160 lines
3.9 KiB
Nix
160 lines
3.9 KiB
Nix
{ config, lib, pkgs, ... }:
|
|
|
|
with lib;
|
|
let
|
|
cfg = config.informis.cl-gemini;
|
|
|
|
lisp-libs = with pkgs.lispPackages; [
|
|
alexandria
|
|
asdf-package-system
|
|
asdf-system-connections
|
|
cl_plus_ssl
|
|
cl-ppcre
|
|
quicklisp
|
|
quri
|
|
uiop
|
|
usocket
|
|
];
|
|
|
|
launchServer = load-paths: ip: port: root: public-dir: key: cert: slynk-port:
|
|
let
|
|
load-path-string =
|
|
concatStringsSep " " (map (path: "\"${path}\"") load-paths);
|
|
in pkgs.writeText "launch-server.lisp" ''
|
|
(load (merge-pathnames "quicklisp/setup.lisp" (user-homedir-pathname)))
|
|
(setf asdf:*central-registry*
|
|
(append asdf:*central-registry*
|
|
(list ${load-path-string})))
|
|
(ql:quickload :slynk)
|
|
(ql:quickload :cl-gemini)
|
|
${optionalString (slynk-port != null) "(slynk:create-server :port ${toString slynk-port} :dont-close t)"}
|
|
(cl-gemini:start-gemini-server "${ip}" "${key}" "${cert}"
|
|
:port ${toString port}
|
|
:document-root "${root}"
|
|
:file-cmd "${pkgs.file}/bin/file"
|
|
:log-stream *standard-output*
|
|
:threaded t
|
|
:separate-thread t)
|
|
(loop (sleep 60))
|
|
'';
|
|
|
|
sbcl-with-ssl = pkgs.sbcl.overrideAttrs (oldAttrs: rec {
|
|
extraLibs = with pkgs; [
|
|
openssl_1_1.dev
|
|
];
|
|
});
|
|
|
|
in {
|
|
options.informis.cl-gemini = with types; {
|
|
enable = mkEnableOption "Enable the cl-gemini server.";
|
|
|
|
port = mkOption {
|
|
type = port;
|
|
description = "Port on which to serve Gemini traffic.";
|
|
default = 1965;
|
|
};
|
|
|
|
server-ip = mkOption {
|
|
type = str;
|
|
description = "IP on which to serve Gemini traffic.";
|
|
example = "1.2.3.4";
|
|
};
|
|
|
|
document-root = mkOption {
|
|
type = path;
|
|
description = "Root at which to look for gemini files.";
|
|
example = /my/gemini/root;
|
|
};
|
|
|
|
user-public = mkOption {
|
|
type = str;
|
|
description = "Subdirectory of user homes to check for gemini files.";
|
|
default = "gemini-public";
|
|
};
|
|
|
|
ssl-private-key = mkOption {
|
|
type = path;
|
|
description = "Path to the pem-encoded server private key.";
|
|
example = /path/to/secret/key.pem;
|
|
};
|
|
|
|
ssl-certificate = mkOption {
|
|
type = path;
|
|
description = "Path to the pem-encoded server public certificate.";
|
|
example = /path/to/cert.pem;
|
|
};
|
|
|
|
slynk-port = mkOption {
|
|
type = nullOr port;
|
|
description = "Port on which to open a slynk server, if any.";
|
|
default = null;
|
|
};
|
|
};
|
|
|
|
config = mkIf cfg.enable {
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
cl-gemini
|
|
];
|
|
|
|
users.users = {
|
|
cl-gemini = {
|
|
isSystemUser = true;
|
|
group = "nogroup";
|
|
createHome = true;
|
|
home = "/var/lib/cl-gemini";
|
|
};
|
|
};
|
|
|
|
environment.etc = {
|
|
"cl-gemini/key.pem" = {
|
|
mode = "0400";
|
|
user = "cl-gemini";
|
|
source = cfg.ssl-private-key;
|
|
};
|
|
|
|
"cl-gemini/cert.pem" = {
|
|
mode = "0444";
|
|
user = "cl-gemini";
|
|
source = cfg.ssl-certificate;
|
|
};
|
|
};
|
|
|
|
systemd.services.cl-gemini = {
|
|
description = "cl-gemini Gemini server (https://gemini.circumlunar.space/)";
|
|
|
|
serviceConfig = let
|
|
load-paths = (map (pkg: "${pkg}/lib/common-lisp//")
|
|
(lisp-libs ++ [pkgs.cl-gemini]));
|
|
in {
|
|
ExecStartPre = "${pkgs.lispPackages.quicklisp}/bin/quicklisp init";
|
|
ExecStart = "${sbcl-with-ssl}/bin/sbcl --load ${
|
|
launchServer
|
|
load-paths
|
|
cfg.server-ip
|
|
cfg.port
|
|
cfg.document-root
|
|
cfg.user-public
|
|
"/etc/cl-gemini/key.pem"
|
|
"/etc/cl-gemini/cert.pem"
|
|
cfg.slynk-port
|
|
}";
|
|
Restart = "on-failure";
|
|
PIDFile = "/run/cl-gemini.$USERNAME.uid";
|
|
User = "cl-gemini";
|
|
};
|
|
|
|
environment = {
|
|
LD_LIBRARY_PATH = "${pkgs.openssl_1_1.out}/lib";
|
|
};
|
|
|
|
path = with pkgs; [
|
|
file
|
|
getent
|
|
];
|
|
|
|
wantedBy = [ "default.target" ];
|
|
};
|
|
};
|
|
}
|