92 lines
2.3 KiB
Nix
92 lines
2.3 KiB
Nix
|
# A simple Gitea webhook to mirror all my repositories
|
||
|
|
{ config, lib, pkgs, ... }:
|
||
|
|
let
|
||
|
|
cfg = config.my.services.lohr;
|
||
|
|
settingsFormat = pkgs.formats.yaml { };
|
||
|
|
|
||
|
|
domain = config.networking.domain;
|
||
|
|
lohrDomain = "lohr.${config.networking.domain}";
|
||
|
|
|
||
|
|
lohrPkg =
|
||
|
|
let
|
||
|
|
flake = builtins.getFlake "github:alarsyo/lohr?rev=e68fcf3e522fc055c1a42ad10ac24c97ee068742";
|
||
|
|
in
|
||
|
|
flake.defaultPackage."x86_64-linux"; # FIXME: use correct system
|
||
|
|
in
|
||
|
|
{
|
||
|
|
options.my.services.lohr = with lib; {
|
||
|
|
enable = mkEnableOption "Automatic gitea repositories mirroring";
|
||
|
|
|
||
|
|
port = mkOption {
|
||
|
|
type = types.port;
|
||
|
|
default = 9192;
|
||
|
|
example = 8080;
|
||
|
|
description = "Internal port of the Lohr service";
|
||
|
|
};
|
||
|
|
|
||
|
|
setting = mkOption rec {
|
||
|
|
type = settingsFormat.type;
|
||
|
|
apply = recursiveUpdate default;
|
||
|
|
default = {
|
||
|
|
default_remotes = [
|
||
|
|
"git@github.com:ambroisie"
|
||
|
|
"git@git.sr.ht:~ambroisie"
|
||
|
|
];
|
||
|
|
};
|
||
|
|
description = "Global settings configuration file";
|
||
|
|
};
|
||
|
|
|
||
|
|
sharedSecretFile = mkOption {
|
||
|
|
type = types.str;
|
||
|
|
example = "/run/secrets/lohr.env";
|
||
|
|
description = "Shared secret between lohr and Gitea hook";
|
||
|
|
};
|
||
|
|
};
|
||
|
|
|
||
|
|
config = lib.mkIf cfg.enable {
|
||
|
|
systemd.services.lohr = {
|
||
|
|
wantedBy = [ "multi-user.target" ];
|
||
|
|
serviceConfig = {
|
||
|
|
EnvironmentFile = [
|
||
|
|
cfg.sharedSecretFile
|
||
|
|
];
|
||
|
|
Environment = [
|
||
|
|
"ROCKET_PORT=${toString cfg.port}"
|
||
|
|
"ROCKET_LOG=normal"
|
||
|
|
"LOHR_HOME=/var/lib/lohr/"
|
||
|
|
"LOHR_CONFIG="
|
||
|
|
];
|
||
|
|
ExecStart =
|
||
|
|
let
|
||
|
|
configFile = settingsFormat.generate "lohr-config.yaml" cfg.setting;
|
||
|
|
in
|
||
|
|
"${lohrPkg}/bin/lohr --config ${configFile}";
|
||
|
|
StateDirectory = "lohr";
|
||
|
|
WorkingDirectory = "/var/lib/lohr";
|
||
|
|
User = "lohr";
|
||
|
|
Group = "lohr";
|
||
|
|
};
|
||
|
|
path = with pkgs; [
|
||
|
|
git
|
||
|
|
];
|
||
|
|
};
|
||
|
|
|
||
|
|
users.users.lohr = {
|
||
|
|
isSystemUser = true;
|
||
|
|
home = "/var/lib/lohr";
|
||
|
|
createHome = true;
|
||
|
|
group = "lohr";
|
||
|
|
};
|
||
|
|
users.groups.lohr = { };
|
||
|
|
|
||
|
|
services.nginx.virtualHosts."${lohrDomain}" = {
|
||
|
|
forceSSL = true;
|
||
|
|
useACMEHost = domain;
|
||
|
|
|
||
|
|
locations."/" = {
|
||
|
|
proxyPass = "http://127.0.0.1:${toString cfg.port}/";
|
||
|
|
};
|
||
|
|
};
|
||
|
|
};
|
||
|
|
}
|