2 description = "Open source ARC implementation";
5 url = "https://git.immae.eu/perso/Immae/Config/Nix.git";
9 inputs.flake-utils.url = "github:numtide/flake-utils";
10 inputs.nixpkgs.url = "github:NixOS/nixpkgs";
12 url = "github:trusteddomainproject/OpenARC";
16 outputs = { self, myuids, openarc, flake-utils, nixpkgs }: flake-utils.lib.eachDefaultSystem (system:
18 lock = builtins.fromJSON (builtins.readFile ./flake.lock);
19 pkgs = import nixpkgs { inherit system; overlays = []; };
20 inherit (pkgs) stdenv automake autoconf libbsd libtool openssl pkg-config libmilter file;
22 packages.openarc = stdenv.mkDerivation rec {
24 version = "master-${builtins.substring 0 7 lock.nodes.openarc.locked.rev}";
26 buildInputs = [ automake autoconf libbsd libtool openssl pkg-config libmilter ];
29 "--with-milter=${libmilter}"
32 autoreconf --force --install
33 sed -i -e "s@/usr/bin/file@${file}/bin/file@" ./configure
36 description = "Open source ARC implementation";
37 homepage = "https://github.com/trusteddomainproject/OpenARC";
38 platforms = stdenv.lib.platforms.unix;
42 defaultPackage = packages.openarc;
43 legacyPackages.openarc = packages.openarc;
44 apps.openarc = flake-utils.lib.mkApp { drv = packages.openarc; };
45 defaultApp = apps.openarc;
48 build = defaultPackage;
49 } // pkgs.lib.optionalAttrs (builtins.elem system pkgs.lib.systems.doubles.linux) {
51 let testing = import (nixpkgs + "/nixos/lib/testing-python.nix") { inherit system; };
54 server = { pkgs, ... }: {
55 imports = [ self.nixosModule ];
56 config.services.openarc.enable = true;
57 config.services.openarc.configFile = pkgs.writeText "openarc.conf" ''
58 Domain foo.example.org
59 KeyFile /etc/openarc/foo.key
66 server.wait_until_fails("openarc.service")
67 server.execute("install -m 0700 -o openarc -g openarc -d /etc/openarc")
68 server.execute("echo some_key > /etc/openarc/foo.key")
69 server.execute("chown openarc:openarc /etc/openarc/foo.key")
70 server.execute("chmod 400 /etc/openarc/foo.key")
71 server.systemctl("restart openarc")
72 server.wait_for_unit("openarc.service")
73 server.succeed("[ -S /run/openarc/openarc.sock ]")
78 nixosModule = { config, lib, pkgs, ... }:
80 cfg = config.services.openarc;
81 defaultSock = "local:/run/openarc/openarc.sock";
82 args = [ "-f" "-p" cfg.socket ] ++ lib.optionals (cfg.configFile != null) [ "-c" cfg.configFile ];
86 enable = lib.mkOption {
87 type = lib.types.bool;
89 description = "Whether to enable the OpenARC sender authentication system.";
92 socket = lib.mkOption {
94 default = defaultSock;
95 description = "Socket which is used for communication with OpenARC.";
101 description = "User for the daemon.";
104 group = lib.mkOption {
105 type = lib.types.str;
107 description = "Group for the daemon.";
110 configFile = lib.mkOption {
111 type = lib.types.nullOr lib.types.path;
113 description = "Additional OpenARC configuration.";
119 config = lib.mkIf cfg.enable {
120 users.users = lib.optionalAttrs (cfg.user == "openarc") {
123 uid = myuids.lib.uids.openarc;
127 users.groups = lib.optionalAttrs (cfg.group == "openarc") {
128 openarc.gid = myuids.lib.gids.openarc;
131 environment.systemPackages = [ self.defaultPackage."${pkgs.system}" ];
133 systemd.services.openarc = {
134 description = "OpenARC daemon";
135 after = [ "network.target" ];
136 wantedBy = [ "multi-user.target" ];
139 ExecStart = "${self.defaultApp."${pkgs.system}".program} ${lib.escapeShellArgs args}";
142 RuntimeDirectory = lib.optional (cfg.socket == defaultSock) "openarc";
143 PermissionsStartOnly = true;