blob: be53daa2f6b167af7d2ea4d1c2cec0d092f13108 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
|
{
pkgs,
config,
lib,
}:
let
cfg = config.wilkuu.services.gomuks;
hostname = config.networking.hostName;
in
{
options.wilkuu.serivces.gomuks = with lib; {
enable = mkEnableOption "Enable gomuks";
# Hostname option is reused a lot, we might need to create a util for the options at this rate.
hostname = mkOption {
type = types.str;
default = "$matrix.{config.networking.hostName}.local";
description = "Hostname on which gomuks should be hosted.";
};
package = mkPackageOption pkgs "gomuks-web" { };
dataDir = mkOption {
type = types.path;
default = "/srv/gomuks/";
description = "Directory for where gomuks will store it's files.";
};
};
config = lib.mkIf cfg.enable (
let
yaml = pkgs.writers.writeYAML;
cfgDir = "${cfg.dataDir}/.config";
configFile = yaml.generate "config.yaml" {
password_file = config.sops.secrets."gomuks/password".path;
};
in
{
users.users.gomuks = {
isSystemUser = true;
group = "gomuks";
};
users.groups.gomuks = { };
sops.secrets."gomuks/password" = {
owner = "gomuks";
sopsFile = ./secrets/${hostname}/gomuks.yaml;
};
systemd.services.gomuks = {
name = "gomuks";
serviceConifg = {
User = "gomuks";
ExecStart = "${cfg.package}";
WorkingDirectory = "${cfg.dataDir}";
Restart = "always";
Environment = [
"XDG_CONFIG_HOME=${cfgDir}"
];
};
};
systemd.tmpfiles.rules = [
"d ${cfgDir} 0700 ${cfg.user} ${cfg.user} -"
"L+ ${cfgDir}/config.yaml - - - - ${configFile}"
];
}
);
}
|
