mirror of
https://codeberg.org/demostf/backup.git
synced 2026-06-03 09:54:18 +02:00
flake reorg
This commit is contained in:
parent
9b0e4aff85
commit
a603ec8cfa
9 changed files with 666 additions and 451 deletions
804
Cargo.lock
generated
804
Cargo.lock
generated
File diff suppressed because it is too large
Load diff
16
Cargo.toml
16
Cargo.toml
|
|
@ -1,18 +1,18 @@
|
|||
[package]
|
||||
name = "backup"
|
||||
name = "demostf-backup"
|
||||
version = "0.1.0"
|
||||
authors = ["Robin Appelman <robin@icewind.nl>"]
|
||||
edition = "2018"
|
||||
|
||||
[dependencies]
|
||||
thiserror = "1.0.30"
|
||||
dotenv = "0.15.0"
|
||||
thiserror = "1.0.56"
|
||||
dotenvy = "0.15.7"
|
||||
main_error = "0.1.2"
|
||||
demostf-client = { version = "0.4.0", default-features = false, features = ["rustls-tls"] }
|
||||
tokio = { version = "1.17.0", features = ["rt-multi-thread", "macros"] }
|
||||
tracing = "0.1.33"
|
||||
tracing-subscriber = "0.3.11"
|
||||
futures-util = "0.3.21"
|
||||
demostf-client = { version = "0.4.3", default-features = false, features = ["rustls-tls"] }
|
||||
tokio = { version = "1.35.1", features = ["rt-multi-thread", "macros"] }
|
||||
tracing = "0.1.40"
|
||||
tracing-subscriber = "0.3.18"
|
||||
futures-util = "0.3.30"
|
||||
md5 = "0.7.0"
|
||||
|
||||
[profile.release]
|
||||
|
|
|
|||
12
docker.nix
Normal file
12
docker.nix
Normal file
|
|
@ -0,0 +1,12 @@
|
|||
{
|
||||
dockerTools,
|
||||
demostf-backup,
|
||||
}:
|
||||
dockerTools.buildImage {
|
||||
name = "demostf/backup";
|
||||
tag = "latest";
|
||||
copyToRoot = [demostf-backup];
|
||||
config = {
|
||||
Cmd = ["${demostf-backup}/bin/demostf-backup"];
|
||||
};
|
||||
}
|
||||
57
flake.lock
generated
57
flake.lock
generated
|
|
@ -1,61 +1,58 @@
|
|||
{
|
||||
"nodes": {
|
||||
"flake-utils": {
|
||||
"locked": {
|
||||
"lastModified": 1656065134,
|
||||
"narHash": "sha256-oc6E6ByIw3oJaIyc67maaFcnjYOz1mMcOtHxbEf9NwQ=",
|
||||
"owner": "numtide",
|
||||
"repo": "flake-utils",
|
||||
"rev": "bee6a7250dd1b01844a2de7e02e4df7d8a0a206c",
|
||||
"type": "github"
|
||||
},
|
||||
"original": {
|
||||
"owner": "numtide",
|
||||
"repo": "flake-utils",
|
||||
"type": "github"
|
||||
}
|
||||
},
|
||||
"naersk": {
|
||||
"inputs": {
|
||||
"nixpkgs": [
|
||||
"nixpkgs"
|
||||
]
|
||||
"systems": "systems"
|
||||
},
|
||||
"locked": {
|
||||
"lastModified": 1655042882,
|
||||
"narHash": "sha256-9BX8Fuez5YJlN7cdPO63InoyBy7dm3VlJkkmTt6fS1A=",
|
||||
"owner": "nix-community",
|
||||
"repo": "naersk",
|
||||
"rev": "cddffb5aa211f50c4b8750adbec0bbbdfb26bb9f",
|
||||
"lastModified": 1701680307,
|
||||
"narHash": "sha256-kAuep2h5ajznlPMD9rnQyffWG8EM/C73lejGofXvdM8=",
|
||||
"owner": "numtide",
|
||||
"repo": "flake-utils",
|
||||
"rev": "4022d587cbbfd70fe950c1e2083a02621806a725",
|
||||
"type": "github"
|
||||
},
|
||||
"original": {
|
||||
"owner": "nix-community",
|
||||
"repo": "naersk",
|
||||
"owner": "numtide",
|
||||
"repo": "flake-utils",
|
||||
"type": "github"
|
||||
}
|
||||
},
|
||||
"nixpkgs": {
|
||||
"locked": {
|
||||
"lastModified": 1685636445,
|
||||
"narHash": "sha256-Cw7qu994bLHRJNy8gsvcGSYHKFFwaGYiI35jcEpO4HI=",
|
||||
"lastModified": 1705183652,
|
||||
"narHash": "sha256-rnfkyUH0x72oHfiSDhuCHDHg3gFgF+lF8zkkg5Zihsw=",
|
||||
"owner": "NixOS",
|
||||
"repo": "nixpkgs",
|
||||
"rev": "08f66773ab4ad3ad1b63c54133397b2c8b0e69b8",
|
||||
"rev": "428544ae95eec077c7f823b422afae5f174dee4b",
|
||||
"type": "github"
|
||||
},
|
||||
"original": {
|
||||
"id": "nixpkgs",
|
||||
"ref": "release-23.05",
|
||||
"ref": "nixos-23.11",
|
||||
"type": "indirect"
|
||||
}
|
||||
},
|
||||
"root": {
|
||||
"inputs": {
|
||||
"flake-utils": "flake-utils",
|
||||
"naersk": "naersk",
|
||||
"nixpkgs": "nixpkgs"
|
||||
}
|
||||
},
|
||||
"systems": {
|
||||
"locked": {
|
||||
"lastModified": 1681028828,
|
||||
"narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
|
||||
"owner": "nix-systems",
|
||||
"repo": "default",
|
||||
"rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
|
||||
"type": "github"
|
||||
},
|
||||
"original": {
|
||||
"owner": "nix-systems",
|
||||
"repo": "default",
|
||||
"type": "github"
|
||||
}
|
||||
}
|
||||
},
|
||||
"root": "root",
|
||||
|
|
|
|||
144
flake.nix
144
flake.nix
|
|
@ -1,140 +1,46 @@
|
|||
{
|
||||
inputs = {
|
||||
nixpkgs.url = "nixpkgs/release-23.05";
|
||||
nixpkgs.url = "nixpkgs/nixos-23.11";
|
||||
flake-utils.url = "github:numtide/flake-utils";
|
||||
naersk.url = "github:nix-community/naersk";
|
||||
naersk.inputs.nixpkgs.follows = "nixpkgs";
|
||||
};
|
||||
|
||||
outputs = { self, nixpkgs, flake-utils, naersk }:
|
||||
outputs = {
|
||||
self,
|
||||
nixpkgs,
|
||||
flake-utils,
|
||||
}:
|
||||
flake-utils.lib.eachDefaultSystem (
|
||||
system: let
|
||||
pkgs = nixpkgs.legacyPackages."${system}";
|
||||
naersk-lib = naersk.lib."${system}";
|
||||
lib = pkgs.lib;
|
||||
in
|
||||
rec {
|
||||
# `nix build`
|
||||
overlays = [
|
||||
(import ./overlay.nix)
|
||||
];
|
||||
pkgs = (import nixpkgs) {
|
||||
inherit system overlays;
|
||||
};
|
||||
in rec {
|
||||
packages = rec {
|
||||
demobackup = naersk-lib.buildPackage {
|
||||
pname = "demobackup";
|
||||
root = lib.sources.sourceByRegex (lib.cleanSource ./.) ["Cargo.*" "src" "src/.*"];
|
||||
demostf-backup = pkgs.demostf-backup;
|
||||
dockerImage = pkgs.callPackage ./docker.nix {};
|
||||
default = demostf-backup;
|
||||
};
|
||||
dockerImage = pkgs.dockerTools.buildImage {
|
||||
name = "demostf/backup";
|
||||
tag = "latest";
|
||||
copyToRoot = [demobackup];
|
||||
config = {
|
||||
Cmd = [ "${demobackup}/bin/backup"];
|
||||
};
|
||||
};
|
||||
};
|
||||
defaultPackage = packages.demobackup;
|
||||
|
||||
# `nix run`
|
||||
apps.hello-world = flake-utils.lib.mkApp {
|
||||
drv = packages.demobackup;
|
||||
};
|
||||
defaultApp = apps.demobackup;
|
||||
|
||||
# `nix develop`
|
||||
devShells.default = pkgs.mkShell {
|
||||
nativeBuildInputs = with pkgs; [ rustc cargo rustfmt clippy ];
|
||||
nativeBuildInputs = with pkgs; [rustc cargo rustfmt clippy cargo-edit cargo-audit bacon];
|
||||
};
|
||||
}
|
||||
)
|
||||
// {
|
||||
nixosModule = {
|
||||
overlays.default = import ./overlay.nix;
|
||||
nixosModules.default = {
|
||||
pkgs,
|
||||
config,
|
||||
lib,
|
||||
pkgs,
|
||||
...
|
||||
}:
|
||||
with lib; let
|
||||
cfg = config.services.demosbackup;
|
||||
in {
|
||||
options.services.demosbackup = {
|
||||
enable = mkEnableOption "Enables the demos backup service";
|
||||
|
||||
target = mkOption {
|
||||
type = types.str;
|
||||
description = "target directory";
|
||||
};
|
||||
api = mkOption {
|
||||
type = types.str;
|
||||
default = "https://api.demos.tf";
|
||||
description = "demos.tf api url";
|
||||
};
|
||||
stateFile = mkOption {
|
||||
type = types.str;
|
||||
description = "state file path";
|
||||
};
|
||||
logLevel = mkOption {
|
||||
type = types.str;
|
||||
default = "INFO";
|
||||
description = "log level";
|
||||
};
|
||||
user = mkOption {
|
||||
type = types.str;
|
||||
description = "user that owns the demos";
|
||||
};
|
||||
interval = mkOption {
|
||||
type = types.str;
|
||||
default = "*:0/10";
|
||||
description = "Interval to run the service";
|
||||
};
|
||||
};
|
||||
|
||||
config = mkIf cfg.enable {
|
||||
systemd.services.demosbackup = let
|
||||
pkg = self.defaultPackage.${pkgs.system};
|
||||
in {
|
||||
script = "${pkg}/bin/backup";
|
||||
description = "Backup demos for demos.tf";
|
||||
|
||||
environment = {
|
||||
STORAGE_ROOT = cfg.target;
|
||||
SOURCE = cfg.api;
|
||||
STATE_FILE = cfg.stateFile;
|
||||
RUST_LOG = cfg.logLevel;
|
||||
};
|
||||
|
||||
serviceConfig = {
|
||||
ReadWritePaths = [cfg.target cfg.stateFile];
|
||||
Restart = "on-failure";
|
||||
User = cfg.user;
|
||||
PrivateTmp = true;
|
||||
ProtectSystem = "strict";
|
||||
ProtectHome = true;
|
||||
NoNewPrivileges = true;
|
||||
PrivateDevices = true;
|
||||
ProtectClock = true;
|
||||
CapabilityBoundingSet = true;
|
||||
ProtectKernelLogs = true;
|
||||
ProtectControlGroups = true;
|
||||
SystemCallArchitectures = "native";
|
||||
ProtectKernelModules = true;
|
||||
RestrictNamespaces = true;
|
||||
MemoryDenyWriteExecute = true;
|
||||
ProtectHostname = true;
|
||||
LockPersonality = true;
|
||||
ProtectKernelTunables = true;
|
||||
RestrictAddressFamilies = "AF_INET AF_INET6";
|
||||
RestrictRealtime = true;
|
||||
ProtectProc = "noaccess";
|
||||
SystemCallFilter = ["@system-service" "~@resources" "~@privileged"];
|
||||
IPAddressDeny = "localhost link-local multicast";
|
||||
};
|
||||
};
|
||||
|
||||
systemd.timers.demosbackup = {
|
||||
enable = true;
|
||||
description = "Backup demos for demos.tf";
|
||||
wantedBy = ["multi-user.target"];
|
||||
timerConfig = {
|
||||
OnCalendar = "*:0/10";
|
||||
};
|
||||
};
|
||||
}: {
|
||||
imports = [./module.nix];
|
||||
config = lib.mkIf config.services.demostf-backup.enable {
|
||||
nixpkgs.overlays = [self.overlays.default];
|
||||
services.demostf-backup.package = lib.mkDefault pkgs.demostf-backup;
|
||||
};
|
||||
};
|
||||
};
|
||||
|
|
|
|||
97
module.nix
Normal file
97
module.nix
Normal file
|
|
@ -0,0 +1,97 @@
|
|||
{
|
||||
config,
|
||||
lib,
|
||||
pkgs,
|
||||
...
|
||||
}:
|
||||
with lib; let
|
||||
cfg = config.services.demostf-backup;
|
||||
in {
|
||||
options.services.demostf-backup = {
|
||||
enable = mkEnableOption "Enables the demos backup service";
|
||||
|
||||
target = mkOption {
|
||||
type = types.str;
|
||||
description = "target directory";
|
||||
};
|
||||
api = mkOption {
|
||||
type = types.str;
|
||||
default = "https://api.demos.tf";
|
||||
description = "demos.tf api url";
|
||||
};
|
||||
stateFile = mkOption {
|
||||
type = types.str;
|
||||
description = "state file path";
|
||||
};
|
||||
logLevel = mkOption {
|
||||
type = types.str;
|
||||
default = "INFO";
|
||||
description = "log level";
|
||||
};
|
||||
user = mkOption {
|
||||
type = types.str;
|
||||
description = "user that owns the demos";
|
||||
};
|
||||
interval = mkOption {
|
||||
type = types.str;
|
||||
default = "*:0/10";
|
||||
description = "Interval to run the service";
|
||||
};
|
||||
|
||||
package = mkOption {
|
||||
type = types.package;
|
||||
defaultText = literalExpression "pkgs.demostf-backup";
|
||||
description = "package to use";
|
||||
};
|
||||
};
|
||||
|
||||
config = mkIf cfg.enable {
|
||||
systemd.services.demostf-backup = {
|
||||
description = "Backup demos for demos.tf";
|
||||
|
||||
environment = {
|
||||
STORAGE_ROOT = cfg.target;
|
||||
SOURCE = cfg.api;
|
||||
STATE_FILE = cfg.stateFile;
|
||||
RUST_LOG = cfg.logLevel;
|
||||
};
|
||||
|
||||
serviceConfig = {
|
||||
ExecStart = "${cfg.package}/bin/demostf-backup";
|
||||
ReadWritePaths = [cfg.target cfg.stateFile];
|
||||
Restart = "on-failure";
|
||||
User = cfg.user;
|
||||
PrivateTmp = true;
|
||||
ProtectSystem = "strict";
|
||||
ProtectHome = true;
|
||||
NoNewPrivileges = true;
|
||||
PrivateDevices = true;
|
||||
ProtectClock = true;
|
||||
CapabilityBoundingSet = true;
|
||||
ProtectKernelLogs = true;
|
||||
ProtectControlGroups = true;
|
||||
SystemCallArchitectures = "native";
|
||||
ProtectKernelModules = true;
|
||||
RestrictNamespaces = true;
|
||||
MemoryDenyWriteExecute = true;
|
||||
ProtectHostname = true;
|
||||
LockPersonality = true;
|
||||
ProtectKernelTunables = true;
|
||||
RestrictAddressFamilies = "AF_INET AF_INET6";
|
||||
RestrictRealtime = true;
|
||||
ProtectProc = "noaccess";
|
||||
SystemCallFilter = ["@system-service" "~@resources" "~@privileged"];
|
||||
IPAddressDeny = "localhost link-local multicast";
|
||||
};
|
||||
};
|
||||
|
||||
systemd.timers.demostf-backup = {
|
||||
enable = true;
|
||||
description = "Backup demos for demos.tf";
|
||||
wantedBy = ["multi-user.target"];
|
||||
timerConfig = {
|
||||
OnCalendar = "*:0/10";
|
||||
};
|
||||
};
|
||||
};
|
||||
}
|
||||
3
overlay.nix
Normal file
3
overlay.nix
Normal file
|
|
@ -0,0 +1,3 @@
|
|||
final: prev: {
|
||||
demostf-backup = final.callPackage ./package.nix {};
|
||||
}
|
||||
18
package.nix
Normal file
18
package.nix
Normal file
|
|
@ -0,0 +1,18 @@
|
|||
{
|
||||
stdenv,
|
||||
rustPlatform,
|
||||
lib,
|
||||
}: let
|
||||
inherit (lib.sources) sourceByRegex;
|
||||
src = sourceByRegex ./. ["Cargo.*" "(src)(/.*)?"];
|
||||
in
|
||||
rustPlatform.buildRustPackage rec {
|
||||
pname = "demostf-backup";
|
||||
version = "0.1.0";
|
||||
|
||||
inherit src;
|
||||
|
||||
cargoLock = {
|
||||
lockFile = ./Cargo.lock;
|
||||
};
|
||||
}
|
||||
|
|
@ -26,7 +26,7 @@ pub enum Error {
|
|||
async fn main() -> Result<(), MainError> {
|
||||
tracing_subscriber::fmt::init();
|
||||
|
||||
let mut args: HashMap<_, _> = dotenv::vars().collect();
|
||||
let mut args: HashMap<_, _> = dotenvy::vars().collect();
|
||||
let store = Store::new(args.get("STORAGE_ROOT").expect("no STORAGE_ROOT set"));
|
||||
let state_path = PathBuf::from(args.remove("STATE_FILE").expect("no STATE_FILE set"));
|
||||
let backup = Backup::new(store);
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue