commit dfb8a2a7c47c5de7a3d157b6c0a07648e633b5c3 · pyrox.dev/nixpkgs

+39 -5
nixos/modules/services/networking/syncplay.nix
···

       8
       8
        
         cmdArgs =

     

       9
       9
        
           [ "--port" cfg.port ]

     

       10
       10
        
           ++ optionals (cfg.salt != null) [ "--salt" cfg.salt ]

     

       11
       11
       -
           ++ optionals (cfg.certDir != null) [ "--tls" cfg.certDir ];

     

       11
       11
       +
           ++ optionals (cfg.certDir != null) [ "--tls" cfg.certDir ]

     

       12
       12
       +
           ++ cfg.extraArgs;

     

       12
       13
        
       

     

       13
       14
        
       in

     

       14
       15
        
       {

     
···

       33
       34
        
               default = null;

     

       34
       35
        
               description = lib.mdDoc ''

     

       35
       36
        
                 Salt to allow room operator passwords generated by this server

     

       36
       36
       -
                 instance to still work when the server is restarted.

     

       37
       37
       +
                 instance to still work when the server is restarted.  The salt will be

     

       38
       38
       +
                 readable in the nix store and the processlist.  If this is not

     

       39
       39
       +
                 intended use `saltFile` instead.  Mutually exclusive with

     

       40
       40
       +
                 <option>services.syncplay.saltFile</option>.

     

       41
       41
       +
               '';

     

       42
       42
       +
             };

     

       43
       43
       +
       

     

       44
       44
       +
             saltFile = mkOption {

     

       45
       45
       +
               type = types.nullOr types.path;

     

       46
       46
       +
               default = null;

     

       47
       47
       +
               description = lib.mdDoc ''

     

       48
       48
       +
                 Path to the file that contains the server salt.  This allows room

     

       49
       49
       +
                 operator passwords generated by this server instance to still work

     

       50
       50
       +
                 when the server is restarted.  `null`, the server doesn't load the

     

       51
       51
       +
                 salt from a file.  Mutually exclusive with

     

       52
       52
       +
                 <option>services.syncplay.salt</option>.

     

       37
       53
        
               '';

     

       38
       54
        
             };

     

       39
       55
        
       

     
···

       46
       62
        
               '';

     

       47
       63
        
             };

     

       48
       64
        
       

     

       65
       65
       +
             extraArgs = mkOption {

     

       66
       66
       +
               type = types.listOf types.str;

     

       67
       67
       +
               default = [ ];

     

       68
       68
       +
               description = lib.mdDoc ''

     

       69
       69
       +
                 Additional arguments to be passed to the service.

     

       70
       70
       +
               '';

     

       71
       71
       +
             };

     

       72
       72
       +
       

     

       49
       73
        
             user = mkOption {

     

       50
       74
        
               type = types.str;

     

       51
       75
        
               default = "nobody";

     
···

       74
       98
        
         };

     

       75
       99
        
       

     

       76
       100
        
         config = mkIf cfg.enable {

     

       101
       101
       +
           assertions = [

     

       102
       102
       +
             {

     

       103
       103
       +
               assertion = cfg.salt == null || cfg.saltFile == null;

     

       104
       104
       +
               message = "services.syncplay.salt and services.syncplay.saltFile are mutually exclusive.";

     

       105
       105
       +
             }

     

       106
       106
       +
           ];

     

       77
       107
        
           systemd.services.syncplay = {

     

       78
       108
        
             description = "Syncplay Service";

     

       79
       79
       -
             wantedBy    = [ "multi-user.target" ];

     

       80
       80
       -
             after       = [ "network-online.target" ];

     

       109
       109
       +
             wantedBy = [ "multi-user.target" ];

     

       110
       110
       +
             after = [ "network-online.target" ];

     

       81
       111
        
       

     

       82
       112
        
             serviceConfig = {

     

       83
       113
        
               User = cfg.user;

     

       84
       114
        
               Group = cfg.group;

     

       85
       85
       -
               LoadCredential = lib.mkIf (cfg.passwordFile != null) "password:${cfg.passwordFile}";

     

       115
       115
       +
               LoadCredential = lib.optional (cfg.passwordFile != null) "password:${cfg.passwordFile}"

     

       116
       116
       +
                 ++ lib.optional (cfg.saltFile != null) "salt:${cfg.saltFile}";

     

       86
       117
        
             };

     

       87
       118
        
       

     

       88
       119
        
             script = ''

     

       89
       120
        
               ${lib.optionalString (cfg.passwordFile != null) ''

     

       90
       121
        
                 export SYNCPLAY_PASSWORD=$(cat "''${CREDENTIALS_DIRECTORY}/password")

     

       122
       122
       +
               ''}

     

       123
       123
       +
               ${lib.optionalString (cfg.saltFile != null) ''

     

       124
       124
       +
                 export SYNCPLAY_SALT=$(cat "''${CREDENTIALS_DIRECTORY}/salt")

     

       91
       125
        
               ''}

     

       92
       126
        
               exec ${pkgs.syncplay-nogui}/bin/syncplay-server ${escapeShellArgs cmdArgs}

     

       93
       127
        
             '';