Bruno BELANYI
77cf3430ae
And when not possible, document why. Note for the future: there is some repetition in some modules to configure the correct value of the subdomain, which I happen to know will line up correctly thanks to the nginx wrapper. A good way to refactor this in the future would involve avoiding this repetition, allowing use to query the correct domain in some way...
83 lines
1.9 KiB
Nix
83 lines
1.9 KiB
Nix
# A simple Gitea webhook to mirror all my repositories
|
|
{ config, lib, pkgs, ... }:
|
|
let
|
|
cfg = config.my.services.lohr;
|
|
settingsFormat = pkgs.formats.yaml { };
|
|
|
|
lohrPkg = pkgs.ambroisie.lohr;
|
|
in
|
|
{
|
|
options.my.services.lohr = with lib; {
|
|
enable = mkEnableOption "Automatic gitea repositories mirroring";
|
|
|
|
port = mkOption {
|
|
type = types.port;
|
|
default = 9192;
|
|
example = 8080;
|
|
description = "Internal port of the Lohr service";
|
|
};
|
|
|
|
setting = mkOption rec {
|
|
type = settingsFormat.type;
|
|
apply = recursiveUpdate default;
|
|
default = {
|
|
default_remotes = [
|
|
"git@github.com:ambroisie"
|
|
"git@git.sr.ht:~ambroisie"
|
|
];
|
|
};
|
|
description = "Global settings configuration file";
|
|
};
|
|
|
|
sharedSecretFile = mkOption {
|
|
type = types.str;
|
|
example = "/run/secrets/lohr.env";
|
|
description = "Shared secret between lohr and Gitea hook";
|
|
};
|
|
};
|
|
|
|
config = lib.mkIf cfg.enable {
|
|
systemd.services.lohr = {
|
|
wantedBy = [ "multi-user.target" ];
|
|
serviceConfig = {
|
|
EnvironmentFile = [
|
|
cfg.sharedSecretFile
|
|
];
|
|
Environment = [
|
|
"ROCKET_PORT=${toString cfg.port}"
|
|
"ROCKET_LOG_LEVEL=normal"
|
|
"LOHR_HOME=/var/lib/lohr/"
|
|
"LOHR_CONFIG="
|
|
];
|
|
ExecStart =
|
|
let
|
|
configFile = settingsFormat.generate "lohr-config.yaml" cfg.setting;
|
|
in
|
|
"${lohrPkg}/bin/lohr --config ${configFile}";
|
|
StateDirectory = "lohr";
|
|
WorkingDirectory = "/var/lib/lohr";
|
|
User = "lohr";
|
|
Group = "lohr";
|
|
};
|
|
path = with pkgs; [
|
|
git
|
|
];
|
|
};
|
|
|
|
users.users.lohr = {
|
|
isSystemUser = true;
|
|
home = "/var/lib/lohr";
|
|
createHome = true;
|
|
group = "lohr";
|
|
};
|
|
users.groups.lohr = { };
|
|
|
|
my.services.nginx.virtualHosts = [
|
|
{
|
|
subdomain = "lohr";
|
|
inherit (cfg) port;
|
|
}
|
|
];
|
|
};
|
|
}
|