blob: c34072623eae425cf2ec1ca86d7327a90c66f40e (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
|
{
config,
lib,
pkgs,
...
}:
let
inherit (lib)
generators
literalExpression
mkEnableOption
mkPackageOption
mkIf
mkOption
recursiveUpdate
types
;
cfg = config.services.zeronet;
dataDir = "/var/lib/zeronet";
configFile = pkgs.writeText "zeronet.conf" (
generators.toINI { } (recursiveUpdate defaultSettings cfg.settings)
);
defaultSettings = {
global = {
data_dir = dataDir;
log_dir = dataDir;
ui_port = cfg.port;
fileserver_port = cfg.fileserverPort;
tor =
if !cfg.tor then
"disable"
else if cfg.torAlways then
"always"
else
"enable";
};
};
in
with lib;
{
options.services.zeronet = {
enable = mkEnableOption "zeronet";
package = mkPackageOption pkgs "zeronet-conservancy" { };
settings = mkOption {
type =
with types;
attrsOf (
attrsOf (oneOf [
str
int
bool
(listOf str)
])
);
default = { };
example = literalExpression "{ global.tor = enable; }";
description = ''
{file}`zeronet.conf` configuration. Refer to
<https://zeronet.readthedocs.io/en/latest/faq/#is-it-possible-to-use-a-configuration-file>
for details on supported values;
'';
};
port = mkOption {
type = types.port;
default = 43110;
description = "Optional zeronet web UI port.";
};
fileserverPort = mkOption {
# Not optional: when absent zeronet tries to write one to the
# read-only config file and crashes
type = types.port;
default = 12261;
description = "Zeronet fileserver port.";
};
tor = mkOption {
type = types.bool;
default = false;
description = "Use TOR for zeronet traffic where possible.";
};
torAlways = mkOption {
type = types.bool;
default = false;
description = "Use TOR for all zeronet traffic.";
};
};
config = mkIf cfg.enable {
services.tor = mkIf cfg.tor {
enable = true;
settings = {
ControlPort = 9051;
CacheDirectoryGroupReadable = true;
CookieAuthentication = true;
CookieAuthFileGroupReadable = true;
};
};
systemd.services.zeronet = {
description = "zeronet";
after = [ "network.target" ] ++ optional cfg.tor "tor.service";
wantedBy = [ "multi-user.target" ];
serviceConfig = {
User = "zeronet";
DynamicUser = true;
StateDirectory = "zeronet";
SupplementaryGroups = mkIf cfg.tor [ "tor" ];
ExecStart = "${cfg.package}/bin/zeronet --config_file ${configFile}";
};
};
};
imports = [
(mkRemovedOptionModule [
"services"
"zeronet"
"dataDir"
] "Zeronet will store data by default in /var/lib/zeronet")
(mkRemovedOptionModule [
"services"
"zeronet"
"logDir"
] "Zeronet will log by default in /var/lib/zeronet")
];
meta = {
inherit (pkgs.zeronet-conservancy.meta) maintainers;
};
}
|