commit d9078d03a30dd332542f662734d67898421c3bf6 · pyrox.dev/nixpkgs

+37 -14
nixos/modules/services/web-servers/fcgiwrap.nix
···

       4
       4
        
       

     

       5
       5
        
       let

     

       6
       6
        
         cfg = config.services.fcgiwrap;

     

       7
       7
       -
       

     

       8
       7
        
       in {

     

       9
       8
        
       

     

       10
       9
        
         options = {

     
···

       21
       20
        
               description = "Number of processes to prefork.";

     

       22
       21
        
             };

     

       23
       22
        
       

     

       24
       24
       -
             bindSocket = mkOption {

     

       25
       25
       -
               type = types.string;

     

       26
       26
       -
               default = "unix:/run/fcgiwrap.sock";

     

       27
       27
       -
               description = ''

     

       28
       28
       -
                 Socket to bind to. Valid socket URLs are:

     

       29
       29
       -
                   unix:/path/to/socket for Unix sockets

     

       30
       30
       -
                   tcp:dot.ted.qu.ad:port for IPv4 sockets

     

       31
       31
       -
                   tcp6:[ipv6_addr]:port for IPv6 sockets

     

       32
       32
       -
               '';

     

       23
       23
       +
             socketType = mkOption {

     

       24
       24
       +
               type = types.addCheck types.str (t: t == "unix" || t == "tcp" || t == "tcp6");

     

       25
       25
       +
               default = "unix";

     

       26
       26
       +
               description = "Socket type: 'unix', 'tcp' or 'tcp6'.";

     

       27
       27
       +
             };

     

       28
       28
       +
       

     

       29
       29
       +
             socketAddress = mkOption {

     

       30
       30
       +
               type = types.str;

     

       31
       31
       +
               default = "/run/fcgiwrap.sock";

     

       32
       32
       +
               example = "1.2.3.4:5678";

     

       33
       33
       +
               description = "Socket address. In case of a UNIX socket, this should be its filesystem path.";

     

       34
       34
       +
             };

     

       35
       35
       +
       

     

       36
       36
       +
             user = mkOption {

     

       37
       37
       +
               type = types.nullOr types.str;

     

       38
       38
       +
               default = null;

     

       39
       39
       +
               description = "User permissions for the socket.";

     

       40
       40
       +
             };

     

       41
       41
       +
       

     

       42
       42
       +
             group = mkOption {

     

       43
       43
       +
               type = types.nullOr types.str;

     

       44
       44
       +
               default = null;

     

       45
       45
       +
               description = "Group permissions for the socket.";

     

       33
       46
        
             };

     

       34
       47
        
           };

     

       35
       48
        
         };

     

       36
       49
        
       

     

       37
       50
        
         config = mkIf cfg.enable {

     

       38
       38
       -
       

     

       39
       51
        
           systemd.services.fcgiwrap = {

     

       40
       52
        
             after = [ "nss-user-lookup.target" ];

     

       41
       41
       -
             wantedBy = [ "multi-user.target" ];

     

       53
       53
       +
             wantedBy = optional (cfg.socketType != "unix") "multi-user.target";

     

       42
       54
        
       

     

       43
       55
        
             serviceConfig = {

     

       44
       44
       -
               ExecStart = "${pkgs.fcgiwrap}/sbin/fcgiwrap -c ${builtins.toString cfg.preforkProcesses} -s ${cfg.bindSocket}";

     

       45
       45
       -
             };

     

       56
       56
       +
               ExecStart = "${pkgs.fcgiwrap}/sbin/fcgiwrap -c ${builtins.toString cfg.preforkProcesses} ${

     

       57
       57
       +
                 if (cfg.socketType != "unix") then "-s ${cfg.socketType}:${cfg.socketAddress}" else ""

     

       58
       58
       +
               }";

     

       59
       59
       +
             } // (if cfg.user != null && cfg.group != null then {

     

       60
       60
       +
               User = cfg.user;

     

       61
       61
       +
               Group = cfg.group;

     

       62
       62
       +
             } else { } );

     

       46
       63
        
           };

     

       47
       64
        
       

     

       65
       65
       +
           systemd.sockets = if (cfg.socketType == "unix") then {

     

       66
       66
       +
             fcgiwrap = {

     

       67
       67
       +
               wantedBy = [ "sockets.target" ];

     

       68
       68
       +
               socketConfig.ListenStream = cfg.socketAddress;

     

       69
       69
       +
             };

     

       70
       70
       +
           } else { };

     

       48
       71
        
         };

     

       49
       72
        
       }