commit df3be1718a351df2bfa3ec8e2d592faabb62515e · pyrox.dev/nixpkgs

+44 -15
nixos/modules/services/monitoring/grafana.nix
···

       42
       42
        
           AUTH_ANONYMOUS_ENABLED = boolToString cfg.auth.anonymous.enable;

     

       43
       43
        
           AUTH_ANONYMOUS_ORG_NAME = cfg.auth.anonymous.org_name;

     

       44
       44
        
           AUTH_ANONYMOUS_ORG_ROLE = cfg.auth.anonymous.org_role;

     

       45
       45
       +
           AUTH_GOOGLE_ENABLED = boolToString cfg.auth.google.enable;

     

       46
       46
       +
           AUTH_GOOGLE_ALLOW_SIGN_UP = boolToString cfg.auth.google.allowSignUp;

     

       47
       47
       +
           AUTH_GOOGLE_CLIENT_ID = cfg.auth.google.clientId;

     

       45
       48
        
       

     

       46
       49
        
           ANALYTICS_REPORTING_ENABLED = boolToString cfg.analytics.reporting.enable;

     

       47
       50
        
       

     
···

       528
       531
        
             };

     

       529
       532
        
           };

     

       530
       533
        
       

     

       531
       531
       -
           auth.anonymous = {

     

       532
       532
       -
             enable = mkOption {

     

       533
       533
       -
               description = "Whether to allow anonymous access.";

     

       534
       534
       -
               default = false;

     

       535
       535
       -
               type = types.bool;

     

       534
       534
       +
           auth = {

     

       535
       535
       +
             anonymous = {

     

       536
       536
       +
               enable = mkOption {

     

       537
       537
       +
                 description = "Whether to allow anonymous access.";

     

       538
       538
       +
                 default = false;

     

       539
       539
       +
                 type = types.bool;

     

       540
       540
       +
               };

     

       541
       541
       +
               org_name = mkOption {

     

       542
       542
       +
                 description = "Which organization to allow anonymous access to.";

     

       543
       543
       +
                 default = "Main Org.";

     

       544
       544
       +
                 type = types.str;

     

       545
       545
       +
               };

     

       546
       546
       +
               org_role = mkOption {

     

       547
       547
       +
                 description = "Which role anonymous users have in the organization.";

     

       548
       548
       +
                 default = "Viewer";

     

       549
       549
       +
                 type = types.str;

     

       550
       550
       +
               };

     

       536
       551
        
             };

     

       537
       537
       -
             org_name = mkOption {

     

       538
       538
       -
               description = "Which organization to allow anonymous access to.";

     

       539
       539
       -
               default = "Main Org.";

     

       540
       540
       -
               type = types.str;

     

       541
       541
       -
             };

     

       542
       542
       -
             org_role = mkOption {

     

       543
       543
       -
               description = "Which role anonymous users have in the organization.";

     

       544
       544
       -
               default = "Viewer";

     

       545
       545
       -
               type = types.str;

     

       552
       552
       +
             google = {

     

       553
       553
       +
               enable = mkOption {

     

       554
       554
       +
                 description = "Whether to allow Google OAuth2.";

     

       555
       555
       +
                 default = false;

     

       556
       556
       +
                 type = types.bool;

     

       557
       557
       +
               };

     

       558
       558
       +
               allowSignUp = mkOption {

     

       559
       559
       +
                 description = "Whether to allow sign up with Google OAuth2.";

     

       560
       560
       +
                 default = false;

     

       561
       561
       +
                 type = types.bool;

     

       562
       562
       +
               };

     

       563
       563
       +
               clientId = mkOption {

     

       564
       564
       +
                 description = "Google OAuth2 client ID.";

     

       565
       565
       +
                 default = "";

     

       566
       566
       +
                 type = types.str;

     

       567
       567
       +
               };

     

       568
       568
       +
               clientSecretFile = mkOption {

     

       569
       569
       +
                 description = "Google OAuth2 client secret.";

     

       570
       570
       +
                 default = null;

     

       571
       571
       +
                 type = types.nullOr types.path;

     

       572
       572
       +
               };

     

       546
       573
        
             };

     

       547
       547
       -
       

     

       548
       574
        
           };

     

       549
       575
        
       

     

       550
       576
        
           analytics.reporting = {

     
···

       609
       635
        
               QT_QPA_PLATFORM = "offscreen";

     

       610
       636
        
             } // mapAttrs' (n: v: nameValuePair "GF_${n}" (toString v)) envOptions;

     

       611
       637
        
             script = ''

     

       638
       638
       +
               ${optionalString (cfg.auth.google.clientSecretFile != null) ''

     

       639
       639
       +
                 export GF_AUTH_GOOGLE_CLIENT_SECRET="$(cat ${escapeShellArg cfg.auth.google.clientSecretFile})"

     

       640
       640
       +
               ''}

     

       612
       641
        
               ${optionalString (cfg.database.passwordFile != null) ''

     

       613
       642
        
                 export GF_DATABASE_PASSWORD="$(cat ${escapeShellArg cfg.database.passwordFile})"

     

       614
       643
        
               ''}