29c5178bdf
list of user accounts that the job needs to run. For instance, the
SSH daemon job says:
{ name = "sshd";
uid = (import ../system/ids.nix).uids.sshd;
description = "SSH privilege separation user";
home = "/var/empty";
}
The activation script creates the system users/groups and updates
them as well. So a change in the Nix expression can be realised in
/etc/{group,passwd} by running nixos-rebuild.
svn path=/nixos/trunk/; revision=8846
107 lines
2.8 KiB
Nix
107 lines
2.8 KiB
Nix
{config, pkgs, glibc, pwdutils}:
|
|
|
|
let
|
|
|
|
getCfg = option: config.get ["services" "httpd" option];
|
|
getCfgs = options: config.get (["services" "httpd"] ++ options);
|
|
getCfgSvn = option: config.get ["services" "httpd" "subservices" "subversion" option];
|
|
getCfgsSvn = options: config.get (["services" "httpd" "subservices" "subversion"] ++ options);
|
|
|
|
optional = conf: subService:
|
|
if conf then [subService] else [];
|
|
|
|
|
|
hostName = getCfg "hostName";
|
|
httpPort = getCfg "httpPort";
|
|
httpsPort = getCfg "httpsPort";
|
|
user = getCfg "user";
|
|
group = getCfg "group";
|
|
adminAddr = getCfg "adminAddr";
|
|
logDir = getCfg "logDir";
|
|
stateDir = getCfg "stateDir";
|
|
enableSSL = false;
|
|
|
|
webServer = import ../services/apache-httpd {
|
|
inherit (pkgs) stdenv apacheHttpd coreutils;
|
|
|
|
inherit hostName httpPort httpsPort
|
|
user group adminAddr logDir stateDir;
|
|
|
|
subServices =
|
|
|
|
# The Subversion subservice.
|
|
(optional (getCfgSvn "enable") (
|
|
let dataDir = getCfgSvn "dataDir"; in
|
|
import ../services/subversion ({
|
|
reposDir = dataDir + "/repos";
|
|
dbDir = dataDir + "/db";
|
|
distsDir = dataDir + "/dist";
|
|
backupsDir = dataDir + "/backup";
|
|
tmpDir = dataDir + "/tmp";
|
|
|
|
inherit user group logDir adminAddr;
|
|
|
|
canonicalName =
|
|
if webServer.enableSSL then
|
|
"https://" + hostName + ":" + (toString httpsPort)
|
|
else
|
|
"http://" + hostName + ":" + (toString httpPort);
|
|
|
|
notificationSender = getCfgSvn "notificationSender";
|
|
autoVersioning = getCfgSvn "autoVersioning";
|
|
userCreationDomain = getCfgSvn "userCreationDomain";
|
|
|
|
inherit pkgs;
|
|
} //
|
|
( if getCfgsSvn ["organization" "name"] != null then
|
|
{
|
|
orgName = getCfgsSvn ["organization" "name"];
|
|
orgLogoFile = getCfgsSvn ["organization" "logo"];
|
|
orgUrl = getCfgsSvn ["organization" "url"];
|
|
}
|
|
else
|
|
# use the default from the subversion service
|
|
{}
|
|
)
|
|
)
|
|
)
|
|
)
|
|
++
|
|
|
|
(optional (getCfgs ["extraSubservices" "enable"])
|
|
(map (service : service webServer pkgs)
|
|
(getCfgs ["extraSubservices" "services"])
|
|
)
|
|
)
|
|
;
|
|
};
|
|
|
|
in
|
|
|
|
{
|
|
name = "httpd";
|
|
|
|
users = [
|
|
{ name = user;
|
|
description = "Apache httpd user";
|
|
}
|
|
];
|
|
|
|
job = "
|
|
description \"Apache HTTPD\"
|
|
|
|
start on network-interfaces/started
|
|
stop on network-interfaces/stop
|
|
|
|
start script
|
|
if ! ${glibc}/bin/getent group ${group} > /dev/null; then
|
|
${pwdutils}/sbin/groupadd ${group}
|
|
fi
|
|
|
|
${webServer}/bin/control prepare
|
|
end script
|
|
|
|
respawn ${webServer}/bin/control run
|
|
";
|
|
|
|
}
|