commit b08524bf01723a23f17d24487b6b528c603127fb · pyrox.dev/nixpkgs

+51 -23
nixos/modules/services/networking/nylon.nix
···

       8
       8
        
       

     

       9
       9
        
         homeDir = "/var/lib/nylon";

     

       10
       10
        
       

     

       11
       11
       -
         configFile = pkgs.writeText "nylon.conf" ''

     

       11
       11
       +
         configFile = cfg: pkgs.writeText "nylon-${cfg.name}.conf" ''

     

       12
       12
        
           [General]

     

       13
       13
        
           No-Simultaneous-Conn=${toString cfg.nrConnections}

     

       14
       14
        
           Log=${if cfg.logging then "1" else "0"}

     
···

       22
       22
        
           Deny-IP=${concatStringsSep " " cfg.deniedIPRanges}

     

       23
       23
        
         '';

     

       24
       24
        
       

     

       25
       25
       -
       in

     

       26
       26
       -
       

     

       27
       27
       -
       {

     

       28
       28
       -
       

     

       29
       29
       -
         ###### interface

     

       30
       30
       -
       

     

       31
       31
       -
         options = {

     

       25
       25
       +
         nylonOpts = { name, config, ... }: {

     

       32
       26
        
       

     

       33
       33
       -
           services.nylon = {

     

       27
       27
       +
           options = {

     

       34
       28
        
       

     

       35
       29
        
             enable = mkOption {

     

       36
       30
        
               type = types.bool;

     
···

       38
       32
        
               description = ''

     

       39
       33
        
                 Enables nylon as a running service upon activation.

     

       40
       34
        
               '';

     

       35
       35
       +
             };

     

       36
       36
       +
       

     

       37
       37
       +
             name = mkOption {

     

       38
       38
       +
               type = types.str;

     

       39
       39
       +
               default = "";

     

       40
       40
       +
               description = "The name of this nylon instance.";

     

       41
       41
        
             };

     

       42
       42
        
       

     

       43
       43
        
             nrConnections = mkOption {

     
···

       107
       107
        
               '';

     

       108
       108
        
             };

     

       109
       109
        
           };

     

       110
       110
       +
           config = { name = mkDefault name; };

     

       111
       111
       +
         };

     

       112
       112
       +
       

     

       113
       113
       +
         mkNamedNylon = cfg: {

     

       114
       114
       +
           "nylon-${cfg.name}" = {

     

       115
       115
       +
             description = "Nylon, a lightweight SOCKS proxy server";

     

       116
       116
       +
             after = [ "network.target" ];

     

       117
       117
       +
             wantedBy = [ "multi-user.target" ];

     

       118
       118
       +
             serviceConfig =

     

       119
       119
       +
             {

     

       120
       120
       +
               User = "nylon";

     

       121
       121
       +
               Group = "nylon";

     

       122
       122
       +
               WorkingDirectory = homeDir;

     

       123
       123
       +
               ExecStart = "${pkgs.nylon}/bin/nylon -f -c ${configFile cfg}";

     

       124
       124
       +
             };

     

       125
       125
       +
           };

     

       126
       126
       +
         };

     

       127
       127
       +
       

     

       128
       128
       +
         anyNylons = collect (p: p ? enable) cfg;

     

       129
       129
       +
         enabledNylons = filter (p: p.enable == true) anyNylons;

     

       130
       130
       +
         nylonUnits = map (nylon: mkNamedNylon nylon) enabledNylons;

     

       131
       131
       +
       

     

       132
       132
       +
       in

     

       133
       133
       +
       

     

       134
       134
       +
       {

     

       135
       135
       +
       

     

       136
       136
       +
         ###### interface

     

       137
       137
       +
       

     

       138
       138
       +
         options = {

     

       139
       139
       +
       

     

       140
       140
       +
           services.nylon = mkOption {

     

       141
       141
       +
             default = {};

     

       142
       142
       +
             description = "Collection of named nylon instances";

     

       143
       143
       +
             type = with types; loaOf (submodule nylonOpts);

     

       144
       144
       +
             internal = true;

     

       145
       145
       +
             options = [ nylonOpts ];

     

       146
       146
       +
           };

     

       147
       147
       +
       

     

       110
       148
        
         };

     

       111
       149
        
       

     

       112
       150
        
         ###### implementation

     

       113
       151
        
       

     

       114
       114
       -
         config = mkIf cfg.enable {

     

       152
       152
       +
         config = mkIf (length(enabledNylons) > 0) {

     

       115
       153
        
       

     

       116
       116
       -
           users.extraUsers.nylon= {

     

       154
       154
       +
           users.extraUsers.nylon = {

     

       117
       155
        
             group = "nylon";

     

       118
       156
        
             description = "Nylon SOCKS Proxy";

     

       119
       157
        
             home = homeDir;

     
···

       123
       161
        
       

     

       124
       162
        
           users.extraGroups.nylon.gid = config.ids.gids.nylon;

     

       125
       163
        
       

     

       126
       126
       -
           systemd.services.nylon = {

     

       127
       127
       -
             description = "Nylon, a lightweight SOCKS proxy server";

     

       128
       128
       -
             after = [ "network.target" ];

     

       129
       129
       -
             wantedBy = [ "multi-user.target" ];

     

       130
       130
       -
             serviceConfig =

     

       131
       131
       -
             {

     

       132
       132
       -
               User = "nylon";

     

       133
       133
       -
               Group = "nylon";

     

       134
       134
       -
               WorkingDirectory = homeDir;

     

       135
       135
       -
               ExecStart = "${pkgs.nylon}/bin/nylon -f -c ${configFile}";

     

       136
       136
       -
             };

     

       137
       137
       -
           };

     

       164
       164
       +
           systemd.services = fold (a: b: a // b) {} nylonUnits;

     

       165
       165
       +
       

     

       138
       166
        
         };

     

       139
       167
        
       }