3 nixosModule = self.nixosModules.environment;
4 nixosModules.environment = { config, lib, name, ... }:
10 base = mkOption { description = "Base of the LDAP tree"; type = str; };
11 host = mkOption { description = "Host to access LDAP"; type = str; };
12 root_dn = mkOption { description = "DN of the root user"; type = str; };
13 root_pw = mkOption { description = "Hashed password of the root user"; type = str; };
14 replication_dn = mkOption { description = "DN of the user allowed to replicate the LDAP directory"; type = str; };
15 replication_pw = mkOption { description = "Password of the user allowed to replicate the LDAP directory"; type = str; };
17 mkLdapOptions = name: more: mkOption {
18 description = "${name} LDAP configuration";
20 options = ldapOptions // {
21 dn = mkOption { description = "DN of the ${name} user"; type = str; };
22 password = mkOption { description = "password of the ${name} user"; type = str; };
23 filter = mkOption { description = "Filter for ${name} users"; type = str; default = ""; };
28 host = mkOption { description = "Host to access Mysql"; type = str; };
29 remoteHost = mkOption { description = "Host to access Mysql from outside"; type = str; };
30 port = mkOption { description = "Port to access Mysql"; type = int; };
31 socket = mkOption { description = "Socket to access Mysql"; type = path; };
32 systemUsers = mkOption {
33 description = "Attrs of user-passwords allowed to access mysql";
37 description = "PAM configuration for mysql";
40 dn = mkOption { description = "DN to connect as to check users"; type = str; };
41 password = mkOption { description = "DN password to connect as to check users"; type = str; };
42 filter = mkOption { description = "filter to match users"; type = str; };
47 mkMysqlOptions = name: more: mkOption {
48 description = "${name} mysql configuration";
50 options = mysqlOptions // {
51 database = mkOption { description = "${name} database"; type = str; };
52 user = mkOption { description = "${name} user"; type = str; };
53 password = mkOption { description = "mysql password of the ${name} user"; type = str; };
58 host = mkOption { description = "Host to access Postgresql"; type = str; };
59 port = mkOption { description = "Port to access Postgresql"; type = str; };
60 socket = mkOption { description = "Socket to access Postgresql"; type = path; };
62 description = "PAM configuration for psql";
65 dn = mkOption { description = "DN to connect as to check users"; type = str; };
66 password = mkOption { description = "DN password to connect as to check users"; type = str; };
67 filter = mkOption { description = "filter to match users"; type = str; };
72 mkPsqlOptions = name: mkOption {
73 description = "${name} psql configuration";
75 options = psqlOptions // {
76 database = mkOption { description = "${name} database"; type = str; };
77 schema = mkOption { description = "${name} schema"; type = nullOr str; default = null; };
78 user = mkOption { description = "${name} user"; type = str; };
79 password = mkOption { description = "psql password of the ${name} user"; type = str; };
84 host = mkOption { description = "Host to access Redis"; type = str; };
85 port = mkOption { description = "Port to access Redis"; type = str; };
86 socket = mkOption { description = "Socket to access Redis"; type = path; };
88 description = "Attrs of db number. Each number should be unique to avoid collision!";
91 spiped_key = mkOption {
94 Key to use with spiped to make a secure channel to replication
98 description = "Predixy configuration. Unused yet";
101 read = mkOption { type = str; description = "Read password"; };
106 mkRedisOptions = name: mkOption {
107 description = "${name} redis configuration";
109 options = redisOptions // {
110 db = mkOption { description = "${name} database"; type = str; };
115 host = mkOption { description = "Host to access SMTP"; type = str; };
116 port = mkOption { description = "Port to access SMTP"; type = str; };
118 mkSmtpOptions = name: mkOption {
119 description = "${name} smtp configuration";
121 options = smtpOptions // {
122 email = mkOption { description = "${name} email"; type = str; };
123 password = mkOption { description = "SMTP password of the ${name} user"; type = str; };
127 hostEnv = submodule {
130 description = "Host FQDN";
140 isVm = mkEnableOption "The host is a vm";
143 description = "List of e-mails that the server can be a sender of";
148 LDAP credentials for the host
152 password = mkOption { type = str; description = "Password for the LDAP connection"; };
153 dn = mkOption { type = str; description = "DN for the LDAP connection"; };
158 description = "subdomain and priority for MX server";
159 default = { enable = false; };
162 enable = mkEnableOption "Enable MX";
163 subdomain = mkOption { type = nullOr str; description = "Subdomain name (mx-*)"; };
164 priority = mkOption { type = nullOr int; description = "Priority"; };
170 attrs of ip4/ip6 grouped by section
172 type = attrsOf (submodule {
178 alias to use in DNS for that group
185 ip4 addresses of the host
192 ip6 addresses of the host
202 # Necessary for situations where flake gets included multiple times
203 key = builtins.hashString "sha256" (builtins.path { path = self.sourceInfo.outPath; name = "source"; });
208 Attrs of servers information in the cluster (not necessarily handled by nixops)
211 type = attrsOf hostEnv;
213 hetznerCloud = mkOption {
215 Hetzner Cloud credential information
219 authToken = mkOption {
230 Hetzner credential information
234 user = mkOption { type = str; description = "User"; };
235 pass = mkOption { type = str; description = "Password"; };
241 sshd service credential information
245 rootKeys = mkOption { type = attrsOf str; description = "Keys of root users"; };
248 LDAP credentials for cn=ssh,ou=services,dc=immae,dc=eu dn
252 password = mkOption { description = "Password"; type = str; };
258 PSQL credentials for immae_auth_read
262 password = mkOption { description = "Password"; type = str; };
271 non-standard reserved ports. Must be unique!
276 noDupl = x: builtins.length (builtins.attrValues x) == builtins.length (unique (builtins.attrValues x));
278 x: if isAttrs x && noDupl x then x else throw "Non unique values for ports";
282 httpd service credential information
288 LDAP credentials for cn=httpd,ou=services,dc=immae,dc=eu dn
292 password = mkOption { description = "Password"; type = str; };
300 type = submodule { options = smtpOptions; };
301 description = "SMTP configuration";
305 LDAP server configuration
308 options = ldapOptions;
311 databases = mkOption {
312 description = "Databases configuration";
316 type = submodule { options = mysqlOptions; };
317 description = "Mysql configuration";
320 type = submodule { options = redisOptions; };
321 description = "Redis configuration";
323 postgresql = mkOption {
324 type = submodule { options = psqlOptions; };
325 description = "Postgresql configuration";
331 description = "Jabber configuration";
334 postfix_user_filter = mkOption { type = str; description = "Postfix filter to get xmpp users"; };
335 ldap = mkLdapOptions "Jabber" {};
336 postgresql = mkPsqlOptions "Jabber";
341 description = "System and regular users uid/gid";
342 type = attrsOf (submodule {
345 description = "user uid";
349 description = "user gid";
356 description = "DNS configuration";
360 description = "Attrs of NS servers group";
363 "ns1.foo.com" = [ "198.51.100.10" "2001:db8:abcd::1" ];
364 "ns2.foo.com" = [ "198.51.100.15" "2001:db8:1234::1" ];
367 type = attrsOf (attrsOf (listOf str));
372 borg_backup = mkOption {
374 Remote backup with borg/borgmatic
378 password = mkOption { type = str; description = "Password for encrypting files"; };
380 type = attrsOf (submodule {
383 type = functionTo (functionTo str);
384 example = literalExample ''
385 bucket: "ssh://some_host/${bucket}";
389 Takes a bucket name as argument and returns a url
392 sshRsyncPort = mkOption { type = str; default = "22"; description = "SSH port"; };
393 sshRsyncHost = mkOption { type = nullOr str; default = null; description = "SSH host"; };
395 sshKnownHosts = mkOption { type = nullOr str; default = null; description = "Ssh known hosts"; };
404 Remote backup with duplicity
408 password = mkOption { type = str; description = "Password for encrypting files"; };
410 type = attrsOf (submodule {
412 remote_type = mkOption {
413 type = enum [ "s3" "rsync" ];
416 type = functionTo str;
417 example = literalExample ''
418 bucket: "s3://some_host/${bucket}";
422 Takes a bucket name as argument and returns a url
425 sshRsyncPort = mkOption { type = str; default = "22"; description = "SSH port for rsync"; };
426 sshRsyncHost = mkOption { type = nullOr str; default = null; description = "SSH host for rsync"; };
428 sshKnownHosts = mkOption { type = nullOr str; default = null; description = "Ssh known hosts"; };
429 s3AccessKeyId = mkOption { type = nullOr str; default = null; description = "Remote access-key"; };
430 s3SecretAccessKey = mkOption { type = nullOr str; default = null; description = "Remote access secret"; };
437 zrepl_backup = mkOption {
441 description = "SSH key information";
444 public = mkOption { type = str; description = "Public part of the key"; };
445 private = mkOption { type = lines; description = "Private part of the key"; };
449 mysql = mkMysqlOptions "Zrepl" {};
451 description = "Certificates";
452 type = attrsOf (submodule {
454 key = mkOption { type = str; description = "Key"; };
455 certificate = mkOption { type = str; description = "Certificate"; };
462 rsync_backup = mkOption {
464 Rsync backup configuration from controlled host
469 description = "SSH key information";
472 public = mkOption { type = str; description = "Public part of the key"; };
473 private = mkOption { type = lines; description = "Private part of the key"; };
477 profiles = mkOption {
478 description = "Attrs of profiles to backup";
480 type = attrsOf (submodule {
482 keep = mkOption { type = int; description = "Number of backups to keep"; };
483 check_command = mkOption { type = str; description = "command to check if backup needs to be done"; default = "backup"; };
484 login = mkOption { type = str; description = "Login to connect to host"; };
485 port = mkOption { type = str; default = "22"; description = "Port to connect to host"; };
486 host = mkOption { type = str; description = "Host to connect to"; };
487 host_key = mkOption { type = str; description = "Host key"; };
488 host_key_type = mkOption { type = str; description = "Host key type"; };
490 description = "Parts to backup for this host";
491 type = attrsOf (submodule {
493 remote_folder = mkOption { type = path; description = "Remote folder to backup";};
494 exclude_from = mkOption {
497 description = "List of folders/files to exclude from the backup";
499 files_from = mkOption {
502 description = "List of folders/files to backup in the base folder";
507 description = "Extra arguments to pass to rsync";
518 monitoring = mkOption {
519 description = "Monitoring configuration";
522 status_url = mkOption { type = str; description = "URL to push status to"; };
523 status_token = mkOption { type = str; description = "Token for the status url"; };
524 http_user_password = mkOption { type = str; description = "HTTP credentials to check services behind wall"; };
525 email = mkOption { type = str; description = "Admin E-mail"; };
526 ssh_public_key = mkOption { type = str; description = "SSH public key"; };
527 ssh_secret_key = mkOption { type = str; description = "SSH secret key"; };
528 imap_login = mkOption { type = str; description = "IMAP login"; };
529 imap_password = mkOption { type = str; description = "IMAP password"; };
530 eriomem_keys = mkOption { type = listOf (listOf str); description = "Eriomem keys"; default = []; };
532 description = "OVH credentials for sms script";
535 endpoint = mkOption { type = str; default = "ovh-eu"; description = "OVH endpoint"; };
536 application_key = mkOption { type = str; description = "Application key"; };
537 application_secret = mkOption { type = str; description = "Application secret"; };
538 consumer_key = mkOption { type = str; description = "Consumer key"; };
539 account = mkOption { type = str; description = "Account"; };
543 nrdp_tokens = mkOption { type = listOf str; description = "Tokens allowed to push status update"; };
544 apprise_urls = mkOption { type = str; description = "Apprise space-separated urls to push status update"; };
545 netdata_aggregator = mkOption { type = str; description = "Url where netdata information should be sent"; };
546 netdata_keys = mkOption { type = attrsOf str; description = "netdata host keys"; };
547 immae_contact = mkOption { type = str; description = "Immae Contact e-mail"; };
548 email_check = mkOption {
549 description = "Emails services to check";
550 type = attrsOf (submodule {
552 local = mkOption { type = bool; default = false; description = "Use local configuration"; };
553 port = mkOption { type = nullOr str; default = null; description = "Port to connect to ssh"; };
554 login = mkOption { type = nullOr str; default = null; description = "Login to connect to ssh"; };
555 targets = mkOption { type = listOf str; description = "Hosts to send E-mails to"; };
556 mail_address = mkOption { type = nullOr str; default = null; description = "E-mail recipient part to send e-mail to"; };
557 mail_domain = mkOption { type = nullOr str; default = null; description = "E-mail domain part to send e-mail to"; };
565 description = "MPD configuration";
568 folder = mkOption { type = str; description = "Folder to serve from the MPD instance"; };
569 password = mkOption { type = str; description = "Password to connect to the MPD instance"; };
570 host = mkOption { type = str; description = "Host to connect to the MPD instance"; };
571 port = mkOption { type = str; description = "Port to connect to the MPD instance"; };
576 description = "FTP configuration";
579 ldap = mkLdapOptions "FTP" {
580 proftpd_filter = mkOption { type = str; description = "Filter for proftpd listing in LDAP"; };
581 pure-ftpd_filter = mkOption { type = str; description = "Filter for pure-ftpd listing in LDAP"; };
587 description = "VPN configuration";
588 type = attrsOf (submodule {
590 prefix = mkOption { type = str; description = "ipv6 prefix for the vpn subnet"; };
591 privateKey = mkOption { type = str; description = "Private key for the host"; };
592 publicKey = mkOption { type = str; description = "Public key for the host"; };
597 description = "Mail configuration";
601 description = "DMARC configuration";
604 ignore_hosts = mkOption {
607 Hosts to ignore when checking for dmarc
614 description = "DKIM configuration";
615 type = attrsOf (submodule {
619 example = literalExample ''
623 p = "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC3w1a2aMxWw9+hdcmbqX4UevcVqr204y0K73Wdc7MPZiOOlUJQYsMNSYR1Y/SC7jmPKeitpcJCpQgn/cveJZbuikjjPLsDReHyFEYmC278ZLRTELHx6f1IXM8WE08JIRT69CfZiMi1rVcOh9qRT4F93PyjCauU8Y5hJjtg9ThsWwIDAQAB";
626 description = "Public entry to put in DNS TXT field";
628 private = mkOption { type = nullOr str; default = null; description = "Private key"; };
633 description = "Postfix configuration";
636 mysql = mkMysqlOptions "Postfix" {
637 password_encrypt = mkOption { type = str; description = "Key to encrypt relay password in database"; };
641 List of admins meant to receive common aliases
645 common_aliases = mkOption {
647 List of aliases common to all hosts, to forward to admins
651 other_aliases = mkOption {
653 Other list of aliases, to forward to admins
661 description = "Dovecot configuration";
664 mysql = mkMysqlOptions "Dovecot" {};
665 ldap = mkLdapOptions "Dovecot" {
666 pass_attrs = mkOption { type = str; description = "Password attribute in LDAP"; };
667 user_attrs = mkOption { type = str; description = "User attribute mapping in LDAP"; };
668 iterate_attrs = mkOption { type = str; description = "User attribute mapping for listing in LDAP"; };
669 iterate_filter = mkOption { type = str; description = "User attribute filter for listing in LDAP"; };
670 postfix_mailbox_filter = mkOption { type = str; description = "Postfix filter to get mailboxes"; };
676 description = "rspamd configuration";
679 redis = mkRedisOptions "Redis";
680 read_password_hashed = mkOption { type = str; description = "Hashed read password for rspamd"; };
681 write_password_hashed = mkOption { type = str; description = "Hashed write password for rspamd"; };
682 read_password = mkOption {
684 description = "Read password for rspamd. Unused";
687 write_password = mkOption {
689 description = "Write password for rspamd. Unused";
696 description = "Sympa configuration";
699 listmasters = mkOption {
701 description = "Listmasters";
703 postgresql = mkPsqlOptions "Sympa";
704 data_sources = mkOption {
707 description = "Data sources to make available to sympa";
712 description = "Scenari to make available to sympa";
721 description = "Coturn configuration";
724 auth_access_key = mkOption { type = str; description = "key to access coturn"; };
728 buildbot = mkOption {
729 description = "Buildbot configuration";
733 description = "SSH key information";
736 public = mkOption { type = str; description = "Public part of the key"; };
737 private = mkOption { type = lines; description = "Private part of the key"; };
741 workerPassword = mkOption { description = "Buildbot worker password"; type = str; };
743 description = "Buildbot user";
747 description = "user uid";
751 description = "user gid";
758 description = "Ldap configuration for buildbot";
761 password = mkOption { type = str; description = "Buildbot password"; };
765 projects = mkOption {
766 description = "Projects to make a buildbot for";
767 type = attrsOf (submodule {
769 name = mkOption { type = str; description = "Project name"; };
770 src = mkOption { type = path; description = "source of the project configuration"; };
771 packages = mkOption {
772 type = listOf package;
773 example = literalExample ''
774 [ pkgs.bash pkgs.git pkgs.gzip pkgs.openssh ];
777 Builds packages list to make available to buildbot project.
780 pythonPathHome = mkOption { type = bool; description = "Whether to add project’s python home to python path"; };
781 workerPort = mkOption { type = port; description = "Port for the worker"; };
783 type = attrsOf lines;
784 description = "Secrets for the project to dump as files";
786 secretsDeps = mkOption {
787 type = listOf package;
789 description = "Dependencies of file that will land in secrets";
791 environment = mkOption {
794 Environment variables for the project.
795 BUILDBOT_ is prefixed to the variable names
798 activationScript = mkOption {
801 Activation script to run during deployment
804 webhookTokens = mkOption {
805 type = nullOr (listOf str);
808 List of tokens allowed to push to project’s change_hook/base endpoint
818 description = "Tools configurations";
821 contact = mkOption { type = str; description = "Contact e-mail address"; };
824 type = attrsOf (submodule {
826 assetType = mkOption { type = enum ["tgz" "url" "googleFont"]; default = "url"; description = "Type of asset"; };
827 tgzRemoveComponents = mkOption { type = int; default = 0; description = "Remove components when extracting"; };
828 url = mkOption { type = str; description = "URL to fetch"; };
829 sha256 = mkOption { type = str; description = "Hash of the url"; };
832 description = "Assets to provide on assets.immae.eu";
835 description = "Davical configuration";
838 postgresql = mkPsqlOptions "Davical";
839 ldap = mkLdapOptions "Davical" {};
843 diaspora = mkOption {
844 description = "Diaspora configuration";
847 postgresql = mkPsqlOptions "Diaspora";
848 redis = mkRedisOptions "Diaspora";
849 ldap = mkLdapOptions "Diaspora" {};
850 secret_token = mkOption { type = str; description = "Secret token"; };
854 dmarc_reports = mkOption {
855 description = "DMARC reports configuration";
858 mysql = mkMysqlOptions "DMARC" {};
859 anonymous_key = mkOption { type = str; description = "Anonymous hashing key"; };
863 etherpad-lite = mkOption {
864 description = "Etherpad configuration";
867 postgresql = mkPsqlOptions "Etherpad";
868 ldap = mkLdapOptions "Etherpad" {
869 group_filter = mkOption { type = str; description = "Filter for groups"; };
871 adminPassword = mkOption { type = str; description = "Admin password for mypads / admin"; };
872 session_key = mkOption { type = str; description = "Session key"; };
873 api_key = mkOption { type = str; description = "API key"; };
877 gitolite = mkOption {
878 description = "Gitolite configuration";
881 ldap = mkLdapOptions "Gitolite" {};
883 description = "SSH key information";
886 public = mkOption { type = str; description = "Public part of the key"; };
887 private = mkOption { type = lines; description = "Private part of the key"; };
895 description = "Landing configuration";
898 postgresql = mkPsqlOptions "Landing";
902 kanboard = mkOption {
903 description = "Kanboard configuration";
906 postgresql = mkPsqlOptions "Kanboard";
907 ldap = mkLdapOptions "Kanboard" {
908 admin_dn = mkOption { type = str; description = "Admin DN"; };
913 mantisbt = mkOption {
914 description = "Mantisbt configuration";
917 postgresql = mkPsqlOptions "Mantisbt";
918 ldap = mkLdapOptions "Mantisbt" {};
919 master_salt = mkOption { type = str; description = "Master salt for password hash"; };
923 mastodon = mkOption {
924 description = "Mastodon configuration";
927 postgresql = mkPsqlOptions "Mastodon";
928 redis = mkRedisOptions "Mastodon";
929 ldap = mkLdapOptions "Mastodon" {};
930 paperclip_secret = mkOption { type = str; description = "Paperclip secret"; };
931 otp_secret = mkOption { type = str; description = "OTP secret"; };
932 secret_key_base = mkOption { type = str; description = "Secret key base"; };
934 description = "vapid key";
937 private = mkOption { type = str; description = "Private key"; };
938 public = mkOption { type = str; description = "Public key"; };
945 mediagoblin = mkOption {
946 description = "Mediagoblin configuration";
949 postgresql = mkPsqlOptions "Mediagoblin";
950 redis = mkRedisOptions "Mediagoblin";
951 ldap = mkLdapOptions "Mediagoblin" {};
955 nextcloud = mkOption {
956 description = "Nextcloud configuration";
959 postgresql = mkPsqlOptions "Nextcloud";
960 redis = mkRedisOptions "Nextcloud";
961 password_salt = mkOption { type = str; description = "Password salt"; };
962 instance_id = mkOption { type = str; description = "Instance ID"; };
963 secret = mkOption { type = str; description = "App secret"; };
967 peertube = mkOption {
968 description = "Peertube configuration";
971 listenPort = mkOption { type = port; description = "Port to listen to"; };
972 postgresql = mkPsqlOptions "Peertube";
973 redis = mkRedisOptions "Peertube";
974 ldap = mkLdapOptions "Peertube" {};
978 phpldapadmin = mkOption {
979 description = "phpLdapAdmin configuration";
982 ldap = mkLdapOptions "phpldapadmin" {};
987 description = "Rompr configuration";
991 description = "MPD configuration";
994 host = mkOption { type = str; description = "Host for MPD"; };
995 port = mkOption { type = port; description = "Port to access MPD host"; };
1002 roundcubemail = mkOption {
1003 description = "Roundcubemail configuration";
1006 postgresql = mkPsqlOptions "TT-RSS";
1007 secret = mkOption { type = str; description = "Secret"; };
1011 shaarli = mkOption {
1012 description = "Shaarli configuration";
1015 ldap = mkLdapOptions "Shaarli" {};
1019 status_engine = mkOption {
1020 description = "Status Engine configuration";
1023 mysql = mkMysqlOptions "StatusEngine" {};
1024 ldap = mkLdapOptions "StatusEngine" {};
1029 description = "Taskwarrior configuration";
1032 ldap = mkLdapOptions "Taskwarrior" {};
1033 taskwarrior-web = mkOption {
1034 description = "taskwarrior-web profiles";
1036 type = attrsOf (submodule {
1040 description = "List of ldap uids having access to this profile";
1042 org = mkOption { type = str; description = "Taskd organisation"; };
1043 key = mkOption { type = str; description = "Taskd key"; };
1044 date = mkOption { type = str; description = "Preferred date format"; };
1052 description = "TT-RSS configuration";
1055 postgresql = mkPsqlOptions "TT-RSS";
1056 ldap = mkLdapOptions "TT-RSS" {};
1060 wallabag = mkOption {
1061 description = "Wallabag configuration";
1064 postgresql = mkPsqlOptions "Wallabag";
1065 ldap = mkLdapOptions "Wallabag" {
1066 admin_filter = mkOption { type = str; description = "Admin users filter"; };
1068 redis = mkRedisOptions "Wallabag";
1069 secret = mkOption { type = str; description = "App secret"; };
1073 webhooks = mkOption {
1075 description = "Mapping 'name'.php => script for webhooks";
1077 csp_reports = mkOption {
1078 description = "CSP report configuration";
1081 report_uri = mkOption { type = str; description = "URI to report CSP violations to"; };
1082 policies = mkOption { type = attrsOf str; description = "CSP policies to apply"; };
1086 commento = mkOption {
1087 description = "Commento configuration";
1090 listenPort = mkOption { type = port; description = "Port to listen to"; };
1091 postgresql = mkPsqlOptions "Commento";
1092 smtp = mkSmtpOptions "Commento";
1096 cryptpad = mkOption {
1097 description = "Cryptpad configuration";
1100 email = mkOption { type = str; description = "Admin e-mail"; };
1101 admins = mkOption { type = listOf str; description = "Instance admin public keys"; };
1102 port = mkOption { type = port; description = "Port to listen to"; };
1107 description = "Ympd configuration";
1110 listenPort = mkOption { type = port; description = "Port to listen to"; };
1112 description = "MPD configuration";
1115 password = mkOption { type = str; description = "Password to access MPD host"; };
1116 host = mkOption { type = str; description = "Host for MPD"; };
1117 port = mkOption { type = port; description = "Port to access MPD host"; };
1125 description = "Umami configuration";
1128 listenPort = mkOption { type = port; description = "Port to listen to"; };
1129 postgresql = mkPsqlOptions "Umami";
1130 hashSalt = mkOption { type = str; description = "Hash salt"; };
1135 description = "Yourls configuration";
1138 mysql = mkMysqlOptions "Yourls" {};
1139 ldap = mkLdapOptions "Yourls" {};
1140 cookieKey = mkOption { type = str; description = "Cookie key"; };
1148 options.hostEnv = mkOption {
1151 default = config.myEnv.servers."${name}";
1152 description = "Host environment";