···

       
8
       
 
       
  cmdArgs =

     

       
9
       
 
       
    [ "--port" cfg.port ]

     

       
10
       
 
       
    ++ optionals (cfg.salt != null) [ "--salt" cfg.salt ]

     

       
11
       
-
       
    ++ optionals (cfg.certDir != null) [ "--tls" cfg.certDir ];

     

       
0
       
 
       

     

       
12
       
 
       


     

       
13
       
 
       
in

     

       
14
       
 
       
{

     
···

       
33
       
 
       
        default = null;

     

       
34
       
 
       
        description = lib.mdDoc ''

     

       
35
       
 
       
          Salt to allow room operator passwords generated by this server

     

       
36
       
-
       
          instance to still work when the server is restarted.

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
37
       
 
       
        '';

     

       
38
       
 
       
      };

     

       
39
       
 
       


     
···

       
46
       
 
       
        '';

     

       
47
       
 
       
      };

     

       
48
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
49
       
 
       
      user = mkOption {

     

       
50
       
 
       
        type = types.str;

     

       
51
       
 
       
        default = "nobody";

     
···

       
74
       
 
       
  };

     

       
75
       
 
       


     

       
76
       
 
       
  config = mkIf cfg.enable {

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
77
       
 
       
    systemd.services.syncplay = {

     

       
78
       
 
       
      description = "Syncplay Service";

     

       
79
       
-
       
      wantedBy    = [ "multi-user.target" ];

     

       
80
       
-
       
      after       = [ "network-online.target" ];

     

       
81
       
 
       


     

       
82
       
 
       
      serviceConfig = {

     

       
83
       
 
       
        User = cfg.user;

     

       
84
       
 
       
        Group = cfg.group;

     

       
85
       
-
       
        LoadCredential = lib.mkIf (cfg.passwordFile != null) "password:${cfg.passwordFile}";

     

       
0
       
 
       

     

       
86
       
 
       
      };

     

       
87
       
 
       


     

       
88
       
 
       
      script = ''

     

       
89
       
 
       
        ${lib.optionalString (cfg.passwordFile != null) ''

     

       
90
       
 
       
          export SYNCPLAY_PASSWORD=$(cat "''${CREDENTIALS_DIRECTORY}/password")

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
91
       
 
       
        ''}

     

       
92
       
 
       
        exec ${pkgs.syncplay-nogui}/bin/syncplay-server ${escapeShellArgs cmdArgs}

     

       
93
       
 
       
      '';

     

···

       
8
       
 
       
  cmdArgs =

     

       
9
       
 
       
    [ "--port" cfg.port ]

     

       
10
       
 
       
    ++ optionals (cfg.salt != null) [ "--salt" cfg.salt ]

     

       
11
       
+
       
    ++ optionals (cfg.certDir != null) [ "--tls" cfg.certDir ]

     

       
12
       
+
       
    ++ cfg.extraArgs;

     

       
13
       
 
       


     

       
14
       
 
       
in

     

       
15
       
 
       
{

     
···

       
34
       
 
       
        default = null;

     

       
35
       
 
       
        description = lib.mdDoc ''

     

       
36
       
 
       
          Salt to allow room operator passwords generated by this server

     

       
37
       
+
       
          instance to still work when the server is restarted.  The salt will be

     

       
38
       
+
       
          readable in the nix store and the processlist.  If this is not

     

       
39
       
+
       
          intended use `saltFile` instead.  Mutually exclusive with

     

       
40
       
+
       
          <option>services.syncplay.saltFile</option>.

     

       
41
       
+
       
        '';

     

       
42
       
+
       
      };

     

       
43
       
+
       


     

       
44
       
+
       
      saltFile = mkOption {

     

       
45
       
+
       
        type = types.nullOr types.path;

     

       
46
       
+
       
        default = null;

     

       
47
       
+
       
        description = lib.mdDoc ''

     

       
48
       
+
       
          Path to the file that contains the server salt.  This allows room

     

       
49
       
+
       
          operator passwords generated by this server instance to still work

     

       
50
       
+
       
          when the server is restarted.  `null`, the server doesn't load the

     

       
51
       
+
       
          salt from a file.  Mutually exclusive with

     

       
52
       
+
       
          <option>services.syncplay.salt</option>.

     

       
53
       
 
       
        '';

     

       
54
       
 
       
      };

     

       
55
       
 
       


     
···

       
62
       
 
       
        '';

     

       
63
       
 
       
      };

     

       
64
       
 
       


     

       
65
       
+
       
      extraArgs = mkOption {

     

       
66
       
+
       
        type = types.listOf types.str;

     

       
67
       
+
       
        default = [ ];

     

       
68
       
+
       
        description = lib.mdDoc ''

     

       
69
       
+
       
          Additional arguments to be passed to the service.

     

       
70
       
+
       
        '';

     

       
71
       
+
       
      };

     

       
72
       
+
       


     

       
73
       
 
       
      user = mkOption {

     

       
74
       
 
       
        type = types.str;

     

       
75
       
 
       
        default = "nobody";

     
···

       
98
       
 
       
  };

     

       
99
       
 
       


     

       
100
       
 
       
  config = mkIf cfg.enable {

     

       
101
       
+
       
    assertions = [

     

       
102
       
+
       
      {

     

       
103
       
+
       
        assertion = cfg.salt == null || cfg.saltFile == null;

     

       
104
       
+
       
        message = "services.syncplay.salt and services.syncplay.saltFile are mutually exclusive.";

     

       
105
       
+
       
      }

     

       
106
       
+
       
    ];

     

       
107
       
 
       
    systemd.services.syncplay = {

     

       
108
       
 
       
      description = "Syncplay Service";

     

       
109
       
+
       
      wantedBy = [ "multi-user.target" ];

     

       
110
       
+
       
      after = [ "network-online.target" ];

     

       
111
       
 
       


     

       
112
       
 
       
      serviceConfig = {

     

       
113
       
 
       
        User = cfg.user;

     

       
114
       
 
       
        Group = cfg.group;

     

       
115
       
+
       
        LoadCredential = lib.optional (cfg.passwordFile != null) "password:${cfg.passwordFile}"

     

       
116
       
+
       
          ++ lib.optional (cfg.saltFile != null) "salt:${cfg.saltFile}";

     

       
117
       
 
       
      };

     

       
118
       
 
       


     

       
119
       
 
       
      script = ''

     

       
120
       
 
       
        ${lib.optionalString (cfg.passwordFile != null) ''

     

       
121
       
 
       
          export SYNCPLAY_PASSWORD=$(cat "''${CREDENTIALS_DIRECTORY}/password")

     

       
122
       
+
       
        ''}

     

       
123
       
+
       
        ${lib.optionalString (cfg.saltFile != null) ''

     

       
124
       
+
       
          export SYNCPLAY_SALT=$(cat "''${CREDENTIALS_DIRECTORY}/salt")

     

       
125
       
 
       
        ''}

     

       
126
       
 
       
        exec ${pkgs.syncplay-nogui}/bin/syncplay-server ${escapeShellArgs cmdArgs}

     

       
127
       
 
       
      '';