-
-
Notifications
You must be signed in to change notification settings - Fork 14.7k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Provides systemd service and allows configuration of data directory
- Loading branch information
1 parent
a322c92
commit d7ba3b5
Showing
5 changed files
with
155 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,120 @@ | ||
| { | ||
| config, | ||
| lib, | ||
| pkgs, | ||
| ... | ||
| }: | ||
| let | ||
| inherit (lib) | ||
| getExe | ||
| mkIf | ||
| mkEnableOption | ||
| mkOption | ||
| mkPackageOption | ||
| types | ||
| ; | ||
| cfg = config.services.zwave-js-ui; | ||
| in | ||
| { | ||
| options.services.zwave-js-ui = { | ||
| enable = mkEnableOption "zwave-js-ui"; | ||
|
|
||
| package = mkPackageOption pkgs "zwave-js-ui" { }; | ||
|
|
||
| serialPort = mkOption { | ||
| type = types.path; | ||
| description = '' | ||
| Serial port for the Z-Wave controller. | ||
| Only used to grant permissions to the device; must be additionally configured in the application | ||
| ''; | ||
| example = "/dev/serial/by-id/usb-example"; | ||
| }; | ||
|
|
||
| settings = mkOption { | ||
| type = types.submodule { | ||
| freeformType = | ||
| with types; | ||
| attrsOf ( | ||
| nullOr (oneOf [ | ||
| str | ||
| path | ||
| package | ||
| ]) | ||
| ); | ||
|
|
||
| options = { | ||
| STORE_DIR = mkOption { | ||
| type = types.str; | ||
| default = "%S/zwave-js-ui"; | ||
| visible = false; | ||
| readOnly = true; | ||
| }; | ||
|
|
||
| ZWAVEJS_EXTERNAL_CONFIG = mkOption { | ||
| type = types.str; | ||
| default = "%S/zwave-js-ui/.config-db"; | ||
| visible = false; | ||
| readOnly = true; | ||
| }; | ||
| }; | ||
| }; | ||
|
|
||
| description = '' | ||
| Extra environment variables passed to the zwave-js-ui process. | ||
| Check <https://zwave-js.github.io/zwave-js-ui/#/guide/env-vars> for possible options | ||
| ''; | ||
| example = { | ||
| HOST = "::"; | ||
| PORT = "8091"; | ||
| }; | ||
| }; | ||
| }; | ||
| config = mkIf cfg.enable { | ||
| systemd.services.zwave-js-ui = { | ||
| environment = cfg.settings; | ||
| wantedBy = [ "multi-user.target" ]; | ||
| serviceConfig = { | ||
| ExecStart = getExe cfg.package; | ||
| RuntimeDirectory = "zwave-js-ui"; | ||
| StateDirectory = "zwave-js-ui"; | ||
| RootDirectory = "%t/zwave-js-ui"; | ||
| BindReadOnlyPaths = [ | ||
| "/nix/store" | ||
| ]; | ||
| DeviceAllow = [ cfg.serialPort ]; | ||
| DynamicUser = true; | ||
| SupplementaryGroups = [ "dialout" ]; | ||
| CapabilityBoundingSet = [ "" ]; | ||
| RestrictAddressFamilies = "AF_INET AF_INET6"; | ||
| DevicePolicy = "closed"; | ||
| LockPersonality = true; | ||
| MemoryDenyWriteExecute = false; | ||
| NoNewPrivileges = true; | ||
| PrivateUsers = true; | ||
| PrivateTmp = true; | ||
| ProtectClock = true; | ||
| ProtectControlGroups = true; | ||
| ProtectHome = true; | ||
| ProtectHostname = true; | ||
| ProtectKernelLogs = true; | ||
| ProtectKernelModules = true; | ||
| ProtectKernalTunables = true; | ||
| ProtectProc = "invisible"; | ||
| ProcSubset = "pid"; | ||
| RemoveIPC = true; | ||
| RestrictNamespaces = true; | ||
| RestrictRealtime = true; | ||
| RestrictSUIDSGID = true; | ||
| SystemCallArchitectures = "native"; | ||
| SystemCallFilter = [ | ||
| "@system-service @pkey" | ||
| "~@privileged @resources" | ||
| ]; | ||
| UMask = "0077"; | ||
| }; | ||
| }; | ||
| }; | ||
| meta.maintainers = with lib.maintainers; [ cdombroski ]; | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,31 @@ | ||
| import ./make-test-python.nix ( | ||
| { lib, ... }: | ||
| { | ||
| name = "zwave-js-ui"; | ||
| meta.maintainers = with lib.maintainers; [ cdombroski ]; | ||
|
|
||
| nodes = { | ||
| machine = | ||
| { ... }: | ||
| { | ||
| services.zwave-js-ui = { | ||
| enable = true; | ||
| serialPort = "/dev/null"; | ||
| settings = { | ||
| HOST = "::"; | ||
| PORT = "9999"; | ||
| }; | ||
| }; | ||
| }; | ||
| }; | ||
|
|
||
| testScript = '' | ||
| start_all() | ||
| machine.wait_for_unit("zwave-js-ui.service") | ||
| machine.wait_for_open_port(9999) | ||
| machine.wait_until_succeeds("journalctl --since -1m --unit zwave-js-ui --grep 'Listening on port 9999host :: protocol HTTP'") | ||
| machine.wait_for_file("/var/lib/zwave-js-ui/nodes.json") | ||
| ''; | ||
| } | ||
| ) |