public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos: only enable spipe when user specifies

Browse Source 
Signed-off-by: Austin Seipp <aseipp@pobox.com>
This commit is contained in:
Austin Seipp 2014-04-19 19:34:18 -05:00
parent 33eced411f
commit b470c93c1e
1 changed files with 145 additions and 137 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
nixos/modules/services/networking/spiped.nix
View File

@ -7,7 +7,14 @@ let
in in
{ {
options = { options = {
services.spiped = mkOption { services.spiped = {
enable = mkOption {
type = types.bool;
default = false;
description = "Enable the spiped service module.";
};
config = mkOption {
type = types.attrsOf (types.submodule ( type = types.attrsOf (types.submodule (
{ {
options = { options = {
@ -156,12 +163,13 @@ in
''; '';
}; };
}; };
};
config = { config = mkIf cfg.enable {
assertions = mapAttrsToList (name: c: { assertions = mapAttrsToList (name: c: {
assertion = (c.encrypt -> !c.decrypt) || (c.decrypt -> c.encrypt); assertion = (c.encrypt -> !c.decrypt) || (c.decrypt -> c.encrypt);
message = "A pipe must either encrypt or decrypt"; message = "A pipe must either encrypt or decrypt";
}) cfg; }) cfg.config;
users.extraGroups.spiped.gid = config.ids.gids.spiped; users.extraGroups.spiped.gid = config.ids.gids.spiped;
users.extraUsers.spiped = { users.extraUsers.spiped = {
@ -189,7 +197,7 @@ in
script = "exec ${pkgs.spiped}/bin/spiped -F `cat /etc/spiped/$1.spec`"; script = "exec ${pkgs.spiped}/bin/spiped -F `cat /etc/spiped/$1.spec`";
}; };
system.activationScripts.spiped = optionalString (cfg != {}) system.activationScripts.spiped = optionalString (cfg.config != {})
"mkdir -p /var/lib/spiped"; "mkdir -p /var/lib/spiped";
# Setup spiped config files # Setup spiped config files
@ -207,6 +215,6 @@ in
(if cfg.disableReresolution then "-R" (if cfg.disableReresolution then "-R"
else "-r ${toString cfg.resolveRefresh}") else "-r ${toString cfg.resolveRefresh}")
]; ];
}) cfg; }) cfg.config;
}; };
} }