70 lines
2 KiB
Nix
70 lines
2 KiB
Nix
{ config, pkgs, lib, ... }:
|
|
|
|
with lib;
|
|
|
|
let
|
|
cfg = config.services.cachix-agent;
|
|
in {
|
|
meta.maintainers = [ lib.maintainers.domenkozar ];
|
|
|
|
options.services.cachix-agent = {
|
|
enable = mkEnableOption "Cachix Deploy Agent: https://docs.cachix.org/deploy/";
|
|
|
|
name = mkOption {
|
|
type = types.str;
|
|
description = lib.mdDoc "Agent name, usually same as the hostname";
|
|
default = config.networking.hostName;
|
|
defaultText = "config.networking.hostName";
|
|
};
|
|
|
|
verbose = mkOption {
|
|
type = types.bool;
|
|
description = lib.mdDoc "Enable verbose output";
|
|
default = false;
|
|
};
|
|
|
|
profile = mkOption {
|
|
type = types.nullOr types.str;
|
|
default = null;
|
|
description = lib.mdDoc "Profile name, defaults to 'system' (NixOS).";
|
|
};
|
|
|
|
package = mkOption {
|
|
type = types.package;
|
|
default = pkgs.cachix;
|
|
defaultText = literalExpression "pkgs.cachix";
|
|
description = lib.mdDoc "Cachix Client package to use.";
|
|
};
|
|
|
|
credentialsFile = mkOption {
|
|
type = types.path;
|
|
default = "/etc/cachix-agent.token";
|
|
description = lib.mdDoc ''
|
|
Required file that needs to contain CACHIX_AGENT_TOKEN=...
|
|
'';
|
|
};
|
|
};
|
|
|
|
config = mkIf cfg.enable {
|
|
systemd.services.cachix-agent = {
|
|
description = "Cachix Deploy Agent";
|
|
after = ["network-online.target"];
|
|
path = [ config.nix.package ];
|
|
wantedBy = [ "multi-user.target" ];
|
|
|
|
# Cachix requires $USER to be set
|
|
environment.USER = "root";
|
|
|
|
# don't stop the service if the unit disappears
|
|
unitConfig.X-StopOnRemoval = false;
|
|
|
|
serviceConfig = {
|
|
# we don't want to kill children processes as those are deployments
|
|
KillMode = "process";
|
|
Restart = "on-failure";
|
|
EnvironmentFile = cfg.credentialsFile;
|
|
ExecStart = "${cfg.package}/bin/cachix ${lib.optionalString cfg.verbose "--verbose"} deploy agent ${cfg.name} ${if cfg.profile != null then profile else ""}";
|
|
};
|
|
};
|
|
};
|
|
}
|