2014-04-14 16:26:48 +02:00
|
|
|
{ config, lib, pkgs, ... }:
|
2013-03-01 21:12:38 +01:00
|
|
|
|
2014-04-14 16:26:48 +02:00
|
|
|
with lib;
|
2013-03-01 21:12:38 +01:00
|
|
|
|
|
|
|
let
|
|
|
|
cfg = config.services.transmission;
|
2014-04-15 13:50:39 +02:00
|
|
|
apparmor = config.security.apparmor.enable;
|
|
|
|
|
2017-09-09 22:19:35 +02:00
|
|
|
homeDir = cfg.home;
|
2014-04-15 13:50:39 +02:00
|
|
|
downloadDir = "${homeDir}/Downloads";
|
|
|
|
incompleteDir = "${homeDir}/.incomplete";
|
2015-09-30 20:17:17 +02:00
|
|
|
|
2013-03-01 21:12:38 +01:00
|
|
|
settingsDir = "${homeDir}/.config/transmission-daemon";
|
2015-02-23 18:43:10 +01:00
|
|
|
settingsFile = pkgs.writeText "settings.json" (builtins.toJSON fullSettings);
|
2013-03-01 21:12:38 +01:00
|
|
|
|
|
|
|
# Strings must be quoted, ints and bools must not (for settings.json).
|
|
|
|
toOption = x:
|
2017-04-11 18:08:51 +02:00
|
|
|
if isBool x then boolToString x
|
2013-11-12 13:48:19 +01:00
|
|
|
else if isInt x then toString x
|
2015-02-23 18:43:10 +01:00
|
|
|
else toString ''"${x}"'';
|
2013-03-01 21:12:38 +01:00
|
|
|
|
2014-04-15 13:50:39 +02:00
|
|
|
# for users in group "transmission" to have access to torrents
|
2016-03-02 19:26:48 +01:00
|
|
|
fullSettings = { umask = 2; download-dir = downloadDir; incomplete-dir = incompleteDir; } // cfg.settings;
|
2013-03-01 21:12:38 +01:00
|
|
|
in
|
|
|
|
{
|
|
|
|
options = {
|
|
|
|
services.transmission = {
|
|
|
|
enable = mkOption {
|
2015-06-15 18:10:26 +02:00
|
|
|
type = types.bool;
|
2013-03-01 21:12:38 +01:00
|
|
|
default = false;
|
|
|
|
description = ''
|
|
|
|
Whether or not to enable the headless Transmission BitTorrent daemon.
|
|
|
|
|
|
|
|
Transmission daemon can be controlled via the RPC interface using
|
|
|
|
transmission-remote or the WebUI (http://localhost:9091/ by default).
|
|
|
|
|
2015-09-30 20:17:17 +02:00
|
|
|
Torrents are downloaded to ${downloadDir} by default and are
|
2013-03-01 21:12:38 +01:00
|
|
|
accessible to users in the "transmission" group.
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
|
|
|
settings = mkOption {
|
|
|
|
type = types.attrs;
|
|
|
|
default =
|
|
|
|
{
|
2014-04-15 13:50:39 +02:00
|
|
|
download-dir = downloadDir;
|
|
|
|
incomplete-dir = incompleteDir;
|
|
|
|
incomplete-dir-enabled = true;
|
|
|
|
};
|
2013-03-01 21:12:38 +01:00
|
|
|
example =
|
|
|
|
{
|
|
|
|
download-dir = "/srv/torrents/";
|
|
|
|
incomplete-dir = "/srv/torrents/.incomplete/";
|
|
|
|
incomplete-dir-enabled = true;
|
|
|
|
rpc-whitelist = "127.0.0.1,192.168.*.*";
|
2014-04-15 13:50:39 +02:00
|
|
|
};
|
2013-03-01 21:12:38 +01:00
|
|
|
description = ''
|
|
|
|
Attribute set whos fields overwrites fields in settings.json (each
|
|
|
|
time the service starts). String values must be quoted, integer and
|
|
|
|
boolean values must not.
|
|
|
|
|
2014-04-15 13:50:39 +02:00
|
|
|
See https://trac.transmissionbt.com/wiki/EditConfigFiles for
|
2015-02-23 18:43:10 +01:00
|
|
|
documentation.
|
2013-03-01 21:12:38 +01:00
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
2014-04-15 13:50:39 +02:00
|
|
|
port = mkOption {
|
2015-06-15 18:11:32 +02:00
|
|
|
type = types.int;
|
2013-03-01 21:12:38 +01:00
|
|
|
default = 9091;
|
|
|
|
description = "TCP port number to run the RPC/web interface.";
|
|
|
|
};
|
2017-09-09 22:19:35 +02:00
|
|
|
|
|
|
|
home = mkOption {
|
|
|
|
type = types.path;
|
|
|
|
default = "/var/lib/transmission";
|
|
|
|
description = ''
|
|
|
|
The directory where transmission will create files.
|
|
|
|
'';
|
|
|
|
};
|
2013-03-01 21:12:38 +01:00
|
|
|
};
|
|
|
|
};
|
|
|
|
|
|
|
|
config = mkIf cfg.enable {
|
|
|
|
systemd.services.transmission = {
|
2014-04-15 13:50:39 +02:00
|
|
|
description = "Transmission BitTorrent Service";
|
2014-11-04 18:28:54 +01:00
|
|
|
after = [ "local-fs.target" "network.target" ] ++ optional apparmor "apparmor.service";
|
2014-04-15 13:50:39 +02:00
|
|
|
requires = mkIf apparmor [ "apparmor.service" ];
|
2013-03-01 21:12:38 +01:00
|
|
|
wantedBy = [ "multi-user.target" ];
|
2013-05-28 19:48:08 +02:00
|
|
|
|
2013-03-01 21:12:38 +01:00
|
|
|
# 1) Only the "transmission" user and group have access to torrents.
|
|
|
|
# 2) Optionally update/force specific fields into the configuration file.
|
2014-04-15 13:50:39 +02:00
|
|
|
serviceConfig.ExecStartPre = ''
|
2015-09-30 20:17:17 +02:00
|
|
|
${pkgs.stdenv.shell} -c "mkdir -p ${homeDir} ${settingsDir} ${fullSettings.download-dir} ${fullSettings.incomplete-dir} && chmod 770 ${homeDir} ${settingsDir} ${fullSettings.download-dir} ${fullSettings.incomplete-dir} && rm -f ${settingsDir}/settings.json && cp -f ${settingsFile} ${settingsDir}/settings.json"
|
2014-04-15 13:50:39 +02:00
|
|
|
'';
|
|
|
|
serviceConfig.ExecStart = "${pkgs.transmission}/bin/transmission-daemon -f --port ${toString config.services.transmission.port}";
|
2013-05-11 12:15:32 +02:00
|
|
|
serviceConfig.ExecReload = "${pkgs.coreutils}/bin/kill -HUP $MAINPID";
|
2013-03-01 21:12:38 +01:00
|
|
|
serviceConfig.User = "transmission";
|
|
|
|
# NOTE: transmission has an internal umask that also must be set (in settings.json)
|
|
|
|
serviceConfig.UMask = "0002";
|
|
|
|
};
|
|
|
|
|
|
|
|
# It's useful to have transmission in path, e.g. for remote control
|
|
|
|
environment.systemPackages = [ pkgs.transmission ];
|
|
|
|
|
2014-04-15 13:50:39 +02:00
|
|
|
users.extraGroups.transmission.gid = config.ids.gids.transmission;
|
2013-03-01 21:12:38 +01:00
|
|
|
users.extraUsers.transmission = {
|
|
|
|
group = "transmission";
|
2013-08-23 11:33:24 +02:00
|
|
|
uid = config.ids.uids.transmission;
|
2013-03-01 21:12:38 +01:00
|
|
|
description = "Transmission BitTorrent user";
|
|
|
|
home = homeDir;
|
|
|
|
createHome = true;
|
|
|
|
};
|
|
|
|
|
2013-05-28 19:19:15 +02:00
|
|
|
# AppArmor profile
|
2014-04-15 13:50:39 +02:00
|
|
|
security.apparmor.profiles = mkIf apparmor [
|
2013-05-28 19:19:15 +02:00
|
|
|
(pkgs.writeText "apparmor-transmission-daemon" ''
|
|
|
|
#include <tunables/global>
|
|
|
|
|
|
|
|
${pkgs.transmission}/bin/transmission-daemon {
|
|
|
|
#include <abstractions/base>
|
|
|
|
#include <abstractions/nameservice>
|
|
|
|
|
2016-05-21 12:08:51 +02:00
|
|
|
${getLib pkgs.glibc}/lib/*.so mr,
|
|
|
|
${getLib pkgs.libevent}/lib/libevent*.so* mr,
|
|
|
|
${getLib pkgs.curl}/lib/libcurl*.so* mr,
|
|
|
|
${getLib pkgs.openssl}/lib/libssl*.so* mr,
|
|
|
|
${getLib pkgs.openssl}/lib/libcrypto*.so* mr,
|
|
|
|
${getLib pkgs.zlib}/lib/libz*.so* mr,
|
|
|
|
${getLib pkgs.libssh2}/lib/libssh2*.so* mr,
|
|
|
|
${getLib pkgs.systemd}/lib/libsystemd*.so* mr,
|
|
|
|
${getLib pkgs.xz}/lib/liblzma*.so* mr,
|
|
|
|
${getLib pkgs.libgcrypt}/lib/libgcrypt*.so* mr,
|
|
|
|
${getLib pkgs.libgpgerror}/lib/libgpg-error*.so* mr,
|
|
|
|
${getLib pkgs.nghttp2}/lib/libnghttp2*.so* mr,
|
|
|
|
${getLib pkgs.c-ares}/lib/libcares*.so* mr,
|
|
|
|
${getLib pkgs.libcap}/lib/libcap*.so* mr,
|
|
|
|
${getLib pkgs.attr}/lib/libattr*.so* mr,
|
|
|
|
${getLib pkgs.lz4}/lib/liblz4*.so* mr,
|
2013-05-28 19:19:15 +02:00
|
|
|
|
|
|
|
@{PROC}/sys/kernel/random/uuid r,
|
|
|
|
@{PROC}/sys/vm/overcommit_memory r,
|
|
|
|
|
2016-08-23 03:36:49 +02:00
|
|
|
${pkgs.openssl.out}/etc/** r,
|
2013-05-28 19:19:15 +02:00
|
|
|
${pkgs.transmission}/share/transmission/** r,
|
|
|
|
|
|
|
|
owner ${settingsDir}/** rw,
|
|
|
|
|
2014-04-15 13:50:39 +02:00
|
|
|
${fullSettings.download-dir}/** rw,
|
|
|
|
${optionalString fullSettings.incomplete-dir-enabled ''
|
|
|
|
${fullSettings.incomplete-dir}/** rw,
|
2013-05-28 19:19:15 +02:00
|
|
|
''}
|
|
|
|
}
|
|
|
|
'')
|
|
|
|
];
|
2013-03-01 21:12:38 +01:00
|
|
|
};
|
|
|
|
|
|
|
|
}
|