nixos/modules/services/network-filesystems/litestream/default.xml


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60

<chapter xmlns="http://docbook.org/ns/docbook" xmlns:xlink="http://www.w3.org/1999/xlink" xml:id="module-services-litestream">
  <title>Litestream</title>
  <para>
    <link xlink:href="https://litestream.io/">Litestream</link> is a
    standalone streaming replication tool for SQLite.
  </para>
  <section xml:id="module-services-litestream-configuration">
    <title>Configuration</title>
    <para>
      Litestream service is managed by a dedicated user named
      <literal>litestream</literal> which needs permission to the
      database file. Here’s an example config which gives required
      permissions to access
      <link linkend="opt-services.grafana.settings.database.path">grafana
      database</link>:
    </para>
    <programlisting>
{ pkgs, ... }:
{
  users.users.litestream.extraGroups = [ &quot;grafana&quot; ];

  systemd.services.grafana.serviceConfig.ExecStartPost = &quot;+&quot; + pkgs.writeShellScript &quot;grant-grafana-permissions&quot; ''
    timeout=10

    while [ ! -f /var/lib/grafana/data/grafana.db ];
    do
      if [ &quot;$timeout&quot; == 0 ]; then
        echo &quot;ERROR: Timeout while waiting for /var/lib/grafana/data/grafana.db.&quot;
        exit 1
      fi

      sleep 1

      ((timeout--))
    done

    find /var/lib/grafana -type d -exec chmod -v 775 {} \;
    find /var/lib/grafana -type f -exec chmod -v 660 {} \;
  '';

  services.litestream = {
    enable = true;

    environmentFile = &quot;/run/secrets/litestream&quot;;

    settings = {
      dbs = [
        {
          path = &quot;/var/lib/grafana/data/grafana.db&quot;;
          replicas = [{
            url = &quot;s3://mybkt.litestream.io/grafana&quot;;
          }];
        }
      ];
    };
  };
}
</programlisting>
  </section>
</chapter>