84 lines
2.6 KiB
Nix
84 lines
2.6 KiB
Nix
{ config, lib, pkgs, ... }:
|
|
|
|
with lib;
|
|
|
|
let
|
|
cfg = config.services.oink;
|
|
makeOinkConfig = attrs: (pkgs.formats.json { }).generate
|
|
"oink.json" (mapAttrs' (k: v: nameValuePair (toLower k) v) attrs);
|
|
oinkConfig = makeOinkConfig {
|
|
global = cfg.settings;
|
|
domains = cfg.domains;
|
|
};
|
|
in
|
|
{
|
|
options.services.oink = {
|
|
enable = mkEnableOption "Oink, a dynamic DNS client for Porkbun";
|
|
package = mkPackageOption pkgs "oink" { };
|
|
settings = {
|
|
apiKey = mkOption {
|
|
type = types.str;
|
|
description = "API key to use when modifying DNS records.";
|
|
};
|
|
secretApiKey = mkOption {
|
|
type = types.str;
|
|
description = "Secret API key to use when modifying DNS records.";
|
|
};
|
|
interval = mkOption {
|
|
# https://github.com/rlado/oink/blob/v1.1.1/src/main.go#L364
|
|
type = types.ints.between 60 172800; # 48 hours
|
|
default = 900;
|
|
description = "Seconds to wait before sending another request.";
|
|
};
|
|
ttl = mkOption {
|
|
type = types.ints.between 600 172800;
|
|
default = 600;
|
|
description = ''
|
|
The TTL ("Time to Live") value to set for your DNS records.
|
|
|
|
The TTL controls how long in seconds your records will be cached
|
|
for. A smaller value will allow the record to update quicker.
|
|
'';
|
|
};
|
|
};
|
|
domains = mkOption {
|
|
type = with types; listOf (attrsOf anything);
|
|
default = [];
|
|
example = [
|
|
{
|
|
domain = "nixos.org";
|
|
subdomain = "";
|
|
ttl = 1200;
|
|
}
|
|
{
|
|
domain = "nixos.org";
|
|
subdomain = "hydra";
|
|
}
|
|
];
|
|
description = ''
|
|
List of attribute sets containing configuration for each domain.
|
|
|
|
Each attribute set must have two attributes, one named *domain*
|
|
and another named *subdomain*. The domain attribute must specify
|
|
the root domain that you want to configure, and the subdomain
|
|
attribute must specify its subdomain if any. If you want to
|
|
configure the root domain rather than a subdomain, leave the
|
|
subdomain attribute as an empty string.
|
|
|
|
Additionally, you can use attributes from *services.oink.settings*
|
|
to override settings per-domain.
|
|
|
|
Every domain listed here *must* have API access enabled in
|
|
Porkbun's control panel.
|
|
'';
|
|
};
|
|
};
|
|
|
|
config = mkIf cfg.enable {
|
|
systemd.services.oink = {
|
|
description = "Dynamic DNS client for Porkbun";
|
|
wantedBy = [ "multi-user.target" ];
|
|
script = "${cfg.package}/bin/oink -c ${oinkConfig}";
|
|
};
|
|
};
|
|
}
|