1 { pkgs, config, lib, ... }:
3 cfg = config.myServices.databasesReplication.mariadb;
6 options.myServices.databasesReplication.mariadb = {
7 enable = lib.mkEnableOption "Enable mariadb replication";
11 Base path to put the replications
14 hosts = lib.mkOption {
19 type = lib.types.attrsOf (lib.types.submodule {
21 package = lib.mkOption {
22 type = lib.types.package;
23 default = pkgs.mariadb;
25 Mariadb package for this host
28 serverId = lib.mkOption {
31 Server id to use for replication cluster (must be unique among the cluster!)
52 password = lib.mkOption {
58 dumpUser = lib.mkOption {
61 User who can do a dump
64 dumpPassword = lib.mkOption {
67 Password for the dump user
75 config = lib.mkIf cfg.enable {
77 description = "MySQL server user";
79 uid = config.ids.uids.mysql;
80 extraGroups = [ "keys" ];
82 users.groups.mysql.gid = config.ids.gids.mysql;
84 secrets.keys = lib.flatten (lib.mapAttrsToList (name: hcfg: [
86 dest = "mysql_replication/${name}/slave_init_commands";
91 CHANGE MASTER TO master_host="${hcfg.host}", master_port=${hcfg.port}, master_user="${hcfg.user}", master_password="${hcfg.password}", master_ssl=1, master_use_gtid=slave_pos;
96 dest = "mysql_replication/${name}/mysqldump_remote";
103 password = ${hcfg.password}
107 dest = "mysql_replication/${name}/mysqldump";
108 permissions = "0400";
113 user = ${hcfg.dumpUser}
114 password = ${hcfg.dumpPassword}
121 systemCronJobs = lib.flatten (lib.mapAttrsToList (name: hcfg:
123 dataDir = "${cfg.base}/${name}/mysql";
124 backupDir = "${cfg.base}/${name}/mysql_backup";
125 backup_script = pkgs.writeScript "backup_mysql_${name}" ''
126 #!${pkgs.stdenv.shell}
130 ${hcfg.package}/bin/mysqldump \
131 --defaults-file=${config.secrets.location}/mysql_replication/${name}/mysqldump \
132 -S /run/mysqld_${name}/mysqld.sock \
136 --all-databases > ${backupDir}/$(${pkgs.coreutils}/bin/date -Iseconds).sql
138 u = pkgs.callPackage ./utils.nix {};
139 cleanup_script = pkgs.writeScript "cleanup_mysql_${name}" (u.exponentialDumps backupDir);
141 "0 22,4,10,16 * * * root ${backup_script}"
142 "0 3 * * * root ${cleanup_script}"
146 system.activationScripts = lib.attrsets.mapAttrs' (name: hcfg:
147 lib.attrsets.nameValuePair "mysql_replication_${name}" {
148 deps = [ "users" "groups" ];
150 install -m 0700 -o mysql -g mysql -d ${cfg.base}/${name}/mysql
151 install -m 0700 -o mysql -g mysql -d ${cfg.base}/${name}/mysql_backup
155 environment.etc = lib.attrsets.mapAttrs' (name: hcfg:
156 lib.attrsets.nameValuePair "mysql/${name}_my.cnf" {
159 socket = /run/mysqld_${name}/mysqld.sock
160 datadir = ${cfg.base}/${name}/mysql/
161 log-bin = mariadb-bin
162 server-id = ${builtins.toString hcfg.serverId}
167 systemd.services = lib.attrsets.mapAttrs' (name: hcfg:
169 dataDir = "${cfg.base}/${name}/mysql";
171 lib.attrsets.nameValuePair "mysql_backup_${name}" {
172 description = "Mysql replication for ${name}";
173 wantedBy = [ "multi-user.target" ];
174 after = [ "network.target" ];
175 restartTriggers = [ config.environment.etc."mysql/${name}_my.cnf".source ];
176 unitConfig.RequiresMountsFor = dataDir;
179 if ! test -e ${dataDir}/mysql; then
180 ${hcfg.package}/bin/mysqldump \
181 --defaults-file=${config.secrets.location}/mysql_replication/${name}/mysqldump_remote \
188 --all-databases > ${dataDir}/initial.sql
190 ${hcfg.package}/bin/mysql_install_db \
191 --defaults-file=/etc/mysql/${name}_my.cnf \
193 --datadir=${dataDir} \
194 --basedir=${hcfg.package}
201 RuntimeDirectory = "mysqld_${name}";
202 RuntimeDirectoryMode = "0755";
203 SupplementaryGroups = "keys";
204 PermissionsStartOnly = true;
207 ExecStart = "${hcfg.package}/bin/mysqld --defaults-file=/etc/mysql/${name}_my.cnf --user=mysql --datadir=${dataDir} --basedir=${hcfg.package}";
210 sql_before = pkgs.writeText "mysql-initial-before" ''
213 setupScript = pkgs.writeScript "mysql-setup" ''
214 #!${pkgs.runtimeShell} -e
216 if test -e ${dataDir}/initial.sql; then
219 ${dataDir}/initial.sql \
220 ${config.secrets.location}/mysql_replication/${name}/slave_init_commands \
221 | ${hcfg.package}/bin/mysql \
222 --defaults-file=/etc/mysql/${name}_my.cnf \
223 -S /run/mysqld_${name}/mysqld.sock \
225 rm -f ${dataDir}/initial.sql
230 # initial dump can take a long time
231 TimeoutStartSec="infinity";
232 TimeoutStopSec = 120;