commit ebdfdae156da6d3a94b3e5119f792e33334d6edb · pyrox.dev/nixpkgs

+30

nixos/modules/services/misc/paperless.nix

···

       6
        
         pkg = cfg.package;

     

       7
        
       

     

       8
        
         defaultUser = "paperless";

     

       0
        
       
     

       9
        
       

     

       10
        
         # Don't start a redis instance if the user sets a custom redis connection

     

       11
        
         enableRedis = !hasAttr "PAPERLESS_REDIS" cfg.extraConfig;

     
···

       15
        
           PAPERLESS_DATA_DIR = cfg.dataDir;

     

       16
        
           PAPERLESS_MEDIA_ROOT = cfg.mediaDir;

     

       17
        
           PAPERLESS_CONSUMPTION_DIR = cfg.consumptionDir;

     

       0
        
       
     

       18
        
           GUNICORN_CMD_ARGS = "--bind=${cfg.address}:${toString cfg.port}";

     

       19
        
         } // optionalAttrs (config.time.timeZone != null) {

     

       20
        
           PAPERLESS_TIME_ZONE = config.time.timeZone;

     
···

       49
        
             cfg.dataDir

     

       50
        
             cfg.mediaDir

     

       51
        
           ];

     

       0
        
       
     

       52
        
           CapabilityBoundingSet = "";

     

       53
        
           # ProtectClock adds DeviceAllow=char-rtc r

     

       54
        
           DeviceAllow = "";

     
···

       290
        
                   '${cfg.passwordFile}' '${cfg.dataDir}/superuser-password'

     

       291
        
               '';

     

       292
        
               Type = "oneshot";

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       293
        
             };

     

       294
        
           };

     

       295

···

       6
        
         pkg = cfg.package;

     

       7
        
       

     

       8
        
         defaultUser = "paperless";

     

       9
       +
         nltkDir = "/var/cache/paperless/nltk";

     

       10
        
       

     

       11
        
         # Don't start a redis instance if the user sets a custom redis connection

     

       12
        
         enableRedis = !hasAttr "PAPERLESS_REDIS" cfg.extraConfig;

     
···

       16
        
           PAPERLESS_DATA_DIR = cfg.dataDir;

     

       17
        
           PAPERLESS_MEDIA_ROOT = cfg.mediaDir;

     

       18
        
           PAPERLESS_CONSUMPTION_DIR = cfg.consumptionDir;

     

       19
       +
           PAPERLESS_NLTK_DIR = nltkDir;

     

       20
        
           GUNICORN_CMD_ARGS = "--bind=${cfg.address}:${toString cfg.port}";

     

       21
        
         } // optionalAttrs (config.time.timeZone != null) {

     

       22
        
           PAPERLESS_TIME_ZONE = config.time.timeZone;

     
···

       51
        
             cfg.dataDir

     

       52
        
             cfg.mediaDir

     

       53
        
           ];

     

       54
       +
           CacheDirectory = "paperless";

     

       55
        
           CapabilityBoundingSet = "";

     

       56
        
           # ProtectClock adds DeviceAllow=char-rtc r

     

       57
        
           DeviceAllow = "";

     
···

       293
        
                   '${cfg.passwordFile}' '${cfg.dataDir}/superuser-password'

     

       294
        
               '';

     

       295
        
               Type = "oneshot";

     

       296
       +
             };

     

       297
       +
           };

     

       298
       +
       

     

       299
       +
           # Download NLTK corpus data

     

       300
       +
           systemd.services.paperless-download-nltk-data = {

     

       301
       +
             wantedBy = [ "paperless-scheduler.service" ];

     

       302
       +
             before = [ "paperless-scheduler.service" ];

     

       303
       +
             after = [ "network-online.target" ];

     

       304
       +
             serviceConfig = defaultServiceConfig // {

     

       305
       +
               User = cfg.user;

     

       306
       +
               Type = "oneshot";

     

       307
       +
               # Enable internet access

     

       308
       +
               PrivateNetwork = false;

     

       309
       +
               # Restrict write access

     

       310
       +
               BindPaths = [];

     

       311
       +
               BindReadOnlyPaths = [

     

       312
       +
                 "/nix/store"

     

       313
       +
                 "-/etc/resolv.conf"

     

       314
       +
                 "-/etc/nsswitch.conf"

     

       315
       +
                 "-/etc/ssl/certs"

     

       316
       +
                 "-/etc/static/ssl/certs"

     

       317
       +
                 "-/etc/hosts"

     

       318
       +
                 "-/etc/localtime"

     

       319
       +
               ];

     

       320
       +
               ExecStart = let pythonWithNltk = pkg.python.withPackages (ps: [ ps.nltk ]); in ''

     

       321
       +
                 ${pythonWithNltk}/bin/python -m nltk.downloader -d '${nltkDir}' punkt snowball_data stopwords

     

       322
       +
               '';

     

       323
        
             };

     

       324
        
           };

     

       325