-
-
Notifications
You must be signed in to change notification settings - Fork 14.7k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Provides systemd service and allows configuration of data directory
- Loading branch information
1 parent
a322c92
commit 2019c48
Showing
5 changed files
with
116 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,84 @@ | ||
| { | ||
| config, | ||
| lib, | ||
| pkgs, | ||
| ... | ||
| }: | ||
| let | ||
| inherit (lib) | ||
| mkIf | ||
| mkEnableOption | ||
| mkOption | ||
| mkPackageOption | ||
| types | ||
| ; | ||
| cfg = config.services.zwave-js-ui; | ||
| in | ||
| { | ||
| options.services.zwave-js-ui = { | ||
| enable = mkEnableOption "zwave-js-ui"; | ||
|
|
||
| package = mkPackageOption pkgs "zwave-js-ui" { }; | ||
|
|
||
| serialPort = mkOption { | ||
| type = types.path; | ||
| description = '' | ||
| Serial port for the Z-Wave controller. | ||
| Only used to grant permissions to the device; must be additionally configured in the application | ||
| ''; | ||
| example = "/dev/serial/by-id/usb-example"; | ||
| }; | ||
| }; | ||
| config = mkIf cfg.enable { | ||
| systemd.services.zwave-js-ui = { | ||
| environment = { | ||
| STORE_DIR = "/var/lib/zwave-js-ui"; | ||
| ZWAVEJS_EXTERNAL_CONFIG = "/var/lib/zwave-js-ui/.config-db"; | ||
| }; | ||
| wantedBy = [ "multi-user.target" ]; | ||
| serviceConfig = { | ||
| ExecStart = "${pkgs.zwave-js-ui}/bin/zwave-js-ui"; | ||
| RuntimeDirectory = "zwave-js-ui"; | ||
| StateDirectory = "zwave-js-ui"; | ||
| RootDirectory = "/run/zwave-js-ui"; | ||
| BindReadOnlyPaths = [ | ||
| "/etc" | ||
| "/nix/store" | ||
| ]; | ||
| BindPaths = [ "/var/lib/zwave-js-ui" ]; | ||
| DeviceAllow = [ cfg.serialPort ]; | ||
| DynamicUser = true; | ||
| SupplementaryGroups = [ "dialout" ]; | ||
| CapabilityBoundingSet = [ "" ]; | ||
| RestrictAddressFamilies = "AF_INET AF_INET6"; | ||
| DevicePolicy = "closed"; | ||
| LockPersonality = true; | ||
| MemoryDenyWriteExecute = false; | ||
| NoNewPrivileges = true; | ||
| PrivateUsers = true; | ||
| PrivateTmp = true; | ||
| ProtectClock = true; | ||
| ProtectControlGroups = true; | ||
| ProtectHome = true; | ||
| ProtectHostname = true; | ||
| ProtectKernelLogs = true; | ||
| ProtectKernelModules = true; | ||
| ProtectKernalTunables = true; | ||
| ProtectProc = "invisible"; | ||
| ProcSubset = "pid"; | ||
| RemoveIPC = true; | ||
| RestrictNamespaces = true; | ||
| RestrictRealtime = true; | ||
| RestrictSUIDSGID = true; | ||
| SystemCallArchitectures = "native"; | ||
| SystemCallFilter = [ | ||
| "@system-service @pkey" | ||
| "~@privileged @resources" | ||
| ]; | ||
| UMask = "0077"; | ||
| }; | ||
| }; | ||
| }; | ||
| meta.maintainers = with lib.maintainers; [ cdombroski ]; | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,28 @@ | ||
| import ./make-test-python.nix ( | ||
| { lib, ... }: | ||
|
|
||
| { | ||
| name = "zwave-js-ui"; | ||
| meta.maintainers = with lib.maintainers; [ cdombroski ]; | ||
|
|
||
| nodes = { | ||
| machine = | ||
| { ... }: | ||
| { | ||
| services.zwave-js-ui = { | ||
| enable = true; | ||
| serialPort = "/dev/null"; | ||
| }; | ||
| }; | ||
| }; | ||
|
|
||
| testScript = '' | ||
| start_all() | ||
| machine.wait_for_unit("zwave-js-ui.service") | ||
| machine.wait_for_open_port(8091) | ||
| machine.wait_until_succeeds("journalctl --since -1m --unit zwave-js-ui --grep 'Listening on port 8091 protocol HTTP'") | ||
| machine.wait_for_file("/var/lib/zwave-js-ui/nodes.json") | ||
| ''; | ||
| } | ||
| ) |