This fixed a problem I had when running ElasticSearch in an LXC container, and it doesn't hurt using a dedicated group instead of nogroup anyway.
		
			
				
	
	
		
			171 lines
		
	
	
		
			4.3 KiB
		
	
	
	
		
			Nix
		
	
	
	
	
	
			
		
		
	
	
			171 lines
		
	
	
		
			4.3 KiB
		
	
	
	
		
			Nix
		
	
	
	
	
	
{ config, lib, pkgs, ... }:
 | 
						|
 | 
						|
with lib;
 | 
						|
 | 
						|
let
 | 
						|
  cfg = config.services.elasticsearch;
 | 
						|
 | 
						|
  esConfig = ''
 | 
						|
    network.host: ${cfg.listenAddress}
 | 
						|
    network.port: ${toString cfg.port}
 | 
						|
    network.tcp.port: ${toString cfg.tcp_port}
 | 
						|
    # TODO: find a way to enable security manager
 | 
						|
    security.manager.enabled: false
 | 
						|
    cluster.name: ${cfg.cluster_name}
 | 
						|
    ${cfg.extraConf}
 | 
						|
  '';
 | 
						|
 | 
						|
  configDir = pkgs.buildEnv {
 | 
						|
    name = "elasticsearch-config";
 | 
						|
    paths = [
 | 
						|
      (pkgs.writeTextDir "elasticsearch.yml" esConfig)
 | 
						|
      (pkgs.writeTextDir "logging.yml" cfg.logging)
 | 
						|
    ];
 | 
						|
  };
 | 
						|
 | 
						|
  esPlugins = pkgs.buildEnv {
 | 
						|
    name = "elasticsearch-plugins";
 | 
						|
    paths = cfg.plugins;
 | 
						|
  };
 | 
						|
 | 
						|
in {
 | 
						|
 | 
						|
  ###### interface
 | 
						|
 | 
						|
  options.services.elasticsearch = {
 | 
						|
    enable = mkOption {
 | 
						|
      description = "Whether to enable elasticsearch.";
 | 
						|
      default = false;
 | 
						|
      type = types.bool;
 | 
						|
    };
 | 
						|
 | 
						|
    package = mkOption {
 | 
						|
      description = "Elasticsearch package to use.";
 | 
						|
      default = pkgs.elasticsearch2;
 | 
						|
      defaultText = "pkgs.elasticsearch2";
 | 
						|
      type = types.package;
 | 
						|
    };
 | 
						|
 | 
						|
    listenAddress = mkOption {
 | 
						|
      description = "Elasticsearch listen address.";
 | 
						|
      default = "127.0.0.1";
 | 
						|
      type = types.str;
 | 
						|
    };
 | 
						|
 | 
						|
    port = mkOption {
 | 
						|
      description = "Elasticsearch port to listen for HTTP traffic.";
 | 
						|
      default = 9200;
 | 
						|
      type = types.int;
 | 
						|
    };
 | 
						|
 | 
						|
    tcp_port = mkOption {
 | 
						|
      description = "Elasticsearch port for the node to node communication.";
 | 
						|
      default = 9300;
 | 
						|
      type = types.int;
 | 
						|
    };
 | 
						|
 | 
						|
    cluster_name = mkOption {
 | 
						|
      description = "Elasticsearch name that identifies your cluster for auto-discovery.";
 | 
						|
      default = "elasticsearch";
 | 
						|
      type = types.str;
 | 
						|
    };
 | 
						|
 | 
						|
    extraConf = mkOption {
 | 
						|
      description = "Extra configuration for elasticsearch.";
 | 
						|
      default = "";
 | 
						|
      type = types.str;
 | 
						|
      example = ''
 | 
						|
        node.name: "elasticsearch"
 | 
						|
        node.master: true
 | 
						|
        node.data: false
 | 
						|
        index.number_of_shards: 5
 | 
						|
        index.number_of_replicas: 1
 | 
						|
      '';
 | 
						|
    };
 | 
						|
 | 
						|
    logging = mkOption {
 | 
						|
      description = "Elasticsearch logging configuration.";
 | 
						|
      default = ''
 | 
						|
        rootLogger: INFO, console
 | 
						|
        logger:
 | 
						|
          action: INFO
 | 
						|
          com.amazonaws: WARN
 | 
						|
        appender:
 | 
						|
          console:
 | 
						|
            type: console
 | 
						|
            layout:
 | 
						|
              type: consolePattern
 | 
						|
              conversionPattern: "[%d{ISO8601}][%-5p][%-25c] %m%n"
 | 
						|
      '';
 | 
						|
      type = types.str;
 | 
						|
    };
 | 
						|
 | 
						|
    dataDir = mkOption {
 | 
						|
      type = types.path;
 | 
						|
      default = "/var/lib/elasticsearch";
 | 
						|
      description = ''
 | 
						|
        Data directory for elasticsearch.
 | 
						|
      '';
 | 
						|
    };
 | 
						|
 | 
						|
    extraCmdLineOptions = mkOption {
 | 
						|
      description = "Extra command line options for the elasticsearch launcher.";
 | 
						|
      default = [];
 | 
						|
      type = types.listOf types.str;
 | 
						|
      example = [ "-Djava.net.preferIPv4Stack=true" ];
 | 
						|
    };
 | 
						|
 | 
						|
    plugins = mkOption {
 | 
						|
      description = "Extra elasticsearch plugins";
 | 
						|
      default = [];
 | 
						|
      type = types.listOf types.package;
 | 
						|
    };
 | 
						|
 | 
						|
  };
 | 
						|
 | 
						|
  ###### implementation
 | 
						|
 | 
						|
  config = mkIf cfg.enable {
 | 
						|
    systemd.services.elasticsearch = {
 | 
						|
      description = "Elasticsearch Daemon";
 | 
						|
      wantedBy = [ "multi-user.target" ];
 | 
						|
      after = [ "network-interfaces.target" ];
 | 
						|
      path = [ pkgs.inetutils ];
 | 
						|
      environment = {
 | 
						|
        ES_HOME = cfg.dataDir;
 | 
						|
      };
 | 
						|
      serviceConfig = {
 | 
						|
        ExecStart = "${cfg.package}/bin/elasticsearch -Des.path.conf=${configDir} ${toString cfg.extraCmdLineOptions}";
 | 
						|
        User = "elasticsearch";
 | 
						|
        PermissionsStartOnly = true;
 | 
						|
      };
 | 
						|
      preStart = ''
 | 
						|
        mkdir -m 0700 -p ${cfg.dataDir}
 | 
						|
 | 
						|
        # Install plugins
 | 
						|
        ln -sfT ${esPlugins}/plugins ${cfg.dataDir}/plugins
 | 
						|
        ln -sfT ${cfg.package}/lib ${cfg.dataDir}/lib
 | 
						|
        ln -sfT ${cfg.package}/modules ${cfg.dataDir}/modules
 | 
						|
        if [ "$(id -u)" = 0 ]; then chown -R elasticsearch ${cfg.dataDir}; fi
 | 
						|
      '';
 | 
						|
      postStart = mkBefore ''
 | 
						|
        until ${pkgs.curl.bin}/bin/curl -s -o /dev/null ${cfg.listenAddress}:${toString cfg.port}; do
 | 
						|
          sleep 1
 | 
						|
        done
 | 
						|
      '';
 | 
						|
    };
 | 
						|
 | 
						|
    environment.systemPackages = [ cfg.package ];
 | 
						|
 | 
						|
    users = {
 | 
						|
      groups.elasticsearch.gid = config.ids.gids.elasticsearch;
 | 
						|
      users.elasticsearch = {
 | 
						|
        uid = config.ids.uids.elasticsearch;
 | 
						|
        description = "Elasticsearch daemon user";
 | 
						|
        home = cfg.dataDir;
 | 
						|
        group = "elasticsearch";
 | 
						|
      };
 | 
						|
    };
 | 
						|
  };
 | 
						|
}
 |