···

       
62
       
 
       
      username = mkOption {

     

       
63
       
 
       
        type = types.nullOr types.str;

     

       
64
       
 
       
        default = null;

     

       
65
       
-
       
        description = "Username for basic authentication.";

     

       
66
       
 
       
      };

     

       
67
       
 
       


     

       
68
       
 
       
      passwordFile = mkOption {

     
···

       
70
       
 
       
        default = null;

     

       
71
       
 
       
        apply = value: if value == null then null else toString value;

     

       
72
       
 
       
        description = ''

     

       
73
       
-
       
          File containing the password to use for basic authentication.

     

       
74
       
 
       
          For insecurely putting the password in the globally readable store use

     

       
75
       
 
       
          `pkgs.writeText "ttydpw" "MyPassword"`.

     

       
76
       
 
       
        '';

     
···

       
80
       
 
       
        type = types.ints.u8;

     

       
81
       
 
       
        default = 1;

     

       
82
       
 
       
        description = "Signal to send to the command on session close.";

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
83
       
 
       
      };

     

       
84
       
 
       


     

       
85
       
 
       
      writeable = mkOption {

     
···

       
193
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
194
       
 
       


     

       
195
       
 
       
      serviceConfig = {

     

       
196
       
-
       
        # Runs login which needs to be run as root

     

       
197
       
-
       
        # login: Cannot possibly work without effective root

     

       
198
       
-
       
        User = "root";

     

       
199
       
 
       
        LoadCredential = lib.optionalString (cfg.passwordFile != null) "TTYD_PASSWORD_FILE:${cfg.passwordFile}";

     

       
200
       
 
       
      };

     

       
201
       
 
       


     
···

       
203
       
 
       
        PASSWORD=$(cat "$CREDENTIALS_DIRECTORY/TTYD_PASSWORD_FILE")

     

       
204
       
 
       
        ${pkgs.ttyd}/bin/ttyd ${lib.escapeShellArgs args} \

     

       
205
       
 
       
          --credential ${lib.escapeShellArg cfg.username}:"$PASSWORD" \

     

       
206
       
-
       
          ${pkgs.shadow}/bin/login

     

       
207
       
 
       
      ''

     

       
208
       
 
       
      else ''

     

       
209
       
 
       
        ${pkgs.ttyd}/bin/ttyd ${lib.escapeShellArgs args} \

     

       
210
       
-
       
          ${pkgs.shadow}/bin/login

     

       
211
       
 
       
      '';

     

       
212
       
 
       
    };

     

       
213
       
 
       
  };

     

···

       
62
       
 
       
      username = mkOption {

     

       
63
       
 
       
        type = types.nullOr types.str;

     

       
64
       
 
       
        default = null;

     

       
65
       
+
       
        description = "Username for basic http authentication.";

     

       
66
       
 
       
      };

     

       
67
       
 
       


     

       
68
       
 
       
      passwordFile = mkOption {

     
···

       
70
       
 
       
        default = null;

     

       
71
       
 
       
        apply = value: if value == null then null else toString value;

     

       
72
       
 
       
        description = ''

     

       
73
       
+
       
          File containing the password to use for basic http authentication.

     

       
74
       
 
       
          For insecurely putting the password in the globally readable store use

     

       
75
       
 
       
          `pkgs.writeText "ttydpw" "MyPassword"`.

     

       
76
       
 
       
        '';

     
···

       
80
       
 
       
        type = types.ints.u8;

     

       
81
       
 
       
        default = 1;

     

       
82
       
 
       
        description = "Signal to send to the command on session close.";

     

       
83
       
+
       
      };

     

       
84
       
+
       


     

       
85
       
+
       
      entrypoint = mkOption {

     

       
86
       
+
       
        type = types.listOf types.str;

     

       
87
       
+
       
        default = [ "${pkgs.shadow}/bin/login" ];

     

       
88
       
+
       
        defaultText = lib.literalExpression ''

     

       
89
       
+
       
          [ "''${pkgs.shadow}/bin/login" ]

     

       
90
       
+
       
        '';

     

       
91
       
+
       
        example = lib.literalExpression ''

     

       
92
       
+
       
          [ (lib.getExe pkgs.htop) ]

     

       
93
       
+
       
        '';

     

       
94
       
+
       
        description = "Which command ttyd runs.";

     

       
95
       
+
       
        apply = lib.escapeShellArgs;

     

       
96
       
+
       
      };

     

       
97
       
+
       


     

       
98
       
+
       
      user = mkOption {

     

       
99
       
+
       
        type = types.str;

     

       
100
       
+
       
        # `login` needs to be run as root

     

       
101
       
+
       
        default = "root";

     

       
102
       
+
       
        description = "Which unix user ttyd should run as.";

     

       
103
       
 
       
      };

     

       
104
       
 
       


     

       
105
       
 
       
      writeable = mkOption {

     
···

       
213
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
214
       
 
       


     

       
215
       
 
       
      serviceConfig = {

     

       
216
       
+
       
        User = cfg.user;

     

       
0
       
 
       

     

       
0
       
 
       

     

       
217
       
 
       
        LoadCredential = lib.optionalString (cfg.passwordFile != null) "TTYD_PASSWORD_FILE:${cfg.passwordFile}";

     

       
218
       
 
       
      };

     

       
219
       
 
       


     
···

       
221
       
 
       
        PASSWORD=$(cat "$CREDENTIALS_DIRECTORY/TTYD_PASSWORD_FILE")

     

       
222
       
 
       
        ${pkgs.ttyd}/bin/ttyd ${lib.escapeShellArgs args} \

     

       
223
       
 
       
          --credential ${lib.escapeShellArg cfg.username}:"$PASSWORD" \

     

       
224
       
+
       
          ${cfg.entrypoint}

     

       
225
       
 
       
      ''

     

       
226
       
 
       
      else ''

     

       
227
       
 
       
        ${pkgs.ttyd}/bin/ttyd ${lib.escapeShellArgs args} \

     

       
228
       
+
       
          ${cfg.entrypoint}

     

       
229
       
 
       
      '';

     

       
230
       
 
       
    };

     

       
231
       
 
       
  };

     

···

       
5
       
 
       
  nodes.readonly = { pkgs, ... }: {

     

       
6
       
 
       
    services.ttyd = {

     

       
7
       
 
       
      enable = true;

     

       
8
       
-
       
      username = "foo";

     

       
9
       
-
       
      passwordFile = pkgs.writeText "password" "bar";

     

       
10
       
 
       
      writeable = false;

     

       
11
       
 
       
    };

     

       
12
       
 
       
  };

     

···

       
5
       
 
       
  nodes.readonly = { pkgs, ... }: {

     

       
6
       
 
       
    services.ttyd = {

     

       
7
       
 
       
      enable = true;

     

       
8
       
+
       
      entrypoint = [ (lib.getExe pkgs.htop) ];

     

       
0
       
 
       

     

       
9
       
 
       
      writeable = false;

     

       
10
       
 
       
    };

     

       
11
       
 
       
  };