summaryrefslogtreecommitdiffstats
path: root/makefu/3modules/tinc_graphs.nix
diff options
context:
space:
mode:
Diffstat (limited to 'makefu/3modules/tinc_graphs.nix')
-rw-r--r--makefu/3modules/tinc_graphs.nix122
1 files changed, 122 insertions, 0 deletions
diff --git a/makefu/3modules/tinc_graphs.nix b/makefu/3modules/tinc_graphs.nix
new file mode 100644
index 000000000..10f1b23a0
--- /dev/null
+++ b/makefu/3modules/tinc_graphs.nix
@@ -0,0 +1,122 @@
+{ config, lib, pkgs, ... }:
+
+with lib;
+let
+ cfg = config.makefu.tinc_graphs;
+ internal_dir = "${cfg.workingDir}/internal";
+ external_dir = "${cfg.workingDir}/external";
+
+ out = {
+ options.makefu.tinc_graphs = api;
+ config = mkIf cfg.enable imp ;
+ };
+
+ api = {
+ enable = mkEnableOption "tinc graphs";
+
+ geodbPath = mkOption {
+ type = types.str;
+ description = "Path to geocitydb, defaults to geolite-legacy";
+ default = "${pkgs.geolite-legacy}/share/GeoIP/GeoIPCity.dat";
+ };
+
+ krebsNginx = {
+ # configure krebs nginx to serve the new graphs
+ enable = mkEnableOption "tinc_graphs nginx";
+
+ hostnames_complete = {
+ #TODO: this is not a secure way to serve these graphs,better listen to
+ # the correct interface, krebs.nginx does not support this yet
+
+ type = with types; listOf str;
+ description = "hostname which serves complete graphs";
+ default = config.krebs.build.host.name;
+ };
+
+ hostnames_anonymous = {
+ type = with types; listOf str;
+ description = ''
+ hostname which serves anonymous graphs
+ must be different from hostname_complete
+ '';
+ };
+ };
+
+ workingDir = mkOption {
+ type = types.str;
+ description = ''
+ Path to working dir, will create interal and external/.
+ Defaults to the new users home dir which defaults to
+ /var/cache/tinc_graphs'';
+ default = config.users.extraUsers.tinc_graphs.home;
+ };
+
+ timerConfig = mkOption {
+ type = with types; attrsOf str;
+ default = {
+ OnCalendar = "*:0/15";
+ };
+ };
+ };
+
+ imp = {
+ environment.systemPackages = [ pkgs.tinc_graphs];
+ systemd.timers.tinc_graphs = {
+ description = "Build Tinc Graphs via via timer";
+
+ timerConfig = cfg.timerConfig;
+ };
+ systemd.services.tinc_graphs = {
+ description = "Build Tinc Graphs";
+ wantedBy = [ "multi-user.target" ];
+ after = [ "network.target" ];
+ environment = {
+ EXTERNAL_FOLDER = external_dir;
+ INTERNAL_FOLDER = internal_dir;
+ GEODB = cfg.geodbPath;
+ };
+
+ restartIfChanged = true;
+
+ serviceConfig = {
+ Type = "simple";
+ ExecStartPre = pkgs.writeScript "tinc_graphs-init" ''
+ #!/bin/sh
+ mkdir -p "${external_dir}" "${internal_dir}"
+ '';
+ ExecStart = "${pkgs.tinc_graphs}/bin/all-the-graphs";
+ User = "root"; # tinc cannot be queried as user,
+ # seems to be a tinc-pre issue
+ privateTmp = true;
+ };
+ };
+
+ users.extraUsers.tinc_graphs = {
+ uid = 3925439960; #genid tinc_graphs
+ home = "/var/cache/tinc_graphs";
+ createHome = true;
+ };
+
+ krebs.nginx.servers = mkIf cfg.krebsNginx.enable {
+ tinc_graphs_complete = {
+ server-names = cfg.krebsNginx.hostnames_complete;
+ locations = [
+ (nameValuePair "/" ''
+ root ${internal_dir};
+ '')
+ ];
+ };
+ tinc_graphs_anonymous = {
+ server-names = cfg.krebsNginx.hostnames_anonymous;
+ #server-names = [ "dick" ];
+ locations = [
+ (nameValuePair "/" ''
+ root ${external_dir};
+ '')
+ ];
+ };
+ };
+ };
+
+in
+out