blob: 1cb1019cbcaffe5aab1e3af0b4a0b5e2b2e634bb (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
|
{
lib,
my-lib,
...
}: let
inherit (lib) mkOption mkEnableOption types;
inherit (my-lib.netTypes {inherit lib;}) ipAddr;
# A helper function to generate the submodule
webserviceOptions = {
service_name,
reverse_proxy ? true,
}:
{
enable = mkEnableOption "${service_name} selfhosted service";
listenAddr = mkOption {
description = "The IP address on which ${service_name} will listen for incoming connections";
type = ipAddr;
default = "127.0.0.1";
};
privateUrl = mkOption {
description = "Internal .local name for the service. Don't put the protocol (https://) in the string";
type = lib.types.nullOr lib.types.str;
default = null;
};
publicUrl = mkOption {
description = "Public website on which the service will be hosted. Don't put the protocol (https://) in the string";
type = lib.types.nullOr lib.types.str;
default = null;
};
}
// (
if reverse_proxy
then {
reverseProxy = mkOption {
internal = true;
type = lib.types.bool;
default = true;
};
port = mkOption {
description = "The port on which ${service_name} will listen for incomming connections";
type = lib.types.port;
};
}
else {
manualCaddyConfig = mkOption {
description = "Configuration to describe this service in caddy, since reverse_proxy = false.";
type = lib.types.str;
};
}
);
in {
options.collinux.services = {
sshd = {
enable = mkEnableOption "OpenSSH server";
port = mkOption {
description = "Port to run on";
type = lib.types.port;
default = 22;
};
public = mkEnableOption "whether to make this service accessable over the internet";
conf = {
otp = mkEnableOption "Whether to require TOTP (Google Authenticator) 2fa codes to login";
rootLogin = mkEnableOption "Whether to allow root login";
};
};
minecraft = {
enable = mkEnableOption "Minecraft bedrock server";
port = mkOption {
description = "port to run on";
type = lib.types.port;
default = 19132;
};
public = mkEnableOption "whether to make this service accessable over the internet";
};
ngircd = {
enable = mkEnableOption "ngircd IRC server";
port = mkOption {
type = lib.types.port;
default = 6667;
};
public = mkEnableOption "whether to make this service accessable over the internet";
};
jta = webserviceOptions {
service_name = "jta";
};
ganyupload = webserviceOptions {
service_name = "ganyupload";
};
forgejo = webserviceOptions {
service_name = "forgejo";
};
btopweb = webserviceOptions {
service_name = "btopweb";
};
goaccess = webserviceOptions {
service_name = "goaccess";
};
cgit = webserviceOptions {
service_name = "cgit";
reverse_proxy = false;
};
qbittorrent = webserviceOptions {
service_name = "qbittorrent";
};
caddy = {
enable = mkEnableOption "caddy https server";
envFile = mkOption {
description = "Absolute path to file that contains environment files to run caddy with";
type = types.str;
example = "/run/secrets.d/caddy-env";
};
};
};
}
|
