···

       
2
       
 
       


     

       
3
       
 
       
let

     

       
4
       
 
       
  cfg = config.services.hydron;

     

       
5
       
-
       
  postgres = config.services.postgresql;

     

       
6
       
 
       
in with lib; {

     

       
7
       
 
       
  options.services.hydron = {

     

       
8
       
 
       
    enable = mkEnableOption "hydron";

     
···

       
81
       
 
       
  };

     

       
82
       
 
       


     

       
83
       
 
       
  config = mkIf cfg.enable {

     

       
84
       
-
       
    security.sudo.enable = cfg.enable;

     

       
85
       
-
       
    services.postgresql.enable = cfg.enable;

     

       
86
       
 
       
    services.hydron.passwordFile = mkDefault (pkgs.writeText "hydron-password-file" cfg.password);

     

       
87
       
 
       
    services.hydron.postgresArgsFile = mkDefault (pkgs.writeText "hydron-postgres-args" cfg.postgresArgs);

     

       
88
       
 
       
    services.hydron.postgresArgs = mkDefault ''

     

       
89
       
 
       
      {

     

       
90
       
 
       
        "driver": "postgres",

     

       
91
       
-
       
        "connection": "user=hydron password=${cfg.password} dbname=hydron sslmode=disable"

     

       
92
       
 
       
      }

     

       
93
       
 
       
    '';

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
94
       
 
       


     

       
95
       
 
       
    systemd.services.hydron = {

     

       
96
       
 
       
      description = "hydron";

     

       
97
       
 
       
      after = [ "network.target" "postgresql.service" ];

     

       
98
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
99
       
 
       


     

       
100
       
-
       
      preStart = ''

     

       
101
       
-
       
        # Ensure folder exists or create it and permissions are correct

     

       
102
       
-
       
        mkdir -p ${escapeShellArg cfg.dataDir}/{.hydron,images}

     

       
103
       
-
       
        ln -sf ${escapeShellArg cfg.postgresArgsFile} ${escapeShellArg cfg.dataDir}/.hydron/db_conf.json

     

       
104
       
-
       
        chmod 750 ${escapeShellArg cfg.dataDir}

     

       
105
       
-
       
        chown -R hydron:hydron ${escapeShellArg cfg.dataDir}

     

       
106
       
-
       


     

       
107
       
-
       
        # Ensure the database is correct or create it

     

       
108
       
-
       
        ${pkgs.sudo}/bin/sudo -u ${postgres.superUser} ${postgres.package}/bin/createuser \

     

       
109
       
-
       
          -SDR hydron || true

     

       
110
       
-
       
        ${pkgs.sudo}/bin/sudo -u ${postgres.superUser} ${postgres.package}/bin/createdb \

     

       
111
       
-
       
          -T template0 -E UTF8 -O hydron hydron || true

     

       
112
       
-
       
        ${pkgs.sudo}/bin/sudo -u hydron ${postgres.package}/bin/psql \

     

       
113
       
-
       
          -c "ALTER ROLE hydron WITH PASSWORD '$(cat ${escapeShellArg cfg.passwordFile})';" || true

     

       
114
       
-
       
      '';

     

       
115
       
-
       


     

       
116
       
 
       
      serviceConfig = {

     

       
117
       
-
       
        PermissionsStartOnly = true;

     

       
118
       
 
       
        User = "hydron";

     

       
119
       
 
       
        Group = "hydron";

     

       
120
       
 
       
        ExecStart = "${pkgs.hydron}/bin/hydron serve"

     
···

       
139
       
 
       
      description = "Automatically import paths into hydron and possibly fetch tags";

     

       
140
       
 
       
      after = [ "network.target" "hydron.service" ];

     

       
141
       
 
       
      wantedBy = [ "timers.target" ];

     

       
142
       
-
       
      

     

       
143
       
 
       
      timerConfig = {

     

       
144
       
 
       
        Persistent = true;

     

       
145
       
 
       
        OnCalendar = cfg.interval;

     
···

       
148
       
 
       


     

       
149
       
 
       
    users = {

     

       
150
       
 
       
      groups.hydron.gid = config.ids.gids.hydron;

     

       
151
       
-
       
      

     

       
152
       
 
       
      users.hydron = {

     

       
153
       
 
       
        description = "hydron server service user";

     

       
154
       
 
       
        home = cfg.dataDir;

     

       
155
       
-
       
        createHome = true;

     

       
156
       
 
       
        group = "hydron";

     

       
157
       
 
       
        uid = config.ids.uids.hydron;

     

       
158
       
 
       
      };

     

···

       
2
       
 
       


     

       
3
       
 
       
let

     

       
4
       
 
       
  cfg = config.services.hydron;

     

       
0
       
 
       

     

       
5
       
 
       
in with lib; {

     

       
6
       
 
       
  options.services.hydron = {

     

       
7
       
 
       
    enable = mkEnableOption "hydron";

     
···

       
80
       
 
       
  };

     

       
81
       
 
       


     

       
82
       
 
       
  config = mkIf cfg.enable {

     

       
0
       
 
       

     

       
0
       
 
       

     

       
83
       
 
       
    services.hydron.passwordFile = mkDefault (pkgs.writeText "hydron-password-file" cfg.password);

     

       
84
       
 
       
    services.hydron.postgresArgsFile = mkDefault (pkgs.writeText "hydron-postgres-args" cfg.postgresArgs);

     

       
85
       
 
       
    services.hydron.postgresArgs = mkDefault ''

     

       
86
       
 
       
      {

     

       
87
       
 
       
        "driver": "postgres",

     

       
88
       
+
       
        "connection": "user=hydron password=${cfg.password} host=/run/postgresql dbname=hydron sslmode=disable"

     

       
89
       
 
       
      }

     

       
90
       
 
       
    '';

     

       
91
       
+
       


     

       
92
       
+
       
    services.postgresql = {

     

       
93
       
+
       
      enable = true;

     

       
94
       
+
       
      ensureDatabases = [ "hydron" ];

     

       
95
       
+
       
      ensureUsers = [

     

       
96
       
+
       
        { name = "hydron";

     

       
97
       
+
       
          ensurePermissions = { "DATABASE hydron" = "ALL PRIVILEGES"; };

     

       
98
       
+
       
        }

     

       
99
       
+
       
      ];

     

       
100
       
+
       
    };

     

       
101
       
+
       


     

       
102
       
+
       
    systemd.tmpfiles.rules = [

     

       
103
       
+
       
      "d '${cfg.dataDir}' 0750 hydron hydron - -"

     

       
104
       
+
       
      "d '${cfg.dataDir}/.hydron' - hydron hydron - -"

     

       
105
       
+
       
      "d '${cfg.dataDir}/images' - hydron hydron - -"

     

       
106
       
+
       
      "Z '${cfg.dataDir}' - hydron hydron - -"

     

       
107
       
+
       


     

       
108
       
+
       
      "L+ '${cfg.dataDir}/.hydron/db_conf.json' - - - - ${cfg.postgresArgsFile}"

     

       
109
       
+
       
    ];

     

       
110
       
 
       


     

       
111
       
 
       
    systemd.services.hydron = {

     

       
112
       
 
       
      description = "hydron";

     

       
113
       
 
       
      after = [ "network.target" "postgresql.service" ];

     

       
114
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
115
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
116
       
 
       
      serviceConfig = {

     

       
0
       
 
       

     

       
117
       
 
       
        User = "hydron";

     

       
118
       
 
       
        Group = "hydron";

     

       
119
       
 
       
        ExecStart = "${pkgs.hydron}/bin/hydron serve"

     
···

       
138
       
 
       
      description = "Automatically import paths into hydron and possibly fetch tags";

     

       
139
       
 
       
      after = [ "network.target" "hydron.service" ];

     

       
140
       
 
       
      wantedBy = [ "timers.target" ];

     

       
141
       
+
       


     

       
142
       
 
       
      timerConfig = {

     

       
143
       
 
       
        Persistent = true;

     

       
144
       
 
       
        OnCalendar = cfg.interval;

     
···

       
147
       
 
       


     

       
148
       
 
       
    users = {

     

       
149
       
 
       
      groups.hydron.gid = config.ids.gids.hydron;

     

       
150
       
+
       


     

       
151
       
 
       
      users.hydron = {

     

       
152
       
 
       
        description = "hydron server service user";

     

       
153
       
 
       
        home = cfg.dataDir;

     

       
0
       
 
       

     

       
154
       
 
       
        group = "hydron";

     

       
155
       
 
       
        uid = config.ids.uids.hydron;

     

       
156
       
 
       
      };