commit c0c3fa6a7883e53d80e257e300116c0a5d478ef5 · pyrox.dev/nixpkgs

+50 -37
nixos/modules/services/mail/postfixadmin.nix
···

       1
       1
       -
       { lib, config, pkgs, ... }:

     

       1
       1
       +
       {

     

       2
       2
       +
         lib,

     

       3
       3
       +
         config,

     

       4
       4
       +
         pkgs,

     

       5
       5
       +
         ...

     

       6
       6
       +
       }:

     

       2
       7
        
       let

     

       3
       8
        
         cfg = config.services.postfixadmin;

     

       4
       9
        
         fpm = config.services.phpfpm.pools.postfixadmin;

     
···

       89
       94
        
             $CONF['database_type'] = 'pgsql';

     

       90
       95
        
             $CONF['database_host'] = ${if localDB then "null" else "'${cfg.database.host}'"};

     

       91
       96
        
             ${lib.optionalString localDB "$CONF['database_user'] = '${cfg.database.username}';"}

     

       92
       92
       -
             $CONF['database_password'] = ${if localDB then "'dummy'" else "file_get_contents('${cfg.database.passwordFile}')"};

     

       97
       97
       +
             $CONF['database_password'] = ${

     

       98
       98
       +
               if localDB then "'dummy'" else "file_get_contents('${cfg.database.passwordFile}')"

     

       99
       99
       +
             };

     

       93
       100
        
             $CONF['database_name'] = '${cfg.database.dbname}';

     

       94
       101
        
             $CONF['configured'] = true;

     

       95
       102
        
       

     
···

       126
       133
        
       

     

       127
       134
        
           services.postgresql = lib.mkIf localDB {

     

       128
       135
        
             enable = true;

     

       129
       129
       -
             ensureUsers = [ {

     

       130
       130
       -
               name = cfg.database.username;

     

       131
       131
       -
             } ];

     

       136
       136
       +
             ensureUsers = [

     

       137
       137
       +
               {

     

       138
       138
       +
                 name = cfg.database.username;

     

       139
       139
       +
               }

     

       140
       140
       +
             ];

     

       132
       141
        
           };

     

       133
       142
        
           # The postgresql module doesn't currently support concepts like

     

       134
       143
        
           # objects owners and extensions; for now we tack on what's needed

     

       135
       144
        
           # here.

     

       136
       136
       -
           systemd.services.postfixadmin-postgres = let pgsql = config.services.postgresql; in lib.mkIf localDB {

     

       137
       137
       -
             after = [ "postgresql.service" ];

     

       138
       138
       -
             bindsTo = [ "postgresql.service" ];

     

       139
       139
       -
             wantedBy = [ "multi-user.target" ];

     

       140
       140
       -
             path = [

     

       141
       141
       -
               pgsql.package

     

       142
       142
       -
               pkgs.util-linux

     

       143
       143
       -
             ];

     

       144
       144
       -
             script = ''

     

       145
       145
       -
               set -eu

     

       145
       145
       +
           systemd.services.postfixadmin-postgres =

     

       146
       146
       +
             let

     

       147
       147
       +
               pgsql = config.services.postgresql;

     

       148
       148
       +
             in

     

       149
       149
       +
             lib.mkIf localDB {

     

       150
       150
       +
               after = [ "postgresql.service" ];

     

       151
       151
       +
               bindsTo = [ "postgresql.service" ];

     

       152
       152
       +
               wantedBy = [ "multi-user.target" ];

     

       153
       153
       +
               path = [

     

       154
       154
       +
                 pgsql.package

     

       155
       155
       +
                 pkgs.util-linux

     

       156
       156
       +
               ];

     

       157
       157
       +
               script = ''

     

       158
       158
       +
                 set -eu

     

       146
       159
        
       

     

       147
       147
       -
               PSQL() {

     

       148
       148
       -
                   psql --port=${toString pgsql.port} "$@"

     

       149
       149
       -
               }

     

       160
       160
       +
                 PSQL() {

     

       161
       161
       +
                     psql --port=${toString pgsql.port} "$@"

     

       162
       162
       +
                 }

     

       150
       163
        
       

     

       151
       151
       -
               PSQL -tAc "SELECT 1 FROM pg_database WHERE datname = '${cfg.database.dbname}'" | grep -q 1 || PSQL -tAc 'CREATE DATABASE "${cfg.database.dbname}" OWNER "${cfg.database.username}"'

     

       152
       152
       -
               current_owner=$(PSQL -tAc "SELECT pg_catalog.pg_get_userbyid(datdba) FROM pg_catalog.pg_database WHERE datname = '${cfg.database.dbname}'")

     

       153
       153
       -
               if [[ "$current_owner" != "${cfg.database.username}" ]]; then

     

       154
       154
       -
                   PSQL -tAc 'ALTER DATABASE "${cfg.database.dbname}" OWNER TO "${cfg.database.username}"'

     

       155
       155
       -
                   if [[ -e "${config.services.postgresql.dataDir}/.reassigning_${cfg.database.dbname}" ]]; then

     

       156
       156
       -
                       echo "Reassigning ownership of database ${cfg.database.dbname} to user ${cfg.database.username} failed on last boot. Failing..."

     

       157
       157
       -
                       exit 1

     

       158
       158
       -
                   fi

     

       159
       159
       -
                   touch "${config.services.postgresql.dataDir}/.reassigning_${cfg.database.dbname}"

     

       160
       160
       -
                   PSQL "${cfg.database.dbname}" -tAc "REASSIGN OWNED BY \"$current_owner\" TO \"${cfg.database.username}\""

     

       161
       161
       -
                   rm "${config.services.postgresql.dataDir}/.reassigning_${cfg.database.dbname}"

     

       162
       162
       -
               fi

     

       163
       163
       -
             '';

     

       164
       164
       +
                 PSQL -tAc "SELECT 1 FROM pg_database WHERE datname = '${cfg.database.dbname}'" | grep -q 1 || PSQL -tAc 'CREATE DATABASE "${cfg.database.dbname}" OWNER "${cfg.database.username}"'

     

       165
       165
       +
                 current_owner=$(PSQL -tAc "SELECT pg_catalog.pg_get_userbyid(datdba) FROM pg_catalog.pg_database WHERE datname = '${cfg.database.dbname}'")

     

       166
       166
       +
                 if [[ "$current_owner" != "${cfg.database.username}" ]]; then

     

       167
       167
       +
                     PSQL -tAc 'ALTER DATABASE "${cfg.database.dbname}" OWNER TO "${cfg.database.username}"'

     

       168
       168
       +
                     if [[ -e "${config.services.postgresql.dataDir}/.reassigning_${cfg.database.dbname}" ]]; then

     

       169
       169
       +
                         echo "Reassigning ownership of database ${cfg.database.dbname} to user ${cfg.database.username} failed on last boot. Failing..."

     

       170
       170
       +
                         exit 1

     

       171
       171
       +
                     fi

     

       172
       172
       +
                     touch "${config.services.postgresql.dataDir}/.reassigning_${cfg.database.dbname}"

     

       173
       173
       +
                     PSQL "${cfg.database.dbname}" -tAc "REASSIGN OWNED BY \"$current_owner\" TO \"${cfg.database.username}\""

     

       174
       174
       +
                     rm "${config.services.postgresql.dataDir}/.reassigning_${cfg.database.dbname}"

     

       175
       175
       +
                 fi

     

       176
       176
       +
               '';

     

       164
       177
        
       

     

       165
       165
       -
             serviceConfig = {

     

       166
       166
       -
               User = pgsql.superUser;

     

       167
       167
       -
               Type = "oneshot";

     

       168
       168
       -
               RemainAfterExit = true;

     

       178
       178
       +
               serviceConfig = {

     

       179
       179
       +
                 User = pgsql.superUser;

     

       180
       180
       +
                 Type = "oneshot";

     

       181
       181
       +
                 RemainAfterExit = true;

     

       182
       182
       +
               };

     

       169
       183
        
             };

     

       170
       170
       -
           };

     

       171
       184
        
       

     

       172
       185
        
           users.users.${user} = lib.mkIf localDB {

     

       173
       186
        
             group = user;

     

       174
       187
        
             isSystemUser = true;

     

       175
       188
        
             createHome = false;

     

       176
       189
        
           };

     

       177
       177
       -
           users.groups.${user} = lib.mkIf localDB {};

     

       190
       190
       +
           users.groups.${user} = lib.mkIf localDB { };

     

       178
       191
        
       

     

       179
       192
        
           services.phpfpm.pools.postfixadmin = {

     

       180
       193
        
             user = user;