blob: 89a3440acf859f556668ca36f7d648170cb32547 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
|
{ lib, pkgs, config, ... }:
let
inherit (builtins) split;
inherit (lib) flip foldr groupBy head literalExpression mapAttrs
mapAttrs' mapAttrsToList mdDoc mkOption nameValuePair optionalAttrs types;
cfg = config.services.cgit-qyliss;
instancesByVhost = groupBy ({ value, ... }: value.vhost)
(mapAttrsToList nameValuePair cfg.instances);
vhostConfigs = mapAttrs (vhost: instances:
foldr (l: r: l // r) {} (map ({ name, value }: let
unslashedPath = head (split "/+$" value.path);
# We'll be dealing almost exclusively with paths ending in /,
# since otherwise Nginx likes to do simple prefix matching.
path = "${unslashedPath}/";
in {
locations = {
${path} = {
alias = "${value.package}/cgit/";
tryFiles = "$uri @${name}-cgit";
};
"@${name}-cgit" = {
proxyPass = "http://unix:/run/cgiserver/cgit/${name}.sock";
};
} // optionalAttrs (unslashedPath != "") {
${unslashedPath} = {
return = "301 ${path}";
};
};
extraConfig = ''
if ($http_user_agent = "my-tiny-bot") {
return 429;
}
'';
}) instances)
) instancesByVhost;
in
{
options.services.cgit-qyliss = {
instances = mkOption {
type = types.attrsOf (types.submodule {
options = {
vhost = mkOption {
type = types.str;
example = "spectrum-os.org";
description = mdDoc "Nginx vhost for the cgit";
};
path = mkOption {
type = types.strMatching "/(.*[^/])?";
default = "/";
example = "/git";
description = mdDoc ''
Path to be appended to all cgit URLs.
Leading slashes are mandatory; trailing slashes are forbidden.
'';
};
package = mkOption {
type = types.package;
default = pkgs.cgit;
defaultText = literalExpression "pkgs.cgit";
description = mdDoc "cgit package to use";
};
cgiserver = mkOption {
type = types.package;
default = pkgs.cgiserver;
defaultText = literalExpression "pkgs.cgiserver";
description = mdDoc "cgiserver package to use";
};
config = mkOption {
type = types.package;
description = mdDoc ''
Configuration file for cgit. See
<citerefentry><refentrytitle>cgitrc</refentrytitle>
<manvolnum>5</manvolnum></citerefentry>.
'';
};
};
});
default = {};
description = mdDoc "List of cgit instances to run";
};
};
config = {
services.nginx.virtualHosts = vhostConfigs;
systemd.services = flip mapAttrs' cfg.instances (name: instance: {
name = "cgit-${name}";
value = {
environment.CGIT_CONFIG = instance.config;
serviceConfig.DynamicUser = true;
serviceConfig.ExecStart = "${instance.cgiserver}/bin/cgiserver -r ${instance.path}/ ${instance.package}/cgit/cgit.cgi";
};
});
systemd.sockets = flip mapAttrs' cfg.instances (name: instance: {
name = "cgit-${name}";
value = {
wantedBy = [ "sockets.target" ];
socketConfig.ListenStream = "/run/cgiserver/cgit/${name}.sock";
};
});
};
}
|