fdbfe584c5
Adds a new Nix flake output `headplane-nixos-docs` which generates a Markdown page with all NixOS `services.headplane.settings.*` options. Replaces existing handwritten options documentation.
62 lines
1.7 KiB
Nix
62 lines
1.7 KiB
Nix
{
|
|
config,
|
|
lib,
|
|
pkgs,
|
|
...
|
|
}: let
|
|
inherit
|
|
(lib)
|
|
filterAttrs
|
|
filterAttrsRecursive
|
|
mkIf
|
|
recursiveUpdate
|
|
updateManyAttrsByPath
|
|
;
|
|
cfg = config.services.headplane;
|
|
settingsFormat = pkgs.formats.yaml {};
|
|
settingsWithAgentExecutablePath = recursiveUpdate cfg.settings {
|
|
integration.agent.executable_path = "${cfg.settings.integration.agent.package}/bin/hp_agent";
|
|
};
|
|
settingsWithoutAgentPackage =
|
|
updateManyAttrsByPath [
|
|
{
|
|
path = ["integration" "agent"];
|
|
update = old: filterAttrs (key: value: key != "package") old;
|
|
}
|
|
]
|
|
settingsWithAgentExecutablePath;
|
|
settingsWithoutNulls = filterAttrsRecursive (key: value: value != null) settingsWithoutAgentPackage;
|
|
settingsFile = settingsFormat.generate "headplane-config.yaml" settingsWithoutNulls;
|
|
in {
|
|
imports = [./options.nix];
|
|
config = mkIf cfg.enable {
|
|
environment = {
|
|
systemPackages = [cfg.package];
|
|
etc."headplane/config.yaml".source = "${settingsFile}";
|
|
};
|
|
|
|
systemd.services.headplane = {
|
|
description = "Headscale Web UI";
|
|
|
|
wantedBy = ["multi-user.target"];
|
|
after = ["headscale.service"];
|
|
requires = ["headscale.service"];
|
|
|
|
environment = {HEADPLANE_DEBUG_LOG = builtins.toString cfg.debug;};
|
|
|
|
serviceConfig = {
|
|
User = config.services.headscale.user;
|
|
Group = config.services.headscale.group;
|
|
StateDirectory = "headplane";
|
|
|
|
ExecStart = "${pkgs.headplane}/bin/headplane";
|
|
Restart = "always";
|
|
RestartSec = 5;
|
|
|
|
# TODO: Harden `systemd` security according to the "The Principle of Least Power".
|
|
# See: `$ systemd-analyze security headplane`.
|
|
};
|
|
};
|
|
};
|
|
}
|