aboutsummaryrefslogtreecommitdiff
path: root/modules/services/nixos/copilot-api.nix
diff options
context:
space:
mode:
authorCollin Williams <96917990+bluedragon1221@users.noreply.github.com>2026-03-31 15:47:10 -0500
committerCollin Williams <96917990+bluedragon1221@users.noreply.github.com>2026-03-31 15:48:14 -0500
commit2c44fddcb44e013114c8d0d9a669c0ec91d4d7b8 (patch)
tree68db30484538469f6c055075cb69e836564a3e5a /modules/services/nixos/copilot-api.nix
parentc759c4772f0ca40a379cd19e63d3343b1e23714a (diff)
no more copilot-api
Diffstat (limited to 'modules/services/nixos/copilot-api.nix')
-rw-r--r--modules/services/nixos/copilot-api.nix62
1 files changed, 0 insertions, 62 deletions
diff --git a/modules/services/nixos/copilot-api.nix b/modules/services/nixos/copilot-api.nix
deleted file mode 100644
index d9d4da3..0000000
--- a/modules/services/nixos/copilot-api.nix
+++ /dev/null
@@ -1,62 +0,0 @@
-{
- config,
- lib,
- pkgs,
- ...
-}: let
- cfg = config.collinux.services.copilot-api;
-in {
- config = lib.mkIf cfg.enable {
- users.groups."copilot-api" = {};
- users.users."copilot-api" = {
- isSystemUser = true;
- group = "copilot-api";
- home = "/var/lib/copilot-api";
- createHome = true;
- };
-
- systemd.services."copilot-api" = {
- description = "GitHub Copilot API Proxy";
- restartIfChanged = true;
- wants = ["network-online.target"];
- after = ["network-online.target"];
- wantedBy = ["multi-user.target"];
-
- serviceConfig = {
- User = "copilot-api";
- Group = "copilot-api";
- Type = "simple";
- Restart = "on-failure";
- RestartSec = "5s";
-
- # Load environment variables from file (e.g., GH_TOKEN)
- EnvironmentFile = lib.mkIf (cfg.githubToken != null) cfg.githubToken;
-
- # Security hardening
- PrivateTmp = true;
- ProtectSystem = "strict";
- ProtectHome = true;
- NoNewPrivileges = true;
- PrivateDevices = true;
- ProtectKernelTunables = true;
- ProtectControlGroups = true;
- RestrictSUIDSGID = true;
-
- # Allow writing to state directory
- StateDirectory = "copilot-api";
- WorkingDirectory = "/var/lib/copilot-api";
-
- ExecStart = let
- copilot-api = pkgs.callPackage ../../../pkgs/copilot-api {};
- # Use bash to read token from environment and pass to command
- startScript = pkgs.writeShellScript "copilot-api-start" ''
- exec ${copilot-api}/bin/copilot-api start \
- --port ${toString cfg.port} \
- --host ${cfg.listenAddr} \
- ${lib.optionalString (cfg.githubToken != null) "--github-token \"$GH_TOKEN\""}
- '';
- in "${startScript}";
- };
- };
- };
-}