart = ''

     

       123
       -
                 if [  "$(stat --printf '%u' ${cfg.userFile})" != "${toString config.ids.uids.namecoin}" \

     

       124
       -
                    -o "$(stat --printf '%g' ${cfg.userFile})" != "${toString config.ids.gids.namecoin}" \

     

       125
       -
                    -o "$(stat --printf '%a' ${cfg.userFile})" != "640" ]; then

     

       126
       -
                    echo "ERROR: bad ownership or rights on ${cfg.userFile}" >&2

     

       127
       -
                    exit 1

     

       128
       -
                 fi

     

       129
       -
                 if [  "$(stat --printf '%u' ${cfg.wallet})" != "${toString config.ids.uids.namecoin}" \

     

       130
       -
                    -o "$(stat --printf '%g' ${cfg.wallet})" != "${toString config.ids.gids.namecoin}" \

     

       131
       -
                    -o "$(stat --printf '%a' ${cfg.wallet})" != "640" ]; then

     

       132
       -
                    echo "ERROR: bad ownership or rights on ${cfg.wallet}" >&2

     

       133
       -
                    exit 1

     

       134
       -
                 fi

     

       135
       -
               '';

     

       136
       -
               serviceConfig = {

     

       137
       -
                 Type = "simple";

     

       138
       -
                 User = "namecoin";

     

       139
       -
                 EnvironmentFile = cfg.userFile;

     

       140
       -
                 ExecStart = "${pkgs.altcoins.namecoind}/bin/namecoind -conf=${namecoinConf} -rpcuser=\${USER} -rpcpassword=\${PASSWORD} -printtoconsole";

     

       141
       -
                 ExecReload = "${pkgs.coreutils}/bin/kill -HUP $MAINPID";

     

       142
       -
                 ExecStop = "${pkgs.coreutils}/bin/kill -KILL $MAINPID";

     

       143
       -
                 StandardOutput = "null";

     

       144
       -
                 Nice = "10";

     

       145
       -
               };

     

       146
        
           };

     

       147
        
       

     

       148
        
         };

···

       3
        
       with lib;

     

       4
        
       

     

       5
        
       let

     

       6
       +
         cfg     = config.services.namecoind;

     

       7
       +
         dataDir = "/var/lib/namecoind";

     

       8
       +
         useSSL  = (cfg.rpc.certificate != null) && (cfg.rpc.key != null);

     

       9
       +
         useRPC  = (cfg.rpc.user != null) && (cfg.rpc.password != null);

     

       10
        
       

     

       11
       +
         listToConf = option: list:

     

       12
       +
           concatMapStrings (value :"${option}=${value}\n") list;

     

       13
       +
       

     

       14
       +
         configFile = pkgs.writeText "namecoin.conf" (''

     

       0
        
       
     

       15
        
           server=1

     

       16
        
           daemon=0

     

       17
       +
           txindex=1

     

       18
       +
           txprevcache=1

     

       19
        
           walletpath=${cfg.wallet}

     

       20
        
           gen=${if cfg.generate then "1" else "0"}

     

       21
       +
           ${listToConf "addnode" cfg.extraNodes}

     

       22
       +
           ${listToConf "connect" cfg.trustedNodes}

     

       23
       +
         '' + optionalString useRPC ''

     

       24
       +
           rpcbind=${cfg.rpc.address}

     

       25
       +
           rpcport=${toString cfg.rpc.port}

     

       26
       +
           rpcuser=${cfg.rpc.user}

     

       27
       +
           rpcpassword=${cfg.rpc.password}

     

       28
       +
           ${listToConf "rpcallowip" cfg.rpc.allowFrom}

     

       29
       +
         '' + optionalString useSSL ''

     

       30
       +
           rpcssl=1

     

       31
       +
           rpcsslcertificatechainfile=${cfg.rpc.certificate}

     

       32
       +
           rpcsslprivatekeyfile=${cfg.rpc.key}

     

       33
       +
           rpcsslciphers=TLSv1.2+HIGH:TLSv1+HIGH:!SSLv2:!aNULL:!eNULL:!3DES:@STRENGTH

     

       34
       +
         '');

     

       35
        
       

     

       36
        
       in

     

       37
        
       

     
···

       43
        
       

     

       44
        
           services.namecoind = {

     

       45
        
       

     

       46
       +
             enable = mkEnableOption "namecoind, Namecoin client.";

     

       47
       +
       

     

       48
       +
             wallet = mkOption {

     

       49
       +
               type = types.path;

     

       50
       +
               default = "${dataDir}/wallet.dat";

     

       51
       +
               description = ''

     

       52
       +
                 Wallet file. The ownership of the file has to be

     

       53
       +
                 namecoin:namecoin, and the permissions must be 0640.

     

       54
       +
               '';

     

       55
       +
             };

     

       56
       +
       

     

       57
       +
             generate = mkOption {

     

       58
        
               type = types.bool;

     

       59
        
               default = false;

     

       60
        
               description = ''

     

       61
       +
                 Whether to generate (mine) Namecoins.

     

       62
        
               '';

     

       63
        
             };

     

       64
        
       

     

       65
       +
             extraNodes = mkOption {

     

       66
       +
               type = types.listOf types.str;

     

       67
       +
               default = [ ];

     

       68
       +
               description = ''

     

       69
       +
                 List of additional peer IP addresses to connect to.

     

       70
       +
               '';

     

       71
       +
             };

     

       72
       +
       

     

       73
       +
             trustedNodes = mkOption {

     

       74
       +
               type = types.listOf types.str;

     

       75
       +
               default = [ ];

     

       76
       +
               description = ''

     

       77
       +
                 List of the only peer IP addresses to connect to. If specified

     

       78
       +
                 no other connection will be made.

     

       79
       +
               '';

     

       80
       +
             };

     

       81
       +
       

     

       82
       +
             rpc.user = mkOption {

     

       83
       +
               type = types.nullOr types.str;

     

       84
       +
               default = null;

     

       85
        
               description = ''

     

       86
       +
                 User name for RPC connections.

     

       0
        
       
     

       87
        
               '';

     

       88
        
             };

     

       89
        
       

     

       90
       +
             rpc.password = mkOption {

     

       91
       +
               type = types.str;

     

       92
        
               default = null;

     

       0
        
       
     

       93
        
               description = ''

     

       94
       +
                 Password for RPC connections.

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       95
        
               '';

     

       96
        
             };

     

       97
        
       

     

       98
       +
             rpc.address = mkOption {

     

       99
       +
               type = types.str;

     

       100
       +
               default = "0.0.0.0";

     

       101
       +
               description = ''

     

       102
       +
                 IP address the RPC server will bind to.

     

       103
       +
               '';

     

       104
       +
             };

     

       105
       +
       

     

       106
       +
             rpc.port = mkOption {

     

       107
       +
               type = types.int;

     

       108
       +
               default = 8332;

     

       109
        
               description = ''

     

       110
       +
                 Port the RPC server will bind to.

     

       111
        
               '';

     

       112
        
             };

     

       113
        
       

     

       114
       +
             rpc.certificate = mkOption {

     

       115
        
               type = types.nullOr types.path;

     

       116
        
               default = null;

     

       117
       +
               example = "/var/lib/namecoind/server.cert";

     

       118
        
               description = ''

     

       119
        
                 Certificate file for securing RPC connections.

     

       120
        
               '';

     

       121
        
             };

     

       122
        
       

     

       123
       +
             rpc.key = mkOption {

     

       124
        
               type = types.nullOr types.path;

     

       125
        
               default = null;

     

       126
       +
               example = "/var/lib/namecoind/server.pem";

     

       127
        
               description = ''

     

       128
        
                 Key file for securing RPC connections.

     

       129
        
               '';

     

       130
        
             };

     

       131
        
       

     

       132
       +
       

     

       133
       +
             rpc.allowFrom = mkOption {

     

       134
       +
               type = types.listOf types.str;

     

       135
       +
               default = [ "127.0.0.1" ];

     

       136
       +
               description = ''

     

       137
       +
                 List of IP address ranges allowed to use the RPC API.

     

       138
       +
                 Wiledcards (*) can be user to specify a range.

     

       139
       +
               '';

     

       140
       +
             };

     

       141
       +
       

     

       142
        
           };

     

       143
        
       

     

       144
        
         };

     
···

       148
        
       

     

       149
        
         config = mkIf cfg.enable {

     

       150
        
       

     

       151
       +
           services.dnschain.extraConfig = ''

     

       152
       +
             [namecoin]

     

       153
       +
             config = ${configFile}

     

       154
       +
           '';

     

       155
       +
       

     

       156
       +
           users.extraUsers = singleton {

     

       157
       +
             name = "namecoin";

     

       158
       +
             uid  = config.ids.uids.namecoin;

     

       159
       +
             description = "Namecoin daemon user";

     

       160
       +
             home = dataDir;

     

       161
       +
             createHome = true;

     

       162
       +
           };

     

       163
       +
       

     

       164
       +
           users.extraGroups = singleton {

     

       165
       +
             name = "namecoin";

     

       166
       +
             gid  = config.ids.gids.namecoin;

     

       167
       +
           };

     

       168
       +
       

     

       169
       +
           systemd.services.namecoind = {

     

       170
       +
             description = "Namecoind daemon";

     

       171
       +
             after    = [ "network.target" ];

     

       172
       +
             wantedBy = [ "multi-user.target" ];

     

       173
       +
       

     

       174
       +
             serviceConfig = {

     

       175
       +
               User  = "namecoin";

     

       176
       +
               Griup = "namecoin";

     

       177
       +
               ExecStart  = "${pkgs.altcoins.namecoind}/bin/namecoind -conf=${configFile} -datadir=${dataDir} -printtoconsole";

     

       178
       +
               ExecStop   = "${pkgs.coreutils}/bin/kill -KILL $MAINPID";

     

       179
       +
               ExecReload = "${pkgs.coreutils}/bin/kill -HUP $MAINPID";

     

       180
       +
               Nice = "10";

     

       181
       +
               PrivateTmp = true;

     

       182
       +
               TimeoutStopSec     = "60s";

     

       183
       +
               TimeoutStartSec    = "2s";

     

       184
       +
               Restart            = "always";

     

       185
       +
               StartLimitInterval = "120s";

     

       186
       +
               StartLimitBurst    = "5";

     

       187
        
             };

     

       188
        
       

     

       189
       +
             preStart = optionalString (cfg.wallet != "${dataDir}/wallet.dat")  ''

     

       190
       +
               # check wallet file permissions

     

       191
       +
               if [ "$(stat --printf '%u' ${cfg.wallet})" != "${toString config.ids.uids.namecoin}" \

     

       192
       +
                  -o "$(stat --printf '%g' ${cfg.wallet})" != "${toString config.ids.gids.namecoin}" \

     

       193
       +
                  -o "$(stat --printf '%a' ${cfg.wallet})" != "640" ]; then

     

       194
       +
                  echo "ERROR: bad ownership or rights on ${cfg.wallet}" >&2

     

       195
       +
                  exit 1

     

       196
       +
               fi

     

       197
       +
             '';

     

       198
        
       

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       199
        
           };

     

       200
        
       

     

       201
        
         };