nixos/pixiecore: init (#83406)
Co-authored-by: raunovv <rauno@oyenetwork.com> Co-authored-by: Jörg Thalheim <joerg@thalheim.io>
This commit is contained in:
parent
be8514864d
commit
544821654d
|
@ -683,6 +683,7 @@
|
||||||
./services/networking/ostinato.nix
|
./services/networking/ostinato.nix
|
||||||
./services/networking/owamp.nix
|
./services/networking/owamp.nix
|
||||||
./services/networking/pdnsd.nix
|
./services/networking/pdnsd.nix
|
||||||
|
./services/networking/pixiecore.nix
|
||||||
./services/networking/polipo.nix
|
./services/networking/polipo.nix
|
||||||
./services/networking/powerdns.nix
|
./services/networking/powerdns.nix
|
||||||
./services/networking/pdns-recursor.nix
|
./services/networking/pdns-recursor.nix
|
||||||
|
|
134
nixos/modules/services/networking/pixiecore.nix
Normal file
134
nixos/modules/services/networking/pixiecore.nix
Normal file
|
@ -0,0 +1,134 @@
|
||||||
|
{ config, lib, pkgs, ... }:
|
||||||
|
|
||||||
|
with lib;
|
||||||
|
|
||||||
|
let
|
||||||
|
cfg = config.services.pixiecore;
|
||||||
|
in
|
||||||
|
{
|
||||||
|
meta.maintainers = with maintainers; [ bbigras danderson ];
|
||||||
|
|
||||||
|
options = {
|
||||||
|
services.pixiecore = {
|
||||||
|
enable = mkEnableOption "Pixiecore";
|
||||||
|
|
||||||
|
openFirewall = mkOption {
|
||||||
|
type = types.bool;
|
||||||
|
default = false;
|
||||||
|
description = ''
|
||||||
|
Open ports (67, 69 UDP and 4011, 'port', 'statusPort' TCP) in the firewall for Pixiecore.
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
|
||||||
|
mode = mkOption {
|
||||||
|
description = "Which mode to use";
|
||||||
|
default = "boot";
|
||||||
|
type = types.enum [ "api" "boot" ];
|
||||||
|
};
|
||||||
|
|
||||||
|
debug = mkOption {
|
||||||
|
type = types.bool;
|
||||||
|
default = false;
|
||||||
|
description = "Log more things that aren't directly related to booting a recognized client";
|
||||||
|
};
|
||||||
|
|
||||||
|
dhcpNoBind = mkOption {
|
||||||
|
type = types.bool;
|
||||||
|
default = false;
|
||||||
|
description = "Handle DHCP traffic without binding to the DHCP server port";
|
||||||
|
};
|
||||||
|
|
||||||
|
kernel = mkOption {
|
||||||
|
type = types.str or types.path;
|
||||||
|
default = "";
|
||||||
|
description = "Kernel path. Ignored unless mode is set to 'boot'";
|
||||||
|
};
|
||||||
|
|
||||||
|
initrd = mkOption {
|
||||||
|
type = types.str or types.path;
|
||||||
|
default = "";
|
||||||
|
description = "Initrd path. Ignored unless mode is set to 'boot'";
|
||||||
|
};
|
||||||
|
|
||||||
|
cmdLine = mkOption {
|
||||||
|
type = types.str;
|
||||||
|
default = "";
|
||||||
|
description = "Kernel commandline arguments. Ignored unless mode is set to 'boot'";
|
||||||
|
};
|
||||||
|
|
||||||
|
listen = mkOption {
|
||||||
|
type = types.str;
|
||||||
|
default = "0.0.0.0";
|
||||||
|
description = "IPv4 address to listen on";
|
||||||
|
};
|
||||||
|
|
||||||
|
port = mkOption {
|
||||||
|
type = types.port;
|
||||||
|
default = 80;
|
||||||
|
description = "Port to listen on for HTTP";
|
||||||
|
};
|
||||||
|
|
||||||
|
statusPort = mkOption {
|
||||||
|
type = types.port;
|
||||||
|
default = 80;
|
||||||
|
description = "HTTP port for status information (can be the same as --port)";
|
||||||
|
};
|
||||||
|
|
||||||
|
apiServer = mkOption {
|
||||||
|
type = types.str;
|
||||||
|
example = "localhost:8080";
|
||||||
|
description = "host:port to connect to the API. Ignored unless mode is set to 'api'";
|
||||||
|
};
|
||||||
|
|
||||||
|
extraArguments = mkOption {
|
||||||
|
type = types.listOf types.str;
|
||||||
|
default = [];
|
||||||
|
description = "Additional command line arguments to pass to Pixiecore";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
config = mkIf cfg.enable {
|
||||||
|
users.groups.pixiecore = {};
|
||||||
|
users.users.pixiecore = {
|
||||||
|
description = "Pixiecore daemon user";
|
||||||
|
group = "pixiecore";
|
||||||
|
};
|
||||||
|
|
||||||
|
networking.firewall = mkIf cfg.openFirewall {
|
||||||
|
allowedTCPPorts = [ 4011 cfg.port cfg.statusPort ];
|
||||||
|
allowedUDPPorts = [ 67 69 ];
|
||||||
|
};
|
||||||
|
|
||||||
|
systemd.services.pixiecore = {
|
||||||
|
description = "Pixiecore server";
|
||||||
|
after = [ "network.target"];
|
||||||
|
wants = [ "network.target"];
|
||||||
|
wantedBy = [ "multi-user.target"];
|
||||||
|
serviceConfig = {
|
||||||
|
User = "pixiecore";
|
||||||
|
Restart = "always";
|
||||||
|
AmbientCapabilities = [ "cap_net_bind_service" ] ++ optional cfg.dhcpNoBind "cap_net_raw";
|
||||||
|
ExecStart =
|
||||||
|
let
|
||||||
|
argString =
|
||||||
|
if cfg.mode == "boot"
|
||||||
|
then [ "boot" cfg.kernel ]
|
||||||
|
++ optional (cfg.initrd != "") cfg.initrd
|
||||||
|
++ optional (cfg.cmdLine != "") "--cmdline=${lib.escapeShellArg cfg.cmdLine}"
|
||||||
|
else [ "api" cfg.apiServer ];
|
||||||
|
in
|
||||||
|
''
|
||||||
|
${pkgs.pixiecore}/bin/pixiecore \
|
||||||
|
${lib.escapeShellArgs argString} \
|
||||||
|
${optionalString cfg.debug "--debug"} \
|
||||||
|
${optionalString cfg.dhcpNoBind "--dhcp-no-bind"} \
|
||||||
|
--listen-addr ${lib.escapeShellArg cfg.listen} \
|
||||||
|
--port ${toString cfg.port} \
|
||||||
|
--status-port ${toString cfg.statusPort} \
|
||||||
|
${escapeShellArgs cfg.extraArguments}
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
}
|
Loading…
Reference in a new issue