From db85e40f318ce354b3a431ec46d573316d88afee Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Isma=C3=ABl=20Bouya?= Date: Sat, 11 Apr 2020 17:25:48 +0200 Subject: Add fiche module (a program to submit paste from command line) --- modules/default.nix | 1 + modules/webapps/fiche.nix | 53 +++++++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 54 insertions(+) create mode 100644 modules/webapps/fiche.nix (limited to 'modules') diff --git a/modules/default.nix b/modules/default.nix index 9ff6ea62..a503f922 100644 --- a/modules/default.nix +++ b/modules/default.nix @@ -9,6 +9,7 @@ mastodon = ./webapps/mastodon.nix; mediagoblin = ./webapps/mediagoblin.nix; peertube = ./webapps/peertube.nix; + fiche = ./webapps/fiche.nix; opendmarc = ./opendmarc.nix; openarc = ./openarc.nix; diff --git a/modules/webapps/fiche.nix b/modules/webapps/fiche.nix new file mode 100644 index 00000000..9061b2ea --- /dev/null +++ b/modules/webapps/fiche.nix @@ -0,0 +1,53 @@ +{ lib, pkgs, config, ... }: +let + cfg = config.services.fiche; +in +{ + options.services.fiche = { + enable = lib.mkEnableOption "Enable fiche’s service"; + port = lib.mkOption { + type = lib.types.port; + description = "Port to listen to"; + }; + domain = lib.mkOption { + type = lib.types.str; + description = "Domain"; + }; + dataDir = lib.mkOption { + type = lib.types.path; + default = "/var/lib/fiche"; + description = "Directory where to place the pastes"; + }; + https = lib.mkEnableOption "Use https"; + }; + + config = lib.mkIf cfg.enable { + networking.firewall.allowedTCPPorts = [ cfg.port ]; + + + system.activationScripts.fiche = '' + mkdir -p /var/lib/fiche + ''; + systemd.services.fiche = { + description = "Fiche server"; + wantedBy = [ "multi-user.target" ]; + after = [ "network.target" ]; + + script = '' + exec ${pkgs.fiche}/bin/fiche -o ${cfg.dataDir} -d ${cfg.domain} ${lib.optionalString cfg.https "-S "} -p ${builtins.toString cfg.port} + ''; + + serviceConfig = { + ExecStartPre = [ + "+${pkgs.coreutils}/bin/install -m 0755 -o fiche -d /var/lib/fiche" + ]; + DynamicUser = true; + User = "fiche"; + PrivateTmp = true; + Restart = "always"; + WorkingDirectory = cfg.dataDir; + ReadWritePaths = cfg.dataDir; + }; + }; + }; +} -- cgit v1.2.3