···

       
70
       
 
       
        '';

     

       
71
       
 
       
      };

     

       
72
       
 
       


     

       
73
       
-
       
      user = mkOption {

     

       
74
       
-
       
        type = types.str;

     

       
75
       
-
       
        default = "syncserver";

     

       
76
       
-
       
        description = "User account under which syncserver runs.";

     

       
77
       
-
       
      };

     

       
78
       
-
       


     

       
79
       
-
       
      group = mkOption {

     

       
80
       
-
       
        type = types.str;

     

       
81
       
-
       
        default = "syncserver";

     

       
82
       
-
       
        description = "Group account under which syncserver runs.";

     

       
83
       
-
       
      };

     

       
84
       
-
       


     

       
85
       
 
       
      publicUrl = mkOption {

     

       
86
       
 
       
        type = types.str;

     

       
87
       
 
       
        default = "http://localhost:5000/";

     
···

       
138
       
 
       


     

       
139
       
 
       
    systemd.services.syncserver = let

     

       
140
       
 
       
      syncServerEnv = pkgs.python.withPackages(ps: with ps; [ syncserver pasteScript ]);

     

       
0
       
 
       

     

       
0
       
 
       

     

       
141
       
 
       
    in {

     

       
142
       
 
       
      after = [ "network.target" ];

     

       
143
       
 
       
      description = "Firefox Sync Server";

     
···

       
145
       
 
       
      path = [ pkgs.coreutils syncServerEnv ];

     

       
146
       
 
       


     

       
147
       
 
       
      serviceConfig = {

     

       
148
       
-
       
        User = cfg.user;

     

       
149
       
-
       
        Group = cfg.group;

     

       
150
       
 
       
        PermissionsStartOnly = true;

     

       
151
       
 
       
      };

     

       
152
       
 
       


     
···

       
156
       
 
       
          echo  > ${cfg.privateConfig} '[syncserver]'

     

       
157
       
 
       
          echo >> ${cfg.privateConfig} "secret = $(head -c 20 /dev/urandom | sha1sum | tr -d ' -')"

     

       
158
       
 
       
        fi

     

       
159
       
-
       
        chown ${cfg.user}:${cfg.group} ${cfg.privateConfig}

     

       
160
       
 
       
      '' + optionalString (cfg.sqlUri == defaultSqlUri) ''

     

       
161
       
 
       
        if ! test -e $(dirname ${defaultDbLocation}); then

     

       
162
       
 
       
          mkdir -m 700 -p $(dirname ${defaultDbLocation})

     

       
163
       
-
       
          chown ${cfg.user}:${cfg.group} $(dirname ${defaultDbLocation})

     

       
164
       
 
       
        fi

     

       
165
       
 
       
        # Move previous database file if it exists

     

       
166
       
 
       
        oldDb="/var/db/firefox-sync-server.db"

     

       
167
       
 
       
        if test -f $oldDb; then

     

       
168
       
 
       
          mv $oldDb ${defaultDbLocation}

     

       
169
       
-
       
          chown ${cfg.user}:${cfg.group} ${defaultDbLocation}

     

       
170
       
 
       
        fi

     

       
171
       
 
       
      '';

     

       
172
       
 
       
      serviceConfig.ExecStart = "${syncServerEnv}/bin/paster serve ${syncServerIni}";

     

       
173
       
 
       
    };

     

       
174
       
 
       


     

       
175
       
-
       
    users.extraUsers = optionalAttrs (cfg.user == "syncserver")

     

       
176
       
-
       
      (singleton {

     

       
177
       
-
       
        name = "syncserver";

     

       
178
       
-
       
        group = cfg.group;

     

       
179
       
-
       
        isSystemUser = true;

     

       
180
       
-
       
      });

     

       
181
       
 
       


     

       
182
       
-
       
    users.extraGroups = optionalAttrs (cfg.group == "syncserver")

     

       
183
       
-
       
      (singleton {

     

       
184
       
-
       
        name = "syncserver";

     

       
185
       
-
       
      });

     

       
186
       
 
       
  };

     

       
187
       
 
       
}

     

···

       
70
       
 
       
        '';

     

       
71
       
 
       
      };

     

       
72
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
73
       
 
       
      publicUrl = mkOption {

     

       
74
       
 
       
        type = types.str;

     

       
75
       
 
       
        default = "http://localhost:5000/";

     
···

       
126
       
 
       


     

       
127
       
 
       
    systemd.services.syncserver = let

     

       
128
       
 
       
      syncServerEnv = pkgs.python.withPackages(ps: with ps; [ syncserver pasteScript ]);

     

       
129
       
+
       
      user = "syncserver";

     

       
130
       
+
       
      group = "syncserver";

     

       
131
       
 
       
    in {

     

       
132
       
 
       
      after = [ "network.target" ];

     

       
133
       
 
       
      description = "Firefox Sync Server";

     
···

       
135
       
 
       
      path = [ pkgs.coreutils syncServerEnv ];

     

       
136
       
 
       


     

       
137
       
 
       
      serviceConfig = {

     

       
138
       
+
       
        User = user;

     

       
139
       
+
       
        Group = group;

     

       
140
       
 
       
        PermissionsStartOnly = true;

     

       
141
       
 
       
      };

     

       
142
       
 
       


     
···

       
146
       
 
       
          echo  > ${cfg.privateConfig} '[syncserver]'

     

       
147
       
 
       
          echo >> ${cfg.privateConfig} "secret = $(head -c 20 /dev/urandom | sha1sum | tr -d ' -')"

     

       
148
       
 
       
        fi

     

       
149
       
+
       
        chown ${user}:${group} ${cfg.privateConfig}

     

       
150
       
 
       
      '' + optionalString (cfg.sqlUri == defaultSqlUri) ''

     

       
151
       
 
       
        if ! test -e $(dirname ${defaultDbLocation}); then

     

       
152
       
 
       
          mkdir -m 700 -p $(dirname ${defaultDbLocation})

     

       
153
       
+
       
          chown ${user}:${group} $(dirname ${defaultDbLocation})

     

       
154
       
 
       
        fi

     

       
155
       
 
       
        # Move previous database file if it exists

     

       
156
       
 
       
        oldDb="/var/db/firefox-sync-server.db"

     

       
157
       
 
       
        if test -f $oldDb; then

     

       
158
       
 
       
          mv $oldDb ${defaultDbLocation}

     

       
159
       
+
       
          chown ${user}:${group} ${defaultDbLocation}

     

       
160
       
 
       
        fi

     

       
161
       
 
       
      '';

     

       
162
       
 
       
      serviceConfig.ExecStart = "${syncServerEnv}/bin/paster serve ${syncServerIni}";

     

       
163
       
 
       
    };

     

       
164
       
 
       


     

       
165
       
+
       
    users.users.syncserver = {

     

       
166
       
+
       
      group = "syncserver";

     

       
167
       
+
       
      isSystemUser = true;

     

       
168
       
+
       
    };

     

       
0
       
 
       

     

       
0
       
 
       

     

       
169
       
 
       


     

       
170
       
+
       
    users.groups.syncserver = {};

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
171
       
 
       
  };

     

       
172
       
 
       
}