JakeHillion/nixos
1
0
Fork 0
Code Issues 10 Pull Requests 5 Actions Packages Projects Releases Wiki Activity

WIP: inventree: deploy on boron #307

Draft
JakeHillion wants to merge 1 commits from inventree into main
pull from: inventree
merge into: JakeHillion:main
Conversation 1 Commits 1 Files Changed 6 +157 -4
6 changed files with 157 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
modules/chia.nix
View File

@ -34,9 +34,7 @@ in
config = lib.mkIf cfg.enable {
environment.systemPackages = [ ctl ];
users.groups.chia = {
gid = config.ids.gids.chia;
};
users.groups.chia.gid = config.ids.gids.chia;
users.users.chia = {
home = cfg.path;
createHome = true;

2
modules/ids.nix
View File

@ -10,6 +10,7 @@
node-exporter = 188;
step-ca = 198;
isponsorblocktv = 199;
inventree = 200;
## Consistent People
jake = 1000;
@ -23,6 +24,7 @@
node-exporter = 188;
step-ca = 198;
isponsorblocktv = 199;
inventree = 200;
## Consistent Groups
mediaaccess = 1200;

1
modules/locations.nix
View File

@ -23,6 +23,7 @@ in
downloads = "phoenix.st.ts.hillion.co.uk";
gitea = "boron.cx.ts.hillion.co.uk";
homeassistant = "stinger.pop.ts.hillion.co.uk";
inventree = "boron.cx.ts.hillion.co.uk";
mastodon = "";
matrix = "boron.cx.ts.hillion.co.uk";
prometheus = "boron.cx.ts.hillion.co.uk";

3
modules/services/authoritative_dns.nix
View File

@ -33,8 +33,9 @@ in
86400 NS ns1.hillion.co.uk.
ca 21600 CNAME sodium.pop.ts.hillion.co.uk.
restic 21600 CNAME ${config.custom.locations.locations.services.restic}.
inventree 21600 CNAME ${config.custom.locations.locations.services.inventree}.
prometheus 21600 CNAME ${config.custom.locations.locations.services.prometheus}.
restic 21600 CNAME ${config.custom.locations.locations.services.restic}.
deluge.downloads 21600 CNAME ${config.custom.locations.locations.services.downloads}.
prowlarr.downloads 21600 CNAME ${config.custom.locations.locations.services.downloads}.

1
modules/services/default.nix
View File

@ -6,6 +6,7 @@
./downloads.nix
./gitea/default.nix
./homeassistant.nix
./inventree.nix
./isponsorblocktv.nix
./mastodon/default.nix
./matrix.nix

150
modules/services/inventree.nix Normal file
View File

@ -0,0 +1,150 @@
{ config, lib, pkgs, ... }:
let
cfg = config.custom.services.inventree;
version = "0.15.8";
staticFiles = pkgs.fetchzip {
url = "https://github.com/inventree/InvenTree/releases/download/${version}/frontend-build.zip";
stripRoot = false;
hash = "sha256-wM0/06eLAY6faCZiHslPnQi+WOlOo3AuvGqV3rcNbso=";
};
in
{
options.custom.services.inventree = {
enable = lib.mkEnableOption "inventree";
path = lib.mkOption {
type = lib.types.str;
default = "/var/lib/inventree";
};
domain = lib.mkOption {
type = lib.types.str;
default = "inventree.ts.hillion.co.uk";
};
hostPort = lib.mkOption {
type = lib.types.port;
default = 4864;
};
};
config = lib.mkIf cfg.enable {
users.groups.inventree.gid = config.ids.gids.inventree;
users.users.inventree = {
home = cfg.path;
createHome = true;
homeMode = "0750";
isSystemUser = true;
group = "inventree";
uid = config.ids.uids.inventree;
};
users.users.caddy.extraGroups = [ "inventree" ];
services.postgresql = {
enable = true;
enableTCPIP = true;
ensureDatabases = [ "inventree" ];
ensureUsers = [{
name = "inventree";
ensureDBOwnership = true;
ensureClauses.login = true;
}];
authentication = "hostnossl inventree inventree 0.0.0.0 0.0.0.0 scram-sha-256";
};
systemd.tmpfiles.rules = [ "C ${cfg.path}/static 0755 inventree inventree - ${staticFiles}" ];
services.caddy = {
enable = true;
virtualHosts.${cfg.domain}.extraConfig = ''
bind ${config.custom.dns.tailscale.ipv4} ${config.custom.dns.tailscale.ipv6}
tls {
ca https://ca.ts.hillion.co.uk:8443/acme/acme/directory
}
encode zstd gzip
request_body {
max_size 100MB
}
handle_path /static/* {
header Allow GET,HEAD,OPTIONS
header Access-Control-Allow-Origin *
header Access-Control-Allow-Methods GET,HEAD,OPTIONS
header Access-Control-Allow-Headers Authorization,Content-Type,User-Agent
@cors_preflight{static} method OPTIONS
handle @cors_preflight{static} {
respond "" 204
}
root * ${cfg.path}/static
file_server
}
handle_path /media/* {
header Allow GET,HEAD,OPTIONS
header Access-Control-Allow-Origin *
header Access-Control-Allow-Methods GET,HEAD,OPTIONS
header Access-Control-Allow-Headers Authorization,Content-Type,User-Agent
@cors_preflight{media} method OPTIONS
handle @cors_preflight{media} {
respond "" 204
}
root * ${cfg.path}/media
file_server
header Content-Disposition attachment
forward_auth http://localhost:${toString cfg.hostPort} {
uri /auth/
}
}
reverse_proxy http://localhost:${toString cfg.hostPort}
'';
};
virtualisation.oci-containers.containers.inventree = {
image = "inventree/inventree:${version}";
ports = [ "${toString cfg.hostPort}:8000" ];
extraOptions = [
"--uidmap=0:${toString config.users.users.inventree.uid}:1"
"--gidmap=0:${toString config.users.groups.inventree.gid}:1"
];
volumes = [ "${cfg.path}:/home/inventree/data" ];
environment = {
INVENTREE_SITE_URL = "https://${cfg.domain}";
INVENTREE_DEBUG = "False";
INVENTREE_LOG_LEVEL = "WARNING";
# Database setup
INVENTREE_DB_ENGINE = "postgresql";
INVENTREE_DB_NAME = "inventree";
INVENTREE_DB_HOST = "10.88.0.1";
INVENTREE_DB_PORT = "5432";
INVENTREE_DB_USER = "inventree";
INVENTREE_DB_PASSWORD = "inventree";
# Web server
INVENTREE_GUNICORN_TIMEOUT = "90";
# Migrations
INVENTREE_AUTO_UPDATE = "True";
};
};
};
}