2014-09-15 08:26:26 +00:00
|
|
|
{ config, lib, pkgs, utils, ... }:
|
|
|
|
|
|
|
|
with lib;
|
|
|
|
let
|
|
|
|
|
|
|
|
dataDir = "/var/lib/consul";
|
|
|
|
cfg = config.services.consul;
|
|
|
|
|
2018-10-26 16:07:56 +00:00
|
|
|
configOptions = {
|
|
|
|
data_dir = dataDir;
|
|
|
|
ui = cfg.webUi;
|
|
|
|
} // cfg.extraConfig;
|
2014-09-15 08:26:26 +00:00
|
|
|
|
|
|
|
configFiles = [ "/etc/consul.json" "/etc/consul-addrs.json" ]
|
|
|
|
++ cfg.extraConfigFiles;
|
|
|
|
|
|
|
|
devices = attrValues (filterAttrs (_: i: i != null) cfg.interface);
|
2019-08-05 11:03:38 +00:00
|
|
|
systemdDevices = forEach devices
|
2014-09-15 08:26:26 +00:00
|
|
|
(i: "sys-subsystem-net-devices-${utils.escapeSystemdPath i}.device");
|
|
|
|
in
|
|
|
|
{
|
|
|
|
options = {
|
|
|
|
|
|
|
|
services.consul = {
|
|
|
|
|
|
|
|
enable = mkOption {
|
|
|
|
type = types.bool;
|
|
|
|
default = false;
|
|
|
|
description = ''
|
|
|
|
Enables the consul daemon.
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
2016-01-07 23:54:43 +00:00
|
|
|
package = mkOption {
|
|
|
|
type = types.package;
|
|
|
|
default = pkgs.consul;
|
2016-02-17 19:22:56 +00:00
|
|
|
defaultText = "pkgs.consul";
|
2016-01-07 23:54:43 +00:00
|
|
|
description = ''
|
|
|
|
The package used for the Consul agent and CLI.
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
|
|
|
|
2014-09-15 08:26:26 +00:00
|
|
|
webUi = mkOption {
|
|
|
|
type = types.bool;
|
|
|
|
default = false;
|
|
|
|
description = ''
|
|
|
|
Enables the web interface on the consul http port.
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
2014-12-08 21:55:12 +00:00
|
|
|
leaveOnStop = mkOption {
|
|
|
|
type = types.bool;
|
|
|
|
default = false;
|
|
|
|
description = ''
|
|
|
|
If enabled, causes a leave action to be sent when closing consul.
|
|
|
|
This allows a clean termination of the node, but permanently removes
|
|
|
|
it from the cluster. You probably don't want this option unless you
|
|
|
|
are running a node which going offline in a permanent / semi-permanent
|
|
|
|
fashion.
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
2014-09-15 08:26:26 +00:00
|
|
|
interface = {
|
|
|
|
|
|
|
|
advertise = mkOption {
|
|
|
|
type = types.nullOr types.str;
|
|
|
|
default = null;
|
|
|
|
description = ''
|
|
|
|
The name of the interface to pull the advertise_addr from.
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
|
|
|
bind = mkOption {
|
|
|
|
type = types.nullOr types.str;
|
|
|
|
default = null;
|
|
|
|
description = ''
|
|
|
|
The name of the interface to pull the bind_addr from.
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
|
|
|
};
|
|
|
|
|
|
|
|
forceIpv4 = mkOption {
|
|
|
|
type = types.bool;
|
|
|
|
default = false;
|
|
|
|
description = ''
|
|
|
|
Whether we should force the interfaces to only pull ipv4 addresses.
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
|
|
|
dropPrivileges = mkOption {
|
|
|
|
type = types.bool;
|
|
|
|
default = true;
|
|
|
|
description = ''
|
|
|
|
Whether the consul agent should be run as a non-root consul user.
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
|
|
|
extraConfig = mkOption {
|
|
|
|
default = { };
|
|
|
|
description = ''
|
|
|
|
Extra configuration options which are serialized to json and added
|
|
|
|
to the config.json file.
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
|
|
|
extraConfigFiles = mkOption {
|
|
|
|
default = [ ];
|
|
|
|
type = types.listOf types.str;
|
|
|
|
description = ''
|
|
|
|
Additional configuration files to pass to consul
|
|
|
|
NOTE: These will not trigger the service to be restarted when altered.
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
2015-02-12 18:15:23 +00:00
|
|
|
alerts = {
|
2015-06-21 15:19:46 +00:00
|
|
|
enable = mkEnableOption "consul-alerts";
|
2015-02-12 18:15:23 +00:00
|
|
|
|
2015-06-08 11:41:43 +00:00
|
|
|
package = mkOption {
|
|
|
|
description = "Package to use for consul-alerts.";
|
|
|
|
default = pkgs.consul-alerts;
|
2016-01-17 18:34:55 +00:00
|
|
|
defaultText = "pkgs.consul-alerts";
|
2015-06-08 11:41:43 +00:00
|
|
|
type = types.package;
|
|
|
|
};
|
|
|
|
|
2015-02-12 18:15:23 +00:00
|
|
|
listenAddr = mkOption {
|
|
|
|
description = "Api listening address.";
|
|
|
|
default = "localhost:9000";
|
|
|
|
type = types.str;
|
|
|
|
};
|
|
|
|
|
|
|
|
consulAddr = mkOption {
|
|
|
|
description = "Consul api listening adddress";
|
|
|
|
default = "localhost:8500";
|
|
|
|
type = types.str;
|
|
|
|
};
|
|
|
|
|
|
|
|
watchChecks = mkOption {
|
|
|
|
description = "Whether to enable check watcher.";
|
|
|
|
default = true;
|
|
|
|
type = types.bool;
|
|
|
|
};
|
|
|
|
|
|
|
|
watchEvents = mkOption {
|
|
|
|
description = "Whether to enable event watcher.";
|
|
|
|
default = true;
|
|
|
|
type = types.bool;
|
|
|
|
};
|
|
|
|
};
|
|
|
|
|
2014-09-15 08:26:26 +00:00
|
|
|
};
|
|
|
|
|
|
|
|
};
|
|
|
|
|
2015-06-08 11:41:43 +00:00
|
|
|
config = mkIf cfg.enable (
|
|
|
|
mkMerge [{
|
2014-09-15 08:26:26 +00:00
|
|
|
|
2018-06-29 23:58:35 +00:00
|
|
|
users.users."consul" = {
|
2015-06-08 11:41:43 +00:00
|
|
|
description = "Consul agent daemon user";
|
|
|
|
uid = config.ids.uids.consul;
|
|
|
|
# The shell is needed for health checks
|
|
|
|
shell = "/run/current-system/sw/bin/bash";
|
|
|
|
};
|
2014-09-15 08:26:26 +00:00
|
|
|
|
2015-06-08 11:41:43 +00:00
|
|
|
environment = {
|
|
|
|
etc."consul.json".text = builtins.toJSON configOptions;
|
|
|
|
# We need consul.d to exist for consul to start
|
|
|
|
etc."consul.d/dummy.json".text = "{ }";
|
2016-01-07 23:54:43 +00:00
|
|
|
systemPackages = [ cfg.package ];
|
2015-06-08 11:41:43 +00:00
|
|
|
};
|
2014-09-15 08:26:26 +00:00
|
|
|
|
2015-06-08 11:41:43 +00:00
|
|
|
systemd.services.consul = {
|
|
|
|
wantedBy = [ "multi-user.target" ];
|
|
|
|
after = [ "network.target" ] ++ systemdDevices;
|
|
|
|
bindsTo = systemdDevices;
|
|
|
|
restartTriggers = [ config.environment.etc."consul.json".source ]
|
|
|
|
++ mapAttrsToList (_: d: d.source)
|
|
|
|
(filterAttrs (n: _: hasPrefix "consul.d/" n) config.environment.etc);
|
|
|
|
|
|
|
|
serviceConfig = {
|
2016-06-13 21:32:16 +00:00
|
|
|
ExecStart = "@${cfg.package.bin}/bin/consul consul agent -config-dir /etc/consul.d"
|
2015-06-08 11:41:43 +00:00
|
|
|
+ concatMapStrings (n: " -config-file ${n}") configFiles;
|
2016-06-13 21:32:16 +00:00
|
|
|
ExecReload = "${cfg.package.bin}/bin/consul reload";
|
2015-06-08 11:41:43 +00:00
|
|
|
PermissionsStartOnly = true;
|
|
|
|
User = if cfg.dropPrivileges then "consul" else null;
|
2017-07-18 12:51:35 +00:00
|
|
|
Restart = "on-failure";
|
2018-11-25 12:33:22 +00:00
|
|
|
TimeoutStartSec = "infinity";
|
2015-06-08 11:41:43 +00:00
|
|
|
} // (optionalAttrs (cfg.leaveOnStop) {
|
2016-06-13 21:32:16 +00:00
|
|
|
ExecStop = "${cfg.package.bin}/bin/consul leave";
|
2015-06-08 11:41:43 +00:00
|
|
|
});
|
|
|
|
|
|
|
|
path = with pkgs; [ iproute gnugrep gawk consul ];
|
|
|
|
preStart = ''
|
|
|
|
mkdir -m 0700 -p ${dataDir}
|
|
|
|
chown -R consul ${dataDir}
|
|
|
|
|
|
|
|
# Determine interface addresses
|
|
|
|
getAddrOnce () {
|
|
|
|
ip addr show dev "$1" \
|
|
|
|
| grep 'inet${optionalString (cfg.forceIpv4) " "}.*scope global' \
|
|
|
|
| awk -F '[ /\t]*' '{print $3}' | head -n 1
|
|
|
|
}
|
|
|
|
getAddr () {
|
2014-09-15 08:26:26 +00:00
|
|
|
ADDR="$(getAddrOnce $1)"
|
2015-06-08 11:41:43 +00:00
|
|
|
LEFT=60 # Die after 1 minute
|
|
|
|
while [ -z "$ADDR" ]; do
|
|
|
|
sleep 1
|
|
|
|
LEFT=$(expr $LEFT - 1)
|
|
|
|
if [ "$LEFT" -eq "0" ]; then
|
|
|
|
echo "Address lookup timed out"
|
|
|
|
exit 1
|
|
|
|
fi
|
|
|
|
ADDR="$(getAddrOnce $1)"
|
|
|
|
done
|
|
|
|
echo "$ADDR"
|
|
|
|
}
|
|
|
|
echo "{" > /etc/consul-addrs.json
|
|
|
|
delim=" "
|
|
|
|
''
|
|
|
|
+ concatStrings (flip mapAttrsToList cfg.interface (name: i:
|
|
|
|
optionalString (i != null) ''
|
|
|
|
echo "$delim \"${name}_addr\": \"$(getAddr "${i}")\"" >> /etc/consul-addrs.json
|
|
|
|
delim=","
|
|
|
|
''))
|
|
|
|
+ ''
|
|
|
|
echo "}" >> /etc/consul-addrs.json
|
2015-02-12 18:15:23 +00:00
|
|
|
'';
|
|
|
|
};
|
2015-06-08 11:41:43 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
(mkIf (cfg.alerts.enable) {
|
|
|
|
systemd.services.consul-alerts = {
|
|
|
|
wantedBy = [ "multi-user.target" ];
|
|
|
|
after = [ "consul.service" ];
|
|
|
|
|
2016-01-07 23:54:43 +00:00
|
|
|
path = [ cfg.package ];
|
2015-06-08 11:41:43 +00:00
|
|
|
|
|
|
|
serviceConfig = {
|
|
|
|
ExecStart = ''
|
2016-06-13 21:32:16 +00:00
|
|
|
${cfg.alerts.package.bin}/bin/consul-alerts start \
|
2015-06-08 11:41:43 +00:00
|
|
|
--alert-addr=${cfg.alerts.listenAddr} \
|
|
|
|
--consul-addr=${cfg.alerts.consulAddr} \
|
|
|
|
${optionalString cfg.alerts.watchChecks "--watch-checks"} \
|
|
|
|
${optionalString cfg.alerts.watchEvents "--watch-events"}
|
|
|
|
'';
|
|
|
|
User = if cfg.dropPrivileges then "consul" else null;
|
|
|
|
Restart = "on-failure";
|
|
|
|
};
|
|
|
|
};
|
|
|
|
})
|
2015-02-12 18:15:23 +00:00
|
|
|
|
2015-06-08 11:41:43 +00:00
|
|
|
]);
|
2014-09-15 08:26:26 +00:00
|
|
|
}
|