mirror of
https://codeberg.org/hako/Rosenthal.git
synced 2025-01-22 02:05:25 +00:00
3384f38b2b
* rosenthal/services/child-error.scm (clash-log-rotations) (cloudflare-tunnel-log-rotations): Delete procedure. (clash-service-type,cloudflare-tunnel-service-type)[extensions]: Extend log-rotation-service-type. * rosenthal/services/mail.scm (docker-mailserver-log-rotations): Delete procedure. (docker-mailserver-service-type)[extensions]: Extend log-rotation-service-type. * rosenthal/services/networking.scm (iwd-log-rotations) (tailscale-log-rotations): Delete procedures. (iwd-service-type,tailscale-service-type)[extensions]: Extend log-rotation-service-type. * rosenthal/services/web.scm (jellyfin-log-rotations,misskey-log-rotations) (vaultwarden-log-rotations): Delete procedures. (jellyfin-service-type,misskey-service-type,vaultwarden-service-type)[extensions]: Extend log-rotation-service-type.
299 lines
9.5 KiB
Scheme
299 lines
9.5 KiB
Scheme
;; SPDX-FileCopyrightText: 2024 Hilton Chain <hako@ultrarare.space>
|
||
;;
|
||
;; SPDX-License-Identifier: GPL-3.0-or-later
|
||
|
||
(define-module (rosenthal services web)
|
||
#:use-module (guix gexp)
|
||
#:use-module (guix records)
|
||
#:use-module (gnu packages admin)
|
||
#:use-module (gnu services)
|
||
#:use-module (gnu services admin)
|
||
#:use-module (gnu services configuration)
|
||
#:use-module (gnu services databases)
|
||
#:use-module (gnu services docker)
|
||
#:use-module (gnu system shadow)
|
||
#:use-module (rosenthal utils home-services-utils)
|
||
#:export (jellyfin-configuration
|
||
jellyfin-service-type
|
||
|
||
misskey-configuration
|
||
misskey-service-type
|
||
|
||
vaultwarden-configuration
|
||
vaultwarden-service-type))
|
||
|
||
;;
|
||
;; Jellyfin
|
||
;;
|
||
|
||
|
||
(define-maybe string)
|
||
|
||
(define-configuration jellyfin-configuration
|
||
(cache-directory
|
||
(string "/var/cache/jellyfin")
|
||
"Path to cache directory.")
|
||
(config-directory
|
||
(string "/var/lib/jellyfin")
|
||
"Path to configuration directory.")
|
||
(proxy-url
|
||
maybe-string
|
||
"Proxy URL.")
|
||
(log-file
|
||
(string "/var/log/jellyfin.log")
|
||
"Path to log file.")
|
||
(auto-start?
|
||
(boolean #t)
|
||
"Whether to start automatically.")
|
||
(extra-options
|
||
(list '())
|
||
"List of extra options.")
|
||
(no-serialization))
|
||
|
||
(define %jellyfin-accounts
|
||
(list (user-account
|
||
(name "jellyfin")
|
||
(group "docker")
|
||
(system? #t)
|
||
(home-directory "/var/empty")
|
||
(shell (file-append shadow "/sbin/nologin")))))
|
||
|
||
(define jellyfin-activation
|
||
(match-record-lambda <jellyfin-configuration>
|
||
(cache-directory config-directory)
|
||
#~(let ((user (getpwnam "jellyfin")))
|
||
(for-each
|
||
(lambda (directory)
|
||
(unless (file-exists? directory)
|
||
(mkdir-p directory)
|
||
(chown directory (passwd:uid user) (passwd:gid user))))
|
||
'#$(list cache-directory config-directory)))))
|
||
|
||
(define jellyfin-oci-containers
|
||
(match-record-lambda <jellyfin-configuration>
|
||
(cache-directory config-directory
|
||
proxy-url log-file auto-start? extra-options)
|
||
(list (oci-container-configuration
|
||
(user "jellyfin")
|
||
(group "docker")
|
||
(environment
|
||
(if (maybe-value-set? proxy-url)
|
||
`(("http_proxy" . ,proxy-url)
|
||
("https_proxy" . ,proxy-url))
|
||
'()))
|
||
(image "jellyfin/jellyfin:latest")
|
||
(provision "jellyfin")
|
||
(log-file log-file)
|
||
(auto-start? auto-start?)
|
||
(respawn? #t)
|
||
(network "host")
|
||
(volumes
|
||
`((,cache-directory . "/cache")
|
||
(,config-directory . "/config")))
|
||
(extra-arguments extra-options)))))
|
||
|
||
(define jellyfin-service-type
|
||
(service-type
|
||
(name 'jellyfin)
|
||
(extensions
|
||
(list (service-extension account-service-type
|
||
(const %jellyfin-accounts))
|
||
(service-extension activation-service-type
|
||
jellyfin-activation)
|
||
(service-extension log-rotation-service-type
|
||
(compose list jellyfin-configuration-log-file))
|
||
(service-extension oci-container-service-type
|
||
jellyfin-oci-containers)))
|
||
(default-value (jellyfin-configuration))
|
||
(description "Run Jellyfin, a media system.")))
|
||
|
||
|
||
;;
|
||
;; Misskey
|
||
;;
|
||
|
||
|
||
(define-configuration misskey-configuration
|
||
(image
|
||
(string "misskey/misskey:latest")
|
||
"Misskey docker image to use.")
|
||
(config
|
||
(yaml-config '())
|
||
"Alist of Misskey configuration, to be serialized to YAML format.")
|
||
(data-directory
|
||
(string "/var/lib/misskey")
|
||
"Directory to store @file{files} in.")
|
||
(log-file
|
||
(string "/var/log/misskey.log")
|
||
"Log file to use.")
|
||
(no-serialization))
|
||
|
||
(define %misskey-accounts
|
||
(list (user-account
|
||
(name "misskey")
|
||
(group "docker")
|
||
(system? #t)
|
||
(home-directory "/var/empty")
|
||
(shell (file-append shadow "/sbin/nologin")))))
|
||
|
||
(define %misskey-postgresql-role
|
||
(list (postgresql-role
|
||
(name "misskey")
|
||
(create-database? #t))))
|
||
|
||
(define misskey-activation
|
||
(match-record-lambda <misskey-configuration>
|
||
(data-directory)
|
||
#~(begin
|
||
(use-modules (guix build utils))
|
||
(let ((user (getpwnam "misskey")))
|
||
(unless (file-exists? #$data-directory)
|
||
(mkdir-p #$data-directory)
|
||
(chown #$data-directory (passwd:uid user) (passwd:gid user)))))))
|
||
|
||
(define misskey-oci-containers
|
||
(match-record-lambda <misskey-configuration>
|
||
(image config data-directory log-file )
|
||
(let ((config-file
|
||
(mixed-text-file
|
||
"misskey.yaml"
|
||
#~(string-append #$@(serialize-yaml-config config) "\n"))))
|
||
(list (oci-container-configuration
|
||
(user "misskey")
|
||
(group "docker")
|
||
(image image)
|
||
(provision "misskey")
|
||
(requirement '(postgresql redis))
|
||
(log-file log-file)
|
||
(respawn? #t)
|
||
(network "host")
|
||
(volumes
|
||
`((,(string-append data-directory "/files") . "/misskey/files")
|
||
(,config-file . "/misskey/.config/default.yml"))))))))
|
||
|
||
(define misskey-service-type
|
||
(service-type
|
||
(name 'misskey)
|
||
(extensions
|
||
(list (service-extension account-service-type
|
||
(const %misskey-accounts))
|
||
(service-extension postgresql-role-service-type
|
||
(const %misskey-postgresql-role))
|
||
(service-extension log-rotation-service-type
|
||
(compose list misskey-configuration-log-file))
|
||
(service-extension activation-service-type
|
||
misskey-activation)
|
||
(service-extension oci-container-service-type
|
||
misskey-oci-containers)))
|
||
(default-value (misskey-configuration))
|
||
(description "Run Misskey, an interplanetary microblogging platform.")))
|
||
|
||
|
||
;;
|
||
;; Vaultwarden
|
||
;;
|
||
|
||
|
||
(define-configuration vaultwarden-configuration
|
||
(admin-token
|
||
maybe-string
|
||
"Token for the admin interface, preferably an Argon2 PCH string.")
|
||
(database-url
|
||
(string "postgresql://user:password@host:port/database")
|
||
"Database URL.")
|
||
(port
|
||
(integer 8000)
|
||
"Port to listen on.")
|
||
(data-directory
|
||
(string "/var/lib/vaultwarden")
|
||
"Main data folder.")
|
||
(log-file
|
||
(string "/var/log/vaultwarden.log")
|
||
"Logging to this file.")
|
||
(proxy-url
|
||
maybe-string
|
||
"Proxy URL to use.")
|
||
(extra-options
|
||
(alist '())
|
||
"Extra options.")
|
||
(no-serialization))
|
||
|
||
(define %vaultwarden-accounts
|
||
(list (user-account
|
||
(name "vaultwarden")
|
||
(group "docker")
|
||
(system? #t)
|
||
(home-directory "/var/empty")
|
||
(shell (file-append shadow "/sbin/nologin")))))
|
||
|
||
(define %vaultwarden-postgresql-role
|
||
(list (postgresql-role
|
||
(name "vaultwarden")
|
||
(create-database? #t))))
|
||
|
||
(define vaultwarden-activation
|
||
(match-record-lambda <vaultwarden-configuration>
|
||
(data-directory log-file)
|
||
#~(begin
|
||
(use-modules (guix build utils))
|
||
(let ((user (getpwnam "vaultwarden")))
|
||
(unless (file-exists? #$data-directory)
|
||
(mkdir-p #$data-directory)
|
||
(chown #$data-directory (passwd:uid user) (passwd:gid user)))
|
||
(unless (file-exists? #$log-file)
|
||
(mkdir-p (dirname #$log-file))
|
||
(call-with-output-file #$log-file
|
||
(lambda (port)
|
||
(write-char #\newline port)))
|
||
(chown #$log-file (passwd:uid user) (passwd:gid user)))))))
|
||
|
||
(define vaultwarden-oci-containers
|
||
(match-record-lambda <vaultwarden-configuration>
|
||
(admin-token database-url port data-directory log-file proxy-url extra-options)
|
||
(list (oci-container-configuration
|
||
(user "vaultwarden")
|
||
(group "docker")
|
||
(host-environment
|
||
`(,@(if (maybe-value-set? admin-token)
|
||
`(("ADMIN_TOKEN" . ,admin-token))
|
||
'())
|
||
("DATABASE_URL" . ,database-url)))
|
||
(environment
|
||
`(,@(if (maybe-value-set? proxy-url)
|
||
`(("HTTP_PROXY" . ,proxy-url))
|
||
'())
|
||
("LOG_FILE" . "vaultwarden.log")
|
||
("ROCKET_PORT" . ,(number->string port))
|
||
("USE_SYSLOG" . "True")
|
||
,@extra-options))
|
||
(image "vaultwarden/server:latest-alpine")
|
||
(provision "vaultwarden")
|
||
(requirement '(postgresql))
|
||
(respawn? #t)
|
||
(network "host")
|
||
(volumes
|
||
`((,data-directory . "/data")
|
||
(,log-file . "/vaultwarden.log")))
|
||
(extra-arguments
|
||
`(,@(if (maybe-value-set? admin-token)
|
||
'("--env" "ADMIN_TOKEN")
|
||
'())
|
||
"--env" "DATABASE_URL"))))))
|
||
|
||
(define vaultwarden-service-type
|
||
(service-type
|
||
(name 'vaultwarden)
|
||
(extensions
|
||
(list (service-extension account-service-type
|
||
(const %vaultwarden-accounts))
|
||
(service-extension postgresql-role-service-type
|
||
(const %vaultwarden-postgresql-role))
|
||
(service-extension activation-service-type
|
||
vaultwarden-activation)
|
||
(service-extension log-rotation-service-type
|
||
(compose list vaultwarden-configuration-log-file))
|
||
(service-extension oci-container-service-type
|
||
vaultwarden-oci-containers)))
|
||
(default-value (vaultwarden-configuration))
|
||
(description "Run Vaultwarden, a Bitwarden compatible server.")))
|