commit f90b3dcf05249f88063f8023cea2c9849ca4a1e6 · pyrox.dev/nixpkgs

+12 -27
nixos/modules/services/networking/firefox/sync-server.nix
···

       70
       70
        
               '';

     

       71
       71
        
             };

     

       72
       72
        
       

     

       73
       73
       -
             user = mkOption {

     

       74
       74
       -
               type = types.str;

     

       75
       75
       -
               default = "syncserver";

     

       76
       76
       -
               description = "User account under which syncserver runs.";

     

       77
       77
       -
             };

     

       78
       78
       -
       

     

       79
       79
       -
             group = mkOption {

     

       80
       80
       -
               type = types.str;

     

       81
       81
       -
               default = "syncserver";

     

       82
       82
       -
               description = "Group account under which syncserver runs.";

     

       83
       83
       -
             };

     

       84
       84
       -
       

     

       85
       73
        
             publicUrl = mkOption {

     

       86
       74
        
               type = types.str;

     

       87
       75
        
               default = "http://localhost:5000/";

     
···

       138
       126
        
       

     

       139
       127
        
           systemd.services.syncserver = let

     

       140
       128
        
             syncServerEnv = pkgs.python.withPackages(ps: with ps; [ syncserver pasteScript ]);

     

       129
       129
       +
             user = "syncserver";

     

       130
       130
       +
             group = "syncserver";

     

       141
       131
        
           in {

     

       142
       132
        
             after = [ "network.target" ];

     

       143
       133
        
             description = "Firefox Sync Server";

     
···

       145
       135
        
             path = [ pkgs.coreutils syncServerEnv ];

     

       146
       136
        
       

     

       147
       137
        
             serviceConfig = {

     

       148
       148
       -
               User = cfg.user;

     

       149
       149
       -
               Group = cfg.group;

     

       138
       138
       +
               User = user;

     

       139
       139
       +
               Group = group;

     

       150
       140
        
               PermissionsStartOnly = true;

     

       151
       141
        
             };

     

       152
       142
        
       

     
···

       156
       146
        
                 echo  > ${cfg.privateConfig} '[syncserver]'

     

       157
       147
        
                 echo >> ${cfg.privateConfig} "secret = $(head -c 20 /dev/urandom | sha1sum | tr -d ' -')"

     

       158
       148
        
               fi

     

       159
       159
       -
               chown ${cfg.user}:${cfg.group} ${cfg.privateConfig}

     

       149
       149
       +
               chown ${user}:${group} ${cfg.privateConfig}

     

       160
       150
        
             '' + optionalString (cfg.sqlUri == defaultSqlUri) ''

     

       161
       151
        
               if ! test -e $(dirname ${defaultDbLocation}); then

     

       162
       152
        
                 mkdir -m 700 -p $(dirname ${defaultDbLocation})

     

       163
       163
       -
                 chown ${cfg.user}:${cfg.group} $(dirname ${defaultDbLocation})

     

       153
       153
       +
                 chown ${user}:${group} $(dirname ${defaultDbLocation})

     

       164
       154
        
               fi

     

       165
       155
        
               # Move previous database file if it exists

     

       166
       156
        
               oldDb="/var/db/firefox-sync-server.db"

     

       167
       157
        
               if test -f $oldDb; then

     

       168
       158
        
                 mv $oldDb ${defaultDbLocation}

     

       169
       169
       -
                 chown ${cfg.user}:${cfg.group} ${defaultDbLocation}

     

       159
       159
       +
                 chown ${user}:${group} ${defaultDbLocation}

     

       170
       160
        
               fi

     

       171
       161
        
             '';

     

       172
       162
        
             serviceConfig.ExecStart = "${syncServerEnv}/bin/paster serve ${syncServerIni}";

     

       173
       163
        
           };

     

       174
       164
        
       

     

       175
       175
       -
           users.extraUsers = optionalAttrs (cfg.user == "syncserver")

     

       176
       176
       -
             (singleton {

     

       177
       177
       -
               name = "syncserver";

     

       178
       178
       -
               group = cfg.group;

     

       179
       179
       -
               isSystemUser = true;

     

       180
       180
       -
             });

     

       165
       165
       +
           users.users.syncserver = {

     

       166
       166
       +
             group = "syncserver";

     

       167
       167
       +
             isSystemUser = true;

     

       168
       168
       +
           };

     

       181
       169
        
       

     

       182
       182
       -
           users.extraGroups = optionalAttrs (cfg.group == "syncserver")

     

       183
       183
       -
             (singleton {

     

       184
       184
       -
               name = "syncserver";

     

       185
       185
       -
             });

     

       170
       170
       +
           users.groups.syncserver = {};

     

       186
       171
        
         };

     

       187
       172
        
       }