2017-06-01 15:50:17 +01:00
|
|
|
{ config, lib, pkgs, ... }:
|
|
|
|
|
|
|
|
with lib;
|
|
|
|
|
|
|
|
let
|
|
|
|
cfg = config.services.resilio;
|
|
|
|
|
2017-06-01 21:53:13 +01:00
|
|
|
resilioSync = pkgs.resilio-sync;
|
|
|
|
|
|
|
|
sharedFoldersRecord = map (entry: {
|
|
|
|
secret = entry.secret;
|
|
|
|
dir = entry.directory;
|
|
|
|
|
|
|
|
use_relay_server = entry.useRelayServer;
|
|
|
|
use_tracker = entry.useTracker;
|
|
|
|
use_dht = entry.useDHT;
|
|
|
|
|
|
|
|
search_lan = entry.searchLAN;
|
|
|
|
use_sync_trash = entry.useSyncTrash;
|
2018-01-13 22:44:39 +00:00
|
|
|
known_hosts = entry.knownHosts;
|
2017-06-01 21:53:13 +01:00
|
|
|
}) cfg.sharedFolders;
|
|
|
|
|
|
|
|
configFile = pkgs.writeText "config.json" (builtins.toJSON ({
|
|
|
|
device_name = cfg.deviceName;
|
|
|
|
storage_path = cfg.storagePath;
|
|
|
|
listening_port = cfg.listeningPort;
|
|
|
|
use_gui = false;
|
|
|
|
check_for_updates = cfg.checkForUpdates;
|
|
|
|
use_upnp = cfg.useUpnp;
|
|
|
|
download_limit = cfg.downloadLimit;
|
|
|
|
upload_limit = cfg.uploadLimit;
|
|
|
|
lan_encrypt_data = cfg.encryptLAN;
|
|
|
|
} // optionalAttrs cfg.enableWebUI {
|
|
|
|
webui = { listen = "${cfg.httpListenAddr}:${toString cfg.httpListenPort}"; } //
|
|
|
|
(optionalAttrs (cfg.httpLogin != "") { login = cfg.httpLogin; }) //
|
|
|
|
(optionalAttrs (cfg.httpPass != "") { password = cfg.httpPass; }) //
|
|
|
|
(optionalAttrs (cfg.apiKey != "") { api_key = cfg.apiKey; }) //
|
|
|
|
(optionalAttrs (cfg.directoryRoot != "") { directory_root = cfg.directoryRoot; });
|
|
|
|
} // optionalAttrs (sharedFoldersRecord != []) {
|
|
|
|
shared_folders = sharedFoldersRecord;
|
|
|
|
}));
|
|
|
|
|
2017-06-01 15:50:17 +01:00
|
|
|
in
|
|
|
|
{
|
|
|
|
options = {
|
|
|
|
services.resilio = {
|
|
|
|
enable = mkOption {
|
|
|
|
type = types.bool;
|
|
|
|
default = false;
|
|
|
|
description = ''
|
|
|
|
If enabled, start the Resilio Sync daemon. Once enabled, you can
|
|
|
|
interact with the service through the Web UI, or configure it in your
|
2018-03-11 00:18:34 +00:00
|
|
|
NixOS configuration.
|
2017-06-01 15:50:17 +01:00
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
|
|
|
deviceName = mkOption {
|
|
|
|
type = types.str;
|
|
|
|
example = "Voltron";
|
2017-06-01 21:53:13 +01:00
|
|
|
default = config.networking.hostName;
|
2017-06-01 15:50:17 +01:00
|
|
|
description = ''
|
|
|
|
Name of the Resilio Sync device.
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
|
|
|
listeningPort = mkOption {
|
|
|
|
type = types.int;
|
|
|
|
default = 0;
|
|
|
|
example = 44444;
|
|
|
|
description = ''
|
|
|
|
Listening port. Defaults to 0 which randomizes the port.
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
|
|
|
checkForUpdates = mkOption {
|
|
|
|
type = types.bool;
|
|
|
|
default = true;
|
|
|
|
description = ''
|
|
|
|
Determines whether to check for updates and alert the user
|
|
|
|
about them in the UI.
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
|
|
|
useUpnp = mkOption {
|
|
|
|
type = types.bool;
|
|
|
|
default = true;
|
|
|
|
description = ''
|
|
|
|
Use Universal Plug-n-Play (UPnP)
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
|
|
|
downloadLimit = mkOption {
|
|
|
|
type = types.int;
|
|
|
|
default = 0;
|
|
|
|
example = 1024;
|
|
|
|
description = ''
|
|
|
|
Download speed limit. 0 is unlimited (default).
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
|
|
|
uploadLimit = mkOption {
|
|
|
|
type = types.int;
|
|
|
|
default = 0;
|
|
|
|
example = 1024;
|
|
|
|
description = ''
|
|
|
|
Upload speed limit. 0 is unlimited (default).
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
|
|
|
httpListenAddr = mkOption {
|
|
|
|
type = types.str;
|
|
|
|
default = "0.0.0.0";
|
|
|
|
example = "1.2.3.4";
|
|
|
|
description = ''
|
|
|
|
HTTP address to bind to.
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
|
|
|
httpListenPort = mkOption {
|
|
|
|
type = types.int;
|
|
|
|
default = 9000;
|
|
|
|
description = ''
|
|
|
|
HTTP port to bind on.
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
|
|
|
httpLogin = mkOption {
|
|
|
|
type = types.str;
|
|
|
|
example = "allyourbase";
|
|
|
|
default = "";
|
|
|
|
description = ''
|
|
|
|
HTTP web login username.
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
|
|
|
httpPass = mkOption {
|
|
|
|
type = types.str;
|
|
|
|
example = "arebelongtous";
|
|
|
|
default = "";
|
|
|
|
description = ''
|
|
|
|
HTTP web login password.
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
|
|
|
encryptLAN = mkOption {
|
|
|
|
type = types.bool;
|
|
|
|
default = true;
|
|
|
|
description = "Encrypt LAN data.";
|
|
|
|
};
|
|
|
|
|
|
|
|
enableWebUI = mkOption {
|
|
|
|
type = types.bool;
|
|
|
|
default = false;
|
|
|
|
description = ''
|
|
|
|
Enable Web UI for administration. Bound to the specified
|
|
|
|
<literal>httpListenAddress</literal> and
|
|
|
|
<literal>httpListenPort</literal>.
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
|
|
|
storagePath = mkOption {
|
|
|
|
type = types.path;
|
|
|
|
default = "/var/lib/resilio-sync/";
|
|
|
|
description = ''
|
|
|
|
Where BitTorrent Sync will store it's database files (containing
|
|
|
|
things like username info and licenses). Generally, you should not
|
|
|
|
need to ever change this.
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
|
|
|
|
apiKey = mkOption {
|
|
|
|
type = types.str;
|
|
|
|
default = "";
|
|
|
|
description = "API key, which enables the developer API.";
|
|
|
|
};
|
|
|
|
|
|
|
|
directoryRoot = mkOption {
|
|
|
|
type = types.str;
|
|
|
|
default = "";
|
|
|
|
example = "/media";
|
|
|
|
description = "Default directory to add folders in the web UI.";
|
|
|
|
};
|
|
|
|
|
|
|
|
sharedFolders = mkOption {
|
|
|
|
default = [];
|
|
|
|
example =
|
|
|
|
[ { secret = "AHMYFPCQAHBM7LQPFXQ7WV6Y42IGUXJ5Y";
|
|
|
|
directory = "/home/user/sync_test";
|
|
|
|
useRelayServer = true;
|
|
|
|
useTracker = true;
|
|
|
|
useDHT = false;
|
|
|
|
searchLAN = true;
|
|
|
|
useSyncTrash = true;
|
2017-06-01 21:53:13 +01:00
|
|
|
knownHosts = [
|
|
|
|
"192.168.1.2:4444"
|
|
|
|
"192.168.1.3:4444"
|
|
|
|
];
|
2017-06-01 15:50:17 +01:00
|
|
|
}
|
|
|
|
];
|
|
|
|
description = ''
|
|
|
|
Shared folder list. If enabled, web UI must be
|
|
|
|
disabled. Secrets can be generated using <literal>rslsync
|
|
|
|
--generate-secret</literal>. Note that this secret will be
|
|
|
|
put inside the Nix store, so it is realistically not very
|
|
|
|
secret.
|
|
|
|
|
|
|
|
If you would like to be able to modify the contents of this
|
|
|
|
directories, it is recommended that you make your user a
|
|
|
|
member of the <literal>resilio</literal> group.
|
|
|
|
|
|
|
|
Directories in this list should be in the
|
|
|
|
<literal>resilio</literal> group, and that group must have
|
|
|
|
write access to the directory. It is also recommended that
|
|
|
|
<literal>chmod g+s</literal> is applied to the directory
|
|
|
|
so that any sub directories created will also belong to
|
|
|
|
the <literal>resilio</literal> group. Also,
|
|
|
|
<literal>setfacl -d -m group:resilio:rwx</literal> and
|
|
|
|
<literal>setfacl -m group:resilio:rwx</literal> should also
|
|
|
|
be applied so that the sub directories are writable by
|
|
|
|
the group.
|
|
|
|
'';
|
|
|
|
};
|
|
|
|
};
|
|
|
|
};
|
|
|
|
|
|
|
|
config = mkIf cfg.enable {
|
|
|
|
assertions =
|
|
|
|
[ { assertion = cfg.deviceName != "";
|
|
|
|
message = "Device name cannot be empty.";
|
|
|
|
}
|
|
|
|
{ assertion = cfg.enableWebUI -> cfg.sharedFolders == [];
|
|
|
|
message = "If using shared folders, the web UI cannot be enabled.";
|
|
|
|
}
|
|
|
|
{ assertion = cfg.apiKey != "" -> cfg.enableWebUI;
|
|
|
|
message = "If you're using an API key, you must enable the web server.";
|
|
|
|
}
|
|
|
|
];
|
|
|
|
|
2018-06-30 00:58:35 +01:00
|
|
|
users.users.rslsync = {
|
2017-06-01 15:50:17 +01:00
|
|
|
description = "Resilio Sync Service user";
|
|
|
|
home = cfg.storagePath;
|
|
|
|
createHome = true;
|
|
|
|
uid = config.ids.uids.rslsync;
|
|
|
|
group = "rslsync";
|
|
|
|
};
|
|
|
|
|
2020-03-02 16:06:26 +00:00
|
|
|
users.groups.rslsync = {};
|
2017-06-01 15:50:17 +01:00
|
|
|
|
|
|
|
systemd.services.resilio = with pkgs; {
|
|
|
|
description = "Resilio Sync Service";
|
|
|
|
wantedBy = [ "multi-user.target" ];
|
2019-09-01 02:07:23 +01:00
|
|
|
after = [ "network.target" ];
|
2017-06-01 15:50:17 +01:00
|
|
|
serviceConfig = {
|
|
|
|
Restart = "on-abort";
|
|
|
|
UMask = "0002";
|
|
|
|
User = "rslsync";
|
2017-06-01 21:53:13 +01:00
|
|
|
ExecStart = ''
|
|
|
|
${resilioSync}/bin/rslsync --nodaemon --config ${configFile}
|
|
|
|
'';
|
2017-06-01 15:50:17 +01:00
|
|
|
};
|
|
|
|
};
|
|
|
|
};
|
|
|
|
}
|