X-Git-Url: https://git.immae.eu/?p=perso%2FImmae%2FConfig%2FNix.git;a=blobdiff_plain;f=modules%2Fprivate%2Fenvironment.nix;h=969c9c776d5d36d95ccd95708567e9e0bc9cc2b6;hp=15e8f5489f56729d4f00d471cb49c04ed8746f32;hb=3c50eea8d946bf8417f49fa8a4a6e109e0439c7b;hpb=829ef7f1cb79f0171f9c5254278d93c48c44a7b5 diff --git a/modules/private/environment.nix b/modules/private/environment.nix index 15e8f54..969c9c7 100644 --- a/modules/private/environment.nix +++ b/modules/private/environment.nix @@ -1,4 +1,4 @@ -{ lib, ... }: +{ config, lib, name, ... }: with lib; with types; with lists; @@ -23,6 +23,7 @@ let }; mysqlOptions = { host = mkOption { description = "Host to access Mysql"; type = str; }; + remoteHost = mkOption { description = "Host to access Mysql from outside"; type = str; }; port = mkOption { description = "Port to access Mysql"; type = str; }; socket = mkOption { description = "Socket to access Mysql"; type = path; }; systemUsers = mkOption { @@ -40,14 +41,14 @@ let }; }; }; - mkMysqlOptions = name: mkOption { + mkMysqlOptions = name: more: mkOption { description = "${name} mysql configuration"; type = submodule { options = mysqlOptions // { database = mkOption { description = "${name} database"; type = str; }; user = mkOption { description = "${name} user"; type = str; }; password = mkOption { description = "mysql password of the ${name} user"; type = str; }; - }; + } // more; }; }; psqlOptions = { @@ -107,6 +108,71 @@ let }; }; }; + hostEnv = submodule { + options = { + fqdn = mkOption { + description = "Host FQDN"; + type = str; + }; + users = mkOption { + type = unspecified; + default = pkgs: []; + description = '' + Sublist of users from realUsers. Function that takes pkgs as + argument and gives an array as a result + ''; + }; + emails = mkOption { + default = []; + description = "List of e-mails that the server can be a sender of"; + type = listOf str; + }; + ldap = mkOption { + description = '' + LDAP credentials for the host + ''; + type = submodule { + options = { + password = mkOption { type = str; description = "Password for the LDAP connection"; }; + dn = mkOption { type = str; description = "DN for the LDAP connection"; }; + }; + }; + }; + mx = mkOption { + description = "subdomain and priority for MX server"; + default = { enable = false; }; + type = submodule { + options = { + enable = mkEnableOption "Enable MX"; + subdomain = mkOption { type = nullOr str; description = "Subdomain name (mx-*)"; }; + priority = mkOption { type = nullOr str; description = "Priority"; }; + }; + }; + }; + ips = mkOption { + description = '' + attrs of ip4/ip6 grouped by section + ''; + type = attrsOf (submodule { + options = { + ip4 = mkOption { + type = str; + description = '' + ip4 address of the host + ''; + }; + ip6 = mkOption { + type = listOf str; + default = []; + description = '' + ip6 addresses of the host + ''; + }; + }; + }); + }; + }; + }; in { options.myEnv = { @@ -115,43 +181,7 @@ in Attrs of servers information in the cluster (not necessarily handled by nixops) ''; default = {}; - type = attrsOf (submodule { - options = { - ldap = mkOption { - description = '' - LDAP credentials for the host - ''; - type = submodule { - options = { - password = mkOption { type = string; description = "Password for the LDAP connection"; }; - dn = mkOption { type = string; description = "DN for the LDAP connection"; }; - }; - }; - }; - ips = mkOption { - description = '' - attrs of ip4/ip6 grouped by section - ''; - type = attrsOf (submodule { - options = { - ip4 = mkOption { - type = string; - description = '' - ip4 address of the host - ''; - }; - ip6 = mkOption { - type = listOf string; - default = []; - description = '' - ip6 addresses of the host - ''; - }; - }; - }); - }; - }; - }); + type = attrsOf hostEnv; }; hetznerCloud = mkOption { description = '' @@ -259,11 +289,20 @@ in description = "Jabber configuration"; type = submodule { options = { + postfix_user_filter = mkOption { type = str; description = "Postfix filter to get xmpp users"; }; ldap = mkLdapOptions "Jabber" {}; postgresql = mkPsqlOptions "Jabber"; }; }; }; + realUsers = mkOption { + description = '' + Attrset of function taking pkgs as argument. + Real users settings, should provide a subattr of users.users. + with at least: name, (hashed)Password, shell + ''; + type = attrsOf unspecified; + }; users = mkOption { description = "System and regular users uid/gid"; type = attrsOf (submodule { @@ -397,7 +436,6 @@ in ''; type = submodule { options = { - mailto = mkOption { type = str; description = "Where to e-mail on error"; }; ssh_key = mkOption { description = "SSH key information"; type = submodule { @@ -452,7 +490,42 @@ in options = { status_url = mkOption { type = str; description = "URL to push status to"; }; status_token = mkOption { type = str; description = "Token for the status url"; }; + http_user_password = mkOption { type = str; description = "HTTP credentials to check services behind wall"; }; email = mkOption { type = str; description = "Admin E-mail"; }; + ssh_public_key = mkOption { type = str; description = "SSH public key"; }; + ssh_secret_key = mkOption { type = str; description = "SSH secret key"; }; + imap_login = mkOption { type = str; description = "IMAP login"; }; + imap_password = mkOption { type = str; description = "IMAP password"; }; + eriomem_keys = mkOption { type = listOf (listOf str); description = "Eriomem keys"; default = []; }; + ovh_sms = mkOption { + description = "OVH credentials for sms script"; + type = submodule { + options = { + endpoint = mkOption { type = str; default = "ovh-eu"; description = "OVH endpoint"; }; + application_key = mkOption { type = str; description = "Application key"; }; + application_secret = mkOption { type = str; description = "Application secret"; }; + consumer_key = mkOption { type = str; description = "Consumer key"; }; + account = mkOption { type = str; description = "Account"; }; + }; + }; + }; + nrdp_tokens = mkOption { type = listOf str; description = "Tokens allowed to push status update"; }; + slack_url = mkOption { type = str; description = "Slack webhook url to push status update"; }; + slack_channel = mkOption { type = str; description = "Slack channel to push status update"; }; + contacts = mkOption { type = attrsOf unspecified; description = "Contact dicts to fill naemon objects"; }; + email_check = mkOption { + description = "Emails services to check"; + type = attrsOf (submodule { + options = { + local = mkOption { type = bool; default = false; description = "Use local configuration"; }; + port = mkOption { type = nullOr str; default = null; description = "Port to connect to ssh"; }; + login = mkOption { type = nullOr str; default = null; description = "Login to connect to ssh"; }; + targets = mkOption { type = listOf str; description = "Hosts to send E-mails to"; }; + mail_address = mkOption { type = nullOr str; default = null; description = "E-mail recipient part to send e-mail to"; }; + mail_domain = mkOption { type = nullOr str; default = null; description = "E-mail domain part to send e-mail to"; }; + }; + }); + }; }; }; }; @@ -475,6 +548,16 @@ in }; }; }; + vpn = mkOption { + description = "VPN configuration"; + type = attrsOf (submodule { + options = { + prefix = mkOption { type = str; description = "ipv6 prefix for the vpn subnet"; }; + privateKey = mkOption { type = str; description = "Private key for the host"; }; + publicKey = mkOption { type = str; description = "Public key for the host"; }; + }; + }); + }; mail = mkOption { description = "Mail configuration"; type = submodule { @@ -518,7 +601,9 @@ in ''; type = listOf str; }; - mysql = mkMysqlOptions "Postfix"; + mysql = mkMysqlOptions "Postfix" { + password_encrypt = mkOption { type = str; description = "Key to encrypt relay password in database"; }; + }; backup_domains = mkOption { description = '' Domains that are accepted for relay as backup domain @@ -593,6 +678,7 @@ in description = "Mail script recipients"; type = attrsOf (submodule { options = { + external = mkEnableOption "Create a script_@mail.immae.eu external address"; src = mkOption { description = '' git source to fetch the script from. @@ -713,6 +799,7 @@ in description = "Tools configurations"; type = submodule { options = { + contact = mkOption { type = str; description = "Contact e-mail address"; }; davical = mkOption { description = "Davical configuration"; type = submodule { @@ -733,6 +820,15 @@ in }; }; }; + dmarc_reports = mkOption { + description = "DMARC reports configuration"; + type = submodule { + options = { + mysql = mkMysqlOptions "DMARC" {}; + anonymous_key = mkOption { type = str; description = "Anonymous hashing key"; }; + }; + }; + }; etherpad-lite = mkOption { description = "Etherpad configuration"; type = submodule { @@ -741,6 +837,7 @@ in ldap = mkLdapOptions "Etherpad" { group_filter = mkOption { type = str; description = "Filter for groups"; }; }; + adminPassword = mkOption { type = str; description = "Admin password for mypads / admin"; }; session_key = mkOption { type = str; description = "Session key"; }; api_key = mkOption { type = str; description = "API key"; }; redirects = mkOption { type = str; description = "Redirects for apache"; }; @@ -831,6 +928,16 @@ in }; }; }; + syden_peertube = mkOption { + description = "Peertube Syden configuration"; + type = submodule { + options = { + listenPort = mkOption { type = port; description = "Port to listen to"; }; + postgresql = mkPsqlOptions "Peertube"; + redis = mkRedisOptions "Peertube"; + }; + }; + }; phpldapadmin = mkOption { description = "phpLdapAdmin configuration"; type = submodule { @@ -916,6 +1023,10 @@ in }; }; }; + webhooks = mkOption { + type = attrsOf str; + description = "Mapping 'name'.php => script for webhooks"; + }; ympd = mkOption { description = "Ympd configuration"; type = submodule { @@ -938,7 +1049,7 @@ in description = "Yourls configuration"; type = submodule { options = { - mysql = mkMysqlOptions "Yourls"; + mysql = mkMysqlOptions "Yourls" {}; ldap = mkLdapOptions "Yourls" {}; cookieKey = mkOption { type = str; description = "Cookie key"; }; }; @@ -970,6 +1081,16 @@ in options = { aten_production = atenSubmodule; aten_integration = atenSubmodule; + iridologie = mkOption { + description = "environment configuration"; + type = submodule { + options = { + environment = mkOption { type = str; description = "SPIP environment"; }; + mysql = mkMysqlOptions "Iridologie" {}; + ldap = mkLdapOptions "Iridologie" {}; + }; + }; + }; }; }; }; @@ -981,8 +1102,8 @@ in description = "environment configuration"; type = submodule { options = { - environment = mkOption { type = str; description = "Symfony environment"; }; - mysql = mkMysqlOptions "Chloe"; + environment = mkOption { type = str; description = "SPIP environment"; }; + mysql = mkMysqlOptions "Chloe" {}; ldap = mkLdapOptions "Chloe" {}; }; }; @@ -1004,7 +1125,7 @@ in type = submodule { options = { environment = mkOption { type = str; description = "Symfony environment"; }; - mysql = mkMysqlOptions "Connexionswing"; + mysql = mkMysqlOptions "Connexionswing" {}; secret = mkOption { type = str; description = "Symfony App secret"; }; email = mkOption { type = str; description = "Symfony email notification"; }; }; @@ -1022,12 +1143,12 @@ in description = "Naturaloutil configuration"; type = submodule { options = { - mysql = mkMysqlOptions "Naturaloutil"; + mysql = mkMysqlOptions "Naturaloutil" {}; server_admin = mkOption { type = str; description = "Server admin e-mail"; }; }; }; }; - telioTortay = mkOption { + telio_tortay = mkOption { description = "Telio Tortay configuration"; type = submodule { options = { @@ -1035,7 +1156,7 @@ in }; }; }; - ludivinecassal = mkOption { + ludivine = mkOption { description = "Ludivinecassal configurations by environment"; type = let @@ -1044,7 +1165,7 @@ in type = submodule { options = { environment = mkOption { type = str; description = "Symfony environment"; }; - mysql = mkMysqlOptions "LudivineCassal"; + mysql = mkMysqlOptions "LudivineCassal" {}; ldap = mkLdapOptions "LudivineCassal" {}; secret = mkOption { type = str; description = "Symfony App secret"; }; }; @@ -1091,7 +1212,7 @@ in type = submodule { options = { environment = mkOption { type = str; description = "Symfony environment"; }; - mysql = mkMysqlOptions "Piedsjaloux"; + mysql = mkMysqlOptions "Piedsjaloux" {}; secret = mkOption { type = str; description = "Symfony App secret"; }; }; }; @@ -1108,7 +1229,7 @@ in description = "Europe Richie configurations by environment"; type = submodule { options = { - mysql = mkMysqlOptions "Richie"; + mysql = mkMysqlOptions "Richie" {}; smtp_mailer = mkOption { description = "SMTP mailer configuration"; type = submodule { @@ -1130,7 +1251,7 @@ in type = submodule { options = { environment = mkOption { type = str; description = "Symfony environment"; }; - mysql = mkMysqlOptions "Tellesflorian"; + mysql = mkMysqlOptions "Tellesflorian" {}; secret = mkOption { type = str; description = "Symfony App secret"; }; invite_passwords = mkOption { type = str; description = "Password basic auth"; }; }; @@ -1154,12 +1275,10 @@ in ''; }; }; - options.hostEnv = { - FQDN = mkOption { - type = string; - description = '' - FQDN of the current host. - ''; - }; + options.hostEnv = mkOption { + readOnly = true; + type = hostEnv; + default = config.myEnv.servers."${name}"; + description = "Host environment"; }; }