commit d49b5bdfb9f7c9dba84ca982acae75ebe3b0ef9a · pyrox.dev/nixpkgs

+62 -4
nixos/modules/services/web-servers/hydron.nix
···

       1
       1
        
       { config, lib, pkgs, ... }:

     

       2
       2
        
       

     

       3
       3
       -
       let cfg = config.services.hydron;

     

       3
       3
       +
       let

     

       4
       4
       +
         cfg = config.services.hydron;

     

       5
       5
       +
         postgres = config.services.postgresql;

     

       4
       6
        
       in with lib; {

     

       5
       7
        
         options.services.hydron = {

     

       6
       8
        
           enable = mkEnableOption "hydron";

     
···

       25
       27
        
             '';

     

       26
       28
        
           };

     

       27
       29
        
       

     

       30
       30
       +
           password = mkOption {

     

       31
       31
       +
             type = types.str;

     

       32
       32
       +
             default = "hydron";

     

       33
       33
       +
             example = "dumbpass";

     

       34
       34
       +
             description = "Password for the hydron database.";

     

       35
       35
       +
           };

     

       36
       36
       +
       

     

       37
       37
       +
           passwordFile = mkOption {

     

       38
       38
       +
             type = types.path;

     

       39
       39
       +
             default = "/run/keys/hydron-password-file";

     

       40
       40
       +
             example = "/home/okina/hydron/keys/pass";

     

       41
       41
       +
             description = "Password file for the hydron database.";

     

       42
       42
       +
           };

     

       43
       43
       +
       

     

       44
       44
       +
           postgresArgs = mkOption {

     

       45
       45
       +
             type = types.str;

     

       46
       46
       +
             description = "Postgresql connection arguments.";

     

       47
       47
       +
             example = ''

     

       48
       48
       +
               {

     

       49
       49
       +
                 "driver": "postgres",

     

       50
       50
       +
                 "connection": "user=hydron password=dumbpass dbname=hydron sslmode=disable"

     

       51
       51
       +
               }

     

       52
       52
       +
             '';

     

       53
       53
       +
           };

     

       54
       54
       +
       

     

       55
       55
       +
           postgresArgsFile = mkOption {

     

       56
       56
       +
             type = types.path;

     

       57
       57
       +
             default = "/run/keys/hydron-postgres-args";

     

       58
       58
       +
             example = "/home/okina/hydron/keys/postgres";

     

       59
       59
       +
             description = "Postgresql connection arguments file.";

     

       60
       60
       +
           };

     

       61
       61
       +
       

     

       28
       62
        
           listenAddress = mkOption {

     

       29
       63
        
             type = types.nullOr types.str;

     

       30
       64
        
             default = null;

     
···

       47
       81
        
         };

     

       48
       82
        
       

     

       49
       83
        
         config = mkIf cfg.enable {

     

       84
       84
       +
           security.sudo.enable = cfg.enable;

     

       85
       85
       +
           services.postgresql.enable = cfg.enable;

     

       86
       86
       +
           services.hydron.passwordFile = mkDefault (pkgs.writeText "hydron-password-file" cfg.password);

     

       87
       87
       +
           services.hydron.postgresArgsFile = mkDefault (pkgs.writeText "hydron-postgres-args" cfg.postgresArgs);

     

       88
       88
       +
           services.hydron.postgresArgs = mkDefault ''

     

       89
       89
       +
             {

     

       90
       90
       +
               "driver": "postgres",

     

       91
       91
       +
               "connection": "user=hydron password=${cfg.password} dbname=hydron sslmode=disable"

     

       92
       92
       +
             }

     

       93
       93
       +
           '';

     

       94
       94
       +
       

     

       50
       95
        
           systemd.services.hydron = {

     

       51
       96
        
             description = "hydron";

     

       52
       52
       -
             after = [ "network.target" ];

     

       97
       97
       +
             after = [ "network.target" "postgresql.service" ];

     

       53
       98
        
             wantedBy = [ "multi-user.target" ];

     

       54
       99
        
       

     

       55
       100
        
             preStart = ''

     

       56
       56
       -
               # Ensure folder exists and permissions are correct

     

       57
       57
       -
               mkdir -p ${escapeShellArg cfg.dataDir}/images

     

       101
       101
       +
               # Ensure folder exists or create it and permissions are correct

     

       102
       102
       +
               mkdir -p ${escapeShellArg cfg.dataDir}/{.hydron,images}

     

       103
       103
       +
               ln -sf ${escapeShellArg cfg.postgresArgsFile} ${escapeShellArg cfg.dataDir}/.hydron/db_conf.json

     

       58
       104
        
               chmod 750 ${escapeShellArg cfg.dataDir}

     

       59
       105
        
               chown -R hydron:hydron ${escapeShellArg cfg.dataDir}

     

       106
       106
       +
       

     

       107
       107
       +
               # Ensure the database is correct or create it

     

       108
       108
       +
               ${pkgs.sudo}/bin/sudo -u ${postgres.superUser} ${postgres.package}/bin/createuser \

     

       109
       109
       +
                 -SDR hydron || true

     

       110
       110
       +
               ${pkgs.sudo}/bin/sudo -u ${postgres.superUser} ${postgres.package}/bin/createdb \

     

       111
       111
       +
                 -T template0 -E UTF8 -O hydron hydron || true

     

       112
       112
       +
               ${pkgs.sudo}/bin/sudo -u hydron ${postgres.package}/bin/psql \

     

       113
       113
       +
                 -c "ALTER ROLE hydron WITH PASSWORD '$(cat ${escapeShellArg cfg.passwordFile})';" || true

     

       60
       114
        
             '';

     

       61
       115
        
       

     

       62
       116
        
             serviceConfig = {

     
···

       100
       154
        
             };

     

       101
       155
        
           };

     

       102
       156
        
         };

     

       157
       157
       +
       

     

       158
       158
       +
         imports = [

     

       159
       159
       +
           (mkRenamedOptionModule [ "services" "hydron" "baseDir" ] [ "services" "hydron" "dataDir" ])

     

       160
       160
       +
         ];

     

       103
       161
        
       

     

       104
       162
        
         meta.maintainers = with maintainers; [ chiiruno ];

     

       105
       163
        
       }