Jake Hillion
ac6f285400
All checks were successful
flake / flake (push) Successful in 1m15s
Without this resilio fails on boot on tywin.storage where the paths are on a ZFS array which gets mounted reliably later than the resilio service attempts to start.
68 lines
1.7 KiB
Nix
68 lines
1.7 KiB
Nix
{ pkgs, lib, config, ... }:
|
|
|
|
let
|
|
cfg = config.custom.resilio;
|
|
in
|
|
{
|
|
options.custom.resilio = {
|
|
enable = lib.mkEnableOption "resilio";
|
|
|
|
extraUsers = lib.mkOption {
|
|
type = with lib.types; listOf str;
|
|
default = [ config.custom.user ];
|
|
};
|
|
|
|
folders = lib.mkOption {
|
|
type = with lib.types; uniq (listOf attrs);
|
|
default = [ ];
|
|
};
|
|
};
|
|
|
|
config = lib.mkIf cfg.enable {
|
|
users.users =
|
|
let
|
|
mkUser =
|
|
(user: {
|
|
name = user;
|
|
value = {
|
|
extraGroups = [ "rslsync" ];
|
|
};
|
|
});
|
|
in
|
|
builtins.listToAttrs (builtins.map mkUser cfg.extraUsers);
|
|
|
|
age.secrets =
|
|
let
|
|
mkSecret = (secret: {
|
|
name = secret.name;
|
|
value = {
|
|
file = secret.file;
|
|
owner = "rslsync";
|
|
group = "rslsync";
|
|
};
|
|
});
|
|
in
|
|
builtins.listToAttrs (builtins.map (folder: mkSecret folder.secret) cfg.folders);
|
|
|
|
services.resilio = {
|
|
enable = true;
|
|
sharedFolders =
|
|
let
|
|
mkFolder = name: secret: {
|
|
directory = "${config.services.resilio.directoryRoot}/${name}";
|
|
secretFile = "${config.age.secrets."${secret.name}".path}";
|
|
knownHosts = [ ];
|
|
searchLAN = true;
|
|
useDHT = true;
|
|
useRelayServer = true;
|
|
useSyncTrash = false;
|
|
useTracker = true;
|
|
};
|
|
in
|
|
builtins.map (folder: mkFolder folder.name folder.secret) cfg.folders;
|
|
};
|
|
|
|
systemd.services.resilio.unitConfig.RequiresMountsFor = builtins.map (folder: "${config.services.resilio.directoryRoot}/${folder.name}") cfg.folders;
|
|
};
|
|
}
|