summaryrefslogtreecommitdiffstats
path: root/makefu/3modules/opentracker.nix
diff options
context:
space:
mode:
Diffstat (limited to 'makefu/3modules/opentracker.nix')
-rw-r--r--makefu/3modules/opentracker.nix55
1 files changed, 55 insertions, 0 deletions
diff --git a/makefu/3modules/opentracker.nix b/makefu/3modules/opentracker.nix
new file mode 100644
index 000000000..8847fc09a
--- /dev/null
+++ b/makefu/3modules/opentracker.nix
@@ -0,0 +1,55 @@
+{ config, lib, pkgs, ... }:
+
+with config.krebs.lib;
+let
+ cfg = config.makefu.opentracker;
+
+ out = {
+ options.makefu.opentracker = api;
+ config = lib.mkIf cfg.enable imp;
+ };
+
+ api = {
+ enable = mkEnableOption "opentracker";
+
+ package = mkOption {
+ type = types.package;
+ default = pkgs.opentracker;
+ };
+
+ args = mkOption {
+ type = types.string;
+ description = ''
+ see https://erdgeist.org/arts/software/opentracker/ for all params
+ '';
+ default = "";
+ };
+
+ user = mkOption {
+ description = ''
+ user which will run opentracker. by default opentracker drops all
+ privileges and runs in chroot after starting up as root.
+ '';
+ type = types.str;
+ default = "root";
+ };
+ };
+
+ imp = {
+ systemd.services.opentracker = {
+ description = "opentracker server";
+ after = [ "network.target" ];
+ wantedBy = [ "multi-user.target" ];
+ restartIfChanged = true;
+ serviceConfig = {
+ Type = "simple";
+ ExecStart = "${cfg.package}/bin/opentracker ${cfg.args}";
+ PrivateTmp = true;
+ WorkingDirectory = "/tmp";
+ User = "${cfg.user}";
+ };
+ };
+ };
+in
+out
+