diff options
author | Aaron Andersen <aaron@fosslib.net> | 2021-09-01 22:09:44 -0400 |
---|---|---|
committer | GitHub <noreply@github.com> | 2021-09-01 22:09:44 -0400 |
commit | abfdb24af00d88abff4ed7184f45b0c0b8abf268 (patch) | |
tree | 95a4e48d22fd323316629af7c6a9864e806ac814 /nixos/modules/services | |
parent | 4ddc5c6b2addbf03ee21fa5b51de15b2cded11c8 (diff) | |
parent | 9d822d20472fd53b3f521e2780322446055bf010 (diff) | |
download | nixpkgs-abfdb24af00d88abff4ed7184f45b0c0b8abf268.tar nixpkgs-abfdb24af00d88abff4ed7184f45b0c0b8abf268.tar.gz nixpkgs-abfdb24af00d88abff4ed7184f45b0c0b8abf268.tar.bz2 nixpkgs-abfdb24af00d88abff4ed7184f45b0c0b8abf268.tar.lz nixpkgs-abfdb24af00d88abff4ed7184f45b0c0b8abf268.tar.xz nixpkgs-abfdb24af00d88abff4ed7184f45b0c0b8abf268.tar.zst nixpkgs-abfdb24af00d88abff4ed7184f45b0c0b8abf268.zip |
Merge pull request #125687 from malte-v/soju-module-new
nixos/soju: add module
Diffstat (limited to 'nixos/modules/services')
-rw-r--r-- | nixos/modules/services/networking/soju.nix | 113 |
1 files changed, 113 insertions, 0 deletions
diff --git a/nixos/modules/services/networking/soju.nix b/nixos/modules/services/networking/soju.nix new file mode 100644 index 00000000000..68a33e9dccb --- /dev/null +++ b/nixos/modules/services/networking/soju.nix @@ -0,0 +1,113 @@ +{ config, lib, pkgs, ... }: + +with lib; + +let + cfg = config.services.soju; + stateDir = "/var/lib/soju"; + listenCfg = concatMapStringsSep "\n" (l: "listen ${l}") cfg.listen; + tlsCfg = optionalString (cfg.tlsCertificate != null) + "tls ${cfg.tlsCertificate} ${cfg.tlsCertificateKey}"; + logCfg = optionalString cfg.enableMessageLogging + "log fs ${stateDir}/logs"; + + configFile = pkgs.writeText "soju.conf" '' + ${listenCfg} + hostname ${cfg.hostName} + ${tlsCfg} + db sqlite3 ${stateDir}/soju.db + ${logCfg} + http-origin ${concatStringsSep " " cfg.httpOrigins} + accept-proxy-ip ${concatStringsSep " " cfg.acceptProxyIP} + + ${cfg.extraConfig} + ''; +in +{ + ###### interface + + options.services.soju = { + enable = mkEnableOption "soju"; + + listen = mkOption { + type = types.listOf types.str; + default = [ ":6697" ]; + description = '' + Where soju should listen for incoming connections. See the + <literal>listen</literal> directive in + <citerefentry><refentrytitle>soju</refentrytitle> + <manvolnum>1</manvolnum></citerefentry>. + ''; + }; + + hostName = mkOption { + type = types.str; + default = config.networking.hostName; + description = "Server hostname."; + }; + + tlsCertificate = mkOption { + type = types.nullOr types.path; + example = "/var/host.cert"; + description = "Path to server TLS certificate."; + }; + + tlsCertificateKey = mkOption { + type = types.nullOr types.path; + example = "/var/host.key"; + description = "Path to server TLS certificate key."; + }; + + enableMessageLogging = mkOption { + type = types.bool; + default = true; + description = "Whether to enable message logging."; + }; + + httpOrigins = mkOption { + type = types.listOf types.str; + default = []; + description = '' + List of allowed HTTP origins for WebSocket listeners. The parameters are + interpreted as shell patterns, see + <citerefentry><refentrytitle>glob</refentrytitle> + <manvolnum>7</manvolnum></citerefentry>. + ''; + }; + + acceptProxyIP = mkOption { + type = types.listOf types.str; + default = []; + description = '' + Allow the specified IPs to act as a proxy. Proxys have the ability to + overwrite the remote and local connection addresses (via the X-Forwarded-\* + HTTP header fields). The special name "localhost" accepts the loopback + addresses 127.0.0.0/8 and ::1/128. By default, all IPs are rejected. + ''; + }; + + extraConfig = mkOption { + type = types.lines; + default = ""; + description = "Lines added verbatim to the configuration file."; + }; + }; + + ###### implementation + + config = mkIf cfg.enable { + systemd.services.soju = { + description = "soju IRC bouncer"; + wantedBy = [ "multi-user.target" ]; + after = [ "network-online.target" ]; + serviceConfig = { + DynamicUser = true; + Restart = "always"; + ExecStart = "${pkgs.soju}/bin/soju -config ${configFile}"; + StateDirectory = "soju"; + }; + }; + }; + + meta.maintainers = with maintainers; [ malvo ]; +} |