8e6ad840f2
separate module, which just declares a configuration value that causes the xinetd module to add it to xinetd.conf. Also Nixified the service declarations to abstract over the inetd implementation. * Renamed the services.xinetd.tftpd options to services.tftpd. The fact that the tftpd module uses xinetd is an implementation detail. * xinetd: use -dontfork to let Upstart monitor it, and use -syslog to get error messages at startup. svn path=/nixos/trunk/; revision=16803
136 lines
3.0 KiB
Nix
136 lines
3.0 KiB
Nix
{ config, pkgs, ... }:
|
|
|
|
with pkgs.lib;
|
|
|
|
let
|
|
|
|
cfg = config.services.xinetd;
|
|
|
|
inherit (pkgs) xinetd;
|
|
|
|
configFile = pkgs.writeText "xinetd.conf"
|
|
''
|
|
defaults
|
|
{
|
|
log_type = SYSLOG daemon info
|
|
log_on_failure = HOST
|
|
log_on_success = PID HOST DURATION EXIT
|
|
}
|
|
|
|
${concatMapStrings makeService cfg.services}
|
|
'';
|
|
|
|
makeService = srv:
|
|
''
|
|
service ${srv.name}
|
|
{
|
|
protocol = ${srv.protocol}
|
|
${optionalString srv.unlisted "type = UNLISTED"}
|
|
socket_type = ${if srv.protocol == "udp" then "dgram" else "stream"}
|
|
${if srv.port != 0 then "port = ${toString srv.port}" else ""}
|
|
wait = ${if srv.protocol == "udp" then "yes" else "no"}
|
|
user = ${srv.user}
|
|
server = ${srv.server}
|
|
${optionalString (srv.serverArgs != "") "server_args = ${srv.serverArgs}"}
|
|
}
|
|
'';
|
|
|
|
in
|
|
|
|
{
|
|
|
|
###### interface
|
|
|
|
options = {
|
|
|
|
services.xinetd.enable = mkOption {
|
|
default = false;
|
|
description = ''
|
|
Whether to enable the xinetd super-server daemon.
|
|
'';
|
|
};
|
|
|
|
services.xinetd.services = mkOption {
|
|
default = [];
|
|
description = ''
|
|
A list of services provided by xinetd.
|
|
'';
|
|
|
|
type = types.list types.optionSet;
|
|
|
|
options = {
|
|
|
|
name = mkOption {
|
|
type = types.string;
|
|
example = "login";
|
|
description = "Name of the service.";
|
|
};
|
|
|
|
protocol = mkOption {
|
|
type = types.string;
|
|
default = "tcp";
|
|
description =
|
|
"Protocol of the service. Usually <literal>tcp</literal> or <literal>udp</literal>.";
|
|
};
|
|
|
|
port = mkOption {
|
|
type = types.int;
|
|
default = 0;
|
|
example = 123;
|
|
description = "Port number of the service.";
|
|
};
|
|
|
|
user = mkOption {
|
|
type = types.string;
|
|
default = "nobody";
|
|
description = "User account for the service";
|
|
};
|
|
|
|
server = mkOption {
|
|
type = types.string;
|
|
example = "/foo/bin/ftpd";
|
|
description = "Path of the program that implements the service.";
|
|
};
|
|
|
|
serverArgs = mkOption {
|
|
type = types.string;
|
|
default = "";
|
|
description = "Command-line arguments for the server program.";
|
|
};
|
|
|
|
unlisted = mkOption {
|
|
type = types.bool;
|
|
default = false;
|
|
description = ''
|
|
Whether this server is listed in
|
|
<filename>/etc/services</filename>. If so, the port
|
|
number can be omitted.
|
|
'';
|
|
};
|
|
|
|
};
|
|
|
|
};
|
|
|
|
};
|
|
|
|
|
|
###### implementation
|
|
|
|
config = mkIf cfg.enable {
|
|
|
|
jobs = singleton
|
|
{ name = "xinetd";
|
|
|
|
description = "xinetd server";
|
|
|
|
startOn = "network-interfaces/started";
|
|
stopOn = "network-interfaces/stop";
|
|
|
|
exec = "${xinetd}/sbin/xinetd -syslog daemon -dontfork -stayalive -f ${configFile}";
|
|
};
|
|
|
|
};
|
|
|
|
}
|