153 lines
4.1 KiB
Nix
153 lines
4.1 KiB
Nix
{ config
|
|
, lib
|
|
, pkgs
|
|
, ...
|
|
}:
|
|
let
|
|
cfg = config.services.honk;
|
|
|
|
honk-initdb-script = cfg: pkgs.writeShellApplication {
|
|
name = "honk-initdb-script";
|
|
|
|
runtimeInputs = with pkgs; [ coreutils ];
|
|
|
|
text = ''
|
|
PW=$(cat "$CREDENTIALS_DIRECTORY/honk_passwordFile")
|
|
|
|
echo -e "${cfg.username}\n''$PW\n${cfg.host}:${toString cfg.port}\n${cfg.servername}" | ${lib.getExe cfg.package} -datadir "$STATE_DIRECTORY" init
|
|
'';
|
|
};
|
|
in
|
|
{
|
|
options = {
|
|
services.honk = {
|
|
enable = lib.mkEnableOption "the Honk server";
|
|
package = lib.mkPackageOption pkgs "honk" { };
|
|
|
|
host = lib.mkOption {
|
|
default = "127.0.0.1";
|
|
description = ''
|
|
The host name or IP address the server should listen to.
|
|
'';
|
|
type = lib.types.str;
|
|
};
|
|
|
|
port = lib.mkOption {
|
|
default = 8080;
|
|
description = ''
|
|
The port the server should listen to.
|
|
'';
|
|
type = lib.types.port;
|
|
};
|
|
|
|
username = lib.mkOption {
|
|
description = ''
|
|
The admin account username.
|
|
'';
|
|
type = lib.types.str;
|
|
};
|
|
|
|
passwordFile = lib.mkOption {
|
|
description = ''
|
|
Password for admin account.
|
|
NOTE: Should be string not a store path, to prevent the password from being world readable
|
|
'';
|
|
type = lib.types.path;
|
|
};
|
|
|
|
servername = lib.mkOption {
|
|
description = ''
|
|
The server name.
|
|
'';
|
|
type = lib.types.str;
|
|
};
|
|
|
|
extraJS = lib.mkOption {
|
|
default = null;
|
|
description = ''
|
|
An extra JavaScript file to be loaded by the client.
|
|
'';
|
|
type = lib.types.nullOr lib.types.path;
|
|
};
|
|
|
|
extraCSS = lib.mkOption {
|
|
default = null;
|
|
description = ''
|
|
An extra CSS file to be loaded by the client.
|
|
'';
|
|
type = lib.types.nullOr lib.types.path;
|
|
};
|
|
};
|
|
};
|
|
|
|
config = lib.mkIf cfg.enable {
|
|
assertions = [
|
|
{
|
|
assertion = cfg.username or "" != "";
|
|
message = ''
|
|
You have to define a username for Honk (`services.honk.username`).
|
|
'';
|
|
}
|
|
{
|
|
assertion = cfg.servername or "" != "";
|
|
message = ''
|
|
You have to define a servername for Honk (`services.honk.servername`).
|
|
'';
|
|
}
|
|
];
|
|
|
|
systemd.services.honk-initdb = {
|
|
description = "Honk server database setup";
|
|
requiredBy = [ "honk.service" ];
|
|
before = [ "honk.service" ];
|
|
|
|
serviceConfig = {
|
|
LoadCredential = [
|
|
"honk_passwordFile:${cfg.passwordFile}"
|
|
];
|
|
Type = "oneshot";
|
|
StateDirectory = "honk";
|
|
DynamicUser = true;
|
|
RemainAfterExit = true;
|
|
ExecStart = lib.getExe (honk-initdb-script cfg);
|
|
PrivateTmp = true;
|
|
};
|
|
|
|
unitConfig = {
|
|
ConditionPathExists = [
|
|
# Skip this service if the database already exists
|
|
"!%S/honk/honk.db"
|
|
];
|
|
};
|
|
};
|
|
|
|
systemd.services.honk = {
|
|
description = "Honk server";
|
|
wantedBy = [ "multi-user.target" ];
|
|
after = [ "network.target" ];
|
|
bindsTo = [ "honk-initdb.service" ];
|
|
preStart = ''
|
|
mkdir -p $STATE_DIRECTORY/views
|
|
${lib.optionalString (cfg.extraJS != null) "ln -fs ${cfg.extraJS} $STATE_DIRECTORY/views/local.js"}
|
|
${lib.optionalString (cfg.extraCSS != null) "ln -fs ${cfg.extraCSS} $STATE_DIRECTORY/views/local.css"}
|
|
${lib.getExe cfg.package} -datadir $STATE_DIRECTORY -viewdir ${cfg.package}/share/honk backup $STATE_DIRECTORY/backup
|
|
${lib.getExe cfg.package} -datadir $STATE_DIRECTORY -viewdir ${cfg.package}/share/honk upgrade
|
|
${lib.getExe cfg.package} -datadir $STATE_DIRECTORY -viewdir ${cfg.package}/share/honk cleanup
|
|
'';
|
|
serviceConfig = {
|
|
ExecStart = ''
|
|
${lib.getExe cfg.package} -datadir $STATE_DIRECTORY -viewdir ${cfg.package}/share/honk
|
|
'';
|
|
StateDirectory = "honk";
|
|
DynamicUser = true;
|
|
PrivateTmp = "yes";
|
|
Restart = "on-failure";
|
|
};
|
|
};
|
|
};
|
|
|
|
meta = {
|
|
maintainers = with lib.maintainers; [ drupol ];
|
|
doc = ./honk.md;
|
|
};
|
|
}
|