diff options
author | Christian Albrecht <christian.albrecht@mayflower.de> | 2017-08-22 12:27:00 +0200 |
---|---|---|
committer | Robin Gloster <mail@glob.in> | 2017-08-22 12:27:00 +0200 |
commit | 964799e556222b5115ca61823fd671488f8e718d (patch) | |
tree | d8906a18ae12aa32f9ed826cf7d8a9e35540a84f /nixos/modules/services/web-apps | |
parent | d837d88f3b68c0a85de66e4f16276db8203385b3 (diff) | |
download | nixlib-964799e556222b5115ca61823fd671488f8e718d.tar nixlib-964799e556222b5115ca61823fd671488f8e718d.tar.gz nixlib-964799e556222b5115ca61823fd671488f8e718d.tar.bz2 nixlib-964799e556222b5115ca61823fd671488f8e718d.tar.lz nixlib-964799e556222b5115ca61823fd671488f8e718d.tar.xz nixlib-964799e556222b5115ca61823fd671488f8e718d.tar.zst nixlib-964799e556222b5115ca61823fd671488f8e718d.zip |
sks and pgpkeyserver-lite modules: init (#27515)
* modules sks and pgpkeyserver-lite: runs the sks keyserver with optional nginx proxy for webgui. * Add calbrecht to maintainers * module sks: fix default hkpAddress value * module pgpkeyserver-lite: make hkpAddress a string type option and use (builtins.head services.sks.hkpAddress) as default value * module sks: remove leftover service dependencies
Diffstat (limited to 'nixos/modules/services/web-apps')
-rw-r--r-- | nixos/modules/services/web-apps/pgpkeyserver-lite.nix | 75 |
1 files changed, 75 insertions, 0 deletions
diff --git a/nixos/modules/services/web-apps/pgpkeyserver-lite.nix b/nixos/modules/services/web-apps/pgpkeyserver-lite.nix new file mode 100644 index 000000000000..93f69bd12651 --- /dev/null +++ b/nixos/modules/services/web-apps/pgpkeyserver-lite.nix @@ -0,0 +1,75 @@ +{ config, lib, pkgs, ... }: + +with lib; + +let + + cfg = config.services.pgpkeyserver-lite; + sksCfg = config.services.sks; + + webPkg = cfg.package; + +in + +{ + + options = { + + services.pgpkeyserver-lite = { + + enable = mkEnableOption "pgpkeyserver-lite on a nginx vHost proxying to a gpg keyserver"; + + package = mkOption { + default = pkgs.pgpkeyserver-lite; + defaultText = "pkgs.pgpkeyserver-lite"; + type = types.package; + description = " + Which webgui derivation to use. + "; + }; + + hostname = mkOption { + type = types.str; + description = " + Which hostname to set the vHost to that is proxying to sks. + "; + }; + + hkpAddress = mkOption { + default = builtins.head sksCfg.hkpAddress; + type = types.str; + description = " + Wich ip address the sks-keyserver is listening on. + "; + }; + + hkpPort = mkOption { + default = sksCfg.hkpPort; + type = types.int; + description = " + Which port the sks-keyserver is listening on. + "; + }; + }; + }; + + config = mkIf cfg.enable { + + services.nginx.enable = true; + + services.nginx.virtualHosts = let + hkpPort = builtins.toString cfg.hkpPort; + in { + "${cfg.hostname}" = { + root = webPkg; + locations = { + "/pks".extraConfig = '' + proxy_pass http://${cfg.hkpAddress}:${hkpPort}; + proxy_pass_header Server; + add_header Via "1.1 ${cfg.hostname}"; + ''; + }; + }; + }; + }; +} |