commit f7d49037a48846e025dd3d8f2ecb47f499431ee8 · pyrox.dev/nixpkgs

+116 -59
nixos/modules/services/networking/dnschain.nix
···

       3
       3
        
       with lib;

     

       4
       4
        
       

     

       5
       5
        
       let

     

       6
       6
       -
         cfg = config.services;

     

       6
       6
       +
         cfgs = config.services;

     

       7
       7
       +
         cfg  = cfgs.dnschain;

     

       8
       8
       +
       

     

       9
       9
       +
         dataDir  = "/var/lib/dnschain";

     

       10
       10
       +
         username = "dnschain";

     

       7
       11
        
       

     

       8
       8
       -
         dnschainConf = pkgs.writeText "dnschain.conf" ''

     

       12
       12
       +
         configFile = pkgs.writeText "dnschain.conf" ''

     

       9
       13
        
           [log]

     

       10
       10
       -
           level=info

     

       14
       14
       +
           level = info

     

       11
       15
        
       

     

       12
       16
        
           [dns]

     

       13
       13
       -
           host = 127.0.0.1

     

       14
       14
       -
           port = 5333

     

       17
       17
       +
           host = ${cfg.dns.address}

     

       18
       18
       +
           port = ${toString cfg.dns.port}

     

       15
       19
        
           oldDNSMethod = NO_OLD_DNS

     

       16
       16
       -
           # TODO: check what that address is acutally used for

     

       17
       17
       -
           externalIP = 127.0.0.1

     

       20
       20
       +
           externalIP = ${cfg.dns.address}

     

       18
       21
        
       

     

       19
       22
        
           [http]

     

       20
       20
       -
           host = 127.0.0.1

     

       21
       21
       -
           port=8088

     

       22
       22
       -
           tlsPort=4443

     

       23
       23
       +
           host = ${cfg.api.hostname}

     

       24
       24
       +
           port = ${toString cfg.api.port}

     

       25
       25
       +
           tlsPort = ${toString cfg.api.tlsPort}

     

       26
       26
       +
       

     

       27
       27
       +
           ${cfg.extraConfig}

     

       23
       28
        
         '';

     

       24
       29
        
       

     

       25
       30
        
       in

     
···

       32
       37
        
       

     

       33
       38
        
           services.dnschain = {

     

       34
       39
        
       

     

       35
       35
       -
             enable = mkOption {

     

       36
       36
       -
               type = types.bool;

     

       37
       37
       -
               default = false;

     

       40
       40
       +
             enable = mkEnableOption ''

     

       41
       41
       +
               DNSChain, a blockchain based DNS + HTTP server.

     

       42
       42
       +
               To resolve .bit domains set <literal>services.namecoind.enable = true;</literal>

     

       43
       43
       +
               and an RPC username/password.

     

       44
       44
       +
             '';

     

       45
       45
       +
       

     

       46
       46
       +
             dns.address = mkOption {

     

       47
       47
       +
               type = types.str;

     

       48
       48
       +
               default = "127.0.0.1";

     

       38
       49
        
               description = ''

     

       39
       39
       -
                 Whether to run dnschain. That implies running

     

       40
       40
       -
                 namecoind as well, so make sure to configure

     

       41
       41
       -
                 it appropriately.

     

       50
       50
       +
                 The IP address that will be used to reach this machine.

     

       51
       51
       +
                 Leave this unchanged if you do not wish to directly expose the DNSChain resolver.

     

       42
       52
        
               '';

     

       43
       53
        
             };

     

       44
       54
        
       

     

       45
       45
       -
           };

     

       55
       55
       +
             dns.port = mkOption {

     

       56
       56
       +
               type = types.int;

     

       57
       57
       +
               default = 5333;

     

       58
       58
       +
               description = ''

     

       59
       59
       +
                 The port the DNSChain resolver will bind to.

     

       60
       60
       +
               '';

     

       61
       61
       +
             };

     

       46
       62
        
       

     

       47
       47
       -
           services.dnsmasq = {

     

       48
       48
       -
             resolveDnschainQueries = mkOption {

     

       49
       49
       -
               type = types.bool;

     

       50
       50
       -
               default = false;

     

       63
       63
       +
             api.hostname = mkOption {

     

       64
       64
       +
               type = types.str;

     

       65
       65
       +
               default = "0.0.0.0";

     

       51
       66
        
               description = ''

     

       52
       52
       -
                 Resolve <literal>.bit</literal> top-level domains

     

       53
       53
       -
                 with dnschain and namecoind.

     

       67
       67
       +
                 The hostname (or IP address) the DNSChain API server will bind to.

     

       68
       68
       +
               '';

     

       69
       69
       +
             };

     

       70
       70
       +
       

     

       71
       71
       +
             api.port = mkOption {

     

       72
       72
       +
               type = types.int;

     

       73
       73
       +
               default = 8080;

     

       74
       74
       +
               description = ''

     

       75
       75
       +
                 The port the DNSChain API server (HTTP) will bind to.

     

       76
       76
       +
               '';

     

       77
       77
       +
             };

     

       78
       78
       +
       

     

       79
       79
       +
             api.tlsPort = mkOption {

     

       80
       80
       +
               type = types.int;

     

       81
       81
       +
               default = 4433;

     

       82
       82
       +
               description = ''

     

       83
       83
       +
                 The port the DNSChain API server (HTTPS) will bind to.

     

       84
       84
       +
               '';

     

       85
       85
       +
             };

     

       86
       86
       +
       

     

       87
       87
       +
             extraConfig = mkOption {

     

       88
       88
       +
               type = types.lines;

     

       89
       89
       +
               default = "";

     

       90
       90
       +
               example = ''

     

       91
       91
       +
                 [log]

     

       92
       92
       +
                 level = debug

     

       93
       93
       +
               '';

     

       94
       94
       +
               description = ''

     

       95
       95
       +
                 Additional options that will be appended to the configuration file.

     

       54
       96
        
               '';

     

       55
       97
        
             };

     

       56
       98
        
       

     

       57
       99
        
           };

     

       58
       100
        
       

     

       101
       101
       +
           services.dnsmasq.resolveDNSChainQueries = mkOption {

     

       102
       102
       +
             type = types.bool;

     

       103
       103
       +
             default = false;

     

       104
       104
       +
             description = ''

     

       105
       105
       +
               Resolve <literal>.bit</literal> top-level domains using DNSChain and namecoin.

     

       106
       106
       +
             '';

     

       107
       107
       +
           };

     

       108
       108
       +
       

     

       109
       109
       +
           services.pdns-recursor.resolveDNSChainQueries = mkOption {

     

       110
       110
       +
             type = types.bool;

     

       111
       111
       +
             default = false;

     

       112
       112
       +
             description = ''

     

       113
       113
       +
               Resolve <literal>.bit</literal> top-level domains using DNSChain and namecoin.

     

       114
       114
       +
             '';

     

       115
       115
       +
           };

     

       116
       116
       +
       

     

       59
       117
        
         };

     

       60
       118
        
       

     

       61
       119
        
       

     

       62
       120
        
         ###### implementation

     

       63
       121
        
       

     

       64
       64
       -
         config = mkIf cfg.dnschain.enable {

     

       122
       122
       +
         config = mkIf cfg.enable {

     

       65
       123
        
       

     

       66
       66
       -
           services.namecoind.enable = true;

     

       67
       67
       -
       

     

       68
       68
       -
           services.dnsmasq.servers = optionals cfg.dnsmasq.resolveDnschainQueries [ "/.bit/127.0.0.1#5333" ];

     

       124
       124
       +
           services.dnsmasq.servers = optionals cfgs.dnsmasq.resolveDNSChainQueries

     

       125
       125
       +
             [ "/.bit/127.0.0.1#${toString cfg.dns.port}"

     

       126
       126
       +
               "/.dns/127.0.0.1#${toString cfg.dns.port}"

     

       127
       127
       +
             ];

     

       69
       128
        
       

     

       70
       70
       -
           users.extraUsers = singleton

     

       71
       71
       -
             { name = "dnschain";

     

       72
       72
       -
               uid = config.ids.uids.dnschain;

     

       73
       73
       -
               extraGroups = [ "namecoin" ];

     

       74
       74
       -
               description = "Dnschain daemon user";

     

       75
       75
       -
               home = "/var/lib/dnschain";

     

       76
       76
       -
               createHome = true;

     

       129
       129
       +
           services.pdns-recursor.forwardZones = mkIf cfgs.pdns-recursor.resolveDNSChainQueries

     

       130
       130
       +
             { bit = "127.0.0.1:${toString cfg.dns.port}";

     

       131
       131
       +
               dns = "127.0.0.1:${toString cfg.dns.port}";

     

       77
       132
        
             };

     

       133
       133
       +
       

     

       134
       134
       +
           users.extraUsers = singleton {

     

       135
       135
       +
             name = username;

     

       136
       136
       +
             description = "DNSChain daemon user";

     

       137
       137
       +
             home = dataDir;

     

       138
       138
       +
             createHome = true;

     

       139
       139
       +
             uid = config.ids.uids.dnschain;

     

       140
       140
       +
             extraGroups = optional cfgs.namecoind.enable "namecoin";

     

       141
       141
       +
           };

     

       78
       142
        
       

     

       79
       143
        
           systemd.services.dnschain = {

     

       80
       80
       -
               description = "Dnschain Daemon";

     

       81
       81
       -
               after = [ "namecoind.target" ];

     

       82
       82
       -
               wantedBy = [ "multi-user.target" ];

     

       83
       83
       -
               path = [ pkgs.openssl ];

     

       84
       84
       -
               preStart = ''

     

       85
       85
       -
                 # Link configuration file into dnschain HOME directory

     

       86
       86
       -
                 if [ "$(${pkgs.coreutils}/bin/realpath /var/lib/dnschain/.dnschain.conf)" != "${dnschainConf}" ]; then

     

       87
       87
       -
                     rm -rf /var/lib/dnschain/.dnschain.conf

     

       88
       88
       -
                     ln -s ${dnschainConf} /var/lib/dnschain/.dnschain.conf

     

       89
       89
       -
                 fi

     

       144
       144
       +
             description = "DNSChain daemon";

     

       145
       145
       +
             after    = optional cfgs.namecoind.enable "namecoind.target";

     

       146
       146
       +
             wantedBy = [ "multi-user.target" ];

     

       90
       147
        
       

     

       91
       91
       -
                 # Create empty namecoin.conf so that dnschain is not

     

       92
       92
       -
                 # searching for /etc/namecoin/namecoin.conf

     

       93
       93
       -
                 if [ ! -e /var/lib/dnschain/.namecoin/namecoin.conf ]; then

     

       94
       94
       -
                     mkdir -p /var/lib/dnschain/.namecoin

     

       95
       95
       -
                     touch /var/lib/dnschain/.namecoin/namecoin.conf

     

       96
       96
       -
                 fi

     

       97
       97
       -
               '';

     

       98
       98
       -
               serviceConfig = {

     

       99
       99
       -
                 Type = "simple";

     

       100
       100
       -
                 User = "dnschain";

     

       101
       101
       -
                 EnvironmentFile = config.services.namecoind.userFile;

     

       102
       102
       -
                 ExecStart = "${pkgs.dnschain}/bin/dnschain --rpcuser=\${USER} --rpcpassword=\${PASSWORD} --rpcport=8336";

     

       103
       103
       -
                 ExecReload = "${pkgs.coreutils}/bin/kill -HUP $MAINPID";

     

       104
       104
       -
                 ExecStop = "${pkgs.coreutils}/bin/kill -KILL $MAINPID";

     

       105
       105
       -
               };

     

       148
       148
       +
             serviceConfig = {

     

       149
       149
       +
               User = "dnschain";

     

       150
       150
       +
               Restart = "on-failure";

     

       151
       151
       +
               ExecStart = "${pkgs.dnschain}/bin/dnschain";

     

       152
       152
       +
             };

     

       153
       153
       +
       

     

       154
       154
       +
             preStart = ''

     

       155
       155
       +
               # Link configuration file into dnschain home directory

     

       156
       156
       +
               configPath=${dataDir}/.dnschain/dnschain.conf

     

       157
       157
       +
               mkdir -p ${dataDir}/.dnschain

     

       158
       158
       +
               if [ "$(realpath $configPath)" != "${configFile}" ]; then

     

       159
       159
       +
                 rm -f $configPath

     

       160
       160
       +
                 ln -s ${configFile} $configPath

     

       161
       161
       +
               fi

     

       162
       162
       +
             '';

     

       106
       163
        
           };

     

       107
       164
        
       

     

       108
       165
        
         };