demostf/backup-rs
1
0
Fork 0
mirror of https://codeberg.org/demostf/backup.git synced 2026-06-03 09:54:18 +02:00
Code Issues Projects Releases Packages Wiki Activity

flake reorg

Browse source
This commit is contained in:
Robin Appelman 2024-01-14 18:45:16 +01:00
commit a603ec8cfa
9 changed files with 666 additions and 451 deletions
Download patch file Download diff file Expand all files Collapse all files

156
flake.nix
View file

@ -1,141 +1,47 @@
{
inputs = {
nixpkgs.url = "nixpkgs/release-23.05";
nixpkgs.url = "nixpkgs/nixos-23.11";
flake-utils.url = "github:numtide/flake-utils";
naersk.url = "github:nix-community/naersk";
naersk.inputs.nixpkgs.follows = "nixpkgs";
};
outputs = { self, nixpkgs, flake-utils, naersk }:
outputs = {
self,
nixpkgs,
flake-utils,
}:
flake-utils.lib.eachDefaultSystem (
system: let
pkgs = nixpkgs.legacyPackages."${system}";
naersk-lib = naersk.lib."${system}";
lib = pkgs.lib;
in
rec {
# `nix build`
packages = rec {
demobackup = naersk-lib.buildPackage {
pname = "demobackup";
root = lib.sources.sourceByRegex (lib.cleanSource ./.) ["Cargo.*" "src" "src/.*"];
};
dockerImage = pkgs.dockerTools.buildImage {
name = "demostf/backup";
tag = "latest";
copyToRoot = [demobackup];
config = {
Cmd = [ "${demobackup}/bin/backup"];
};
};
};
defaultPackage = packages.demobackup;
overlays = [
(import ./overlay.nix)
];
pkgs = (import nixpkgs) {
inherit system overlays;
};
in rec {
packages = rec {
demostf-backup = pkgs.demostf-backup;
dockerImage = pkgs.callPackage ./docker.nix {};
default = demostf-backup;
};
# `nix run`
apps.hello-world = flake-utils.lib.mkApp {
drv = packages.demobackup;
};
defaultApp = apps.demobackup;
# `nix develop`
devShells.default = pkgs.mkShell {
nativeBuildInputs = with pkgs; [ rustc cargo rustfmt clippy ];
};
}
devShells.default = pkgs.mkShell {
nativeBuildInputs = with pkgs; [rustc cargo rustfmt clippy cargo-edit cargo-audit bacon];
};
}
)
// {
nixosModule = {
overlays.default = import ./overlay.nix;
nixosModules.default = {
pkgs,
config,
lib,
pkgs,
...
}:
with lib; let
cfg = config.services.demosbackup;
in {
options.services.demosbackup = {
enable = mkEnableOption "Enables the demos backup service";
target = mkOption {
type = types.str;
description = "target directory";
};
api = mkOption {
type = types.str;
default = "https://api.demos.tf";
description = "demos.tf api url";
};
stateFile = mkOption {
type = types.str;
description = "state file path";
};
logLevel = mkOption {
type = types.str;
default = "INFO";
description = "log level";
};
user = mkOption {
type = types.str;
description = "user that owns the demos";
};
interval = mkOption {
type = types.str;
default = "*:0/10";
description = "Interval to run the service";
};
};
config = mkIf cfg.enable {
systemd.services.demosbackup = let
pkg = self.defaultPackage.${pkgs.system};
in {
script = "${pkg}/bin/backup";
description = "Backup demos for demos.tf";
environment = {
STORAGE_ROOT = cfg.target;
SOURCE = cfg.api;
STATE_FILE = cfg.stateFile;
RUST_LOG = cfg.logLevel;
};
serviceConfig = {
ReadWritePaths = [cfg.target cfg.stateFile];
Restart = "on-failure";
User = cfg.user;
PrivateTmp = true;
ProtectSystem = "strict";
ProtectHome = true;
NoNewPrivileges = true;
PrivateDevices = true;
ProtectClock = true;
CapabilityBoundingSet = true;
ProtectKernelLogs = true;
ProtectControlGroups = true;
SystemCallArchitectures = "native";
ProtectKernelModules = true;
RestrictNamespaces = true;
MemoryDenyWriteExecute = true;
ProtectHostname = true;
LockPersonality = true;
ProtectKernelTunables = true;
RestrictAddressFamilies = "AF_INET AF_INET6";
RestrictRealtime = true;
ProtectProc = "noaccess";
SystemCallFilter = ["@system-service" "~@resources" "~@privileged"];
IPAddressDeny = "localhost link-local multicast";
};
};
systemd.timers.demosbackup = {
enable = true;
description = "Backup demos for demos.tf";
wantedBy = ["multi-user.target"];
timerConfig = {
OnCalendar = "*:0/10";
};
};
};
}: {
imports = [./module.nix];
config = lib.mkIf config.services.demostf-backup.enable {
nixpkgs.overlays = [self.overlays.default];
services.demostf-backup.package = lib.mkDefault pkgs.demostf-backup;
};
};
};
}