config/modules/services/jakstpub/default.nix

111 lines
2.6 KiB
Nix
Raw Normal View History

2023-09-12 13:31:46 +03:00
{
config,
lib,
2023-09-12 16:08:08 +03:00
myData,
2023-09-12 13:31:46 +03:00
...
2024-07-29 15:39:54 +03:00
}:
let
2023-09-17 22:12:46 +03:00
cfg = config.mj.services.jakstpub;
2024-07-29 15:39:54 +03:00
in
{
2023-09-12 13:31:46 +03:00
options.mj.services.jakstpub = with lib.types; {
enable = lib.mkEnableOption "Enable jakstpub";
2024-07-29 15:39:54 +03:00
dataDir = lib.mkOption { type = path; };
2023-09-12 13:31:46 +03:00
# RequiresMountsFor is used by upstream, hacking with the unit
2024-07-29 15:39:54 +03:00
requires = lib.mkOption { type = listOf str; };
uidgid = lib.mkOption { type = int; };
hostname = lib.mkOption { type = str; };
2023-09-12 13:31:46 +03:00
};
2023-09-17 22:12:46 +03:00
config = lib.mkIf cfg.enable {
2023-11-27 18:17:27 +02:00
services = {
caddy = {
enable = true;
virtualHosts.":80".extraConfig = with myData.subnets; ''
root * ${cfg.dataDir}
@denied not remote_ip ${vno1.cidr} ${vno3.cidr} ${tailscale.cidr}
file_server browse {
hide .stfolder
}
encode gzip
'';
};
2023-09-12 13:31:46 +03:00
2023-11-27 18:17:27 +02:00
samba = {
# https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Standalone_Server
enable = true;
securityType = "user";
enableNmbd = false;
enableWinbindd = false;
extraConfig = ''
map to guest = Bad User
guest account = jakstpub
server role = standalone server
'';
2024-07-29 15:39:54 +03:00
shares =
let
defaults = {
"public" = "yes";
"mangled names" = "no";
"guest ok" = "yes";
"force user" = "jakstpub";
"force group" = "jakstpub";
};
in
{
public = defaults // {
2023-11-27 18:17:27 +02:00
"path" = cfg.dataDir;
"writeable" = "yes";
"read only" = "no";
"create mask" = "0664";
"directory mask" = "0775";
};
2024-07-29 15:39:54 +03:00
snapshots = defaults // {
2023-11-27 18:17:27 +02:00
"path" = cfg.dataDir + "/.zfs/snapshot";
"writeable" = "no";
"read only" = "yes";
};
2024-07-29 15:39:54 +03:00
};
2023-09-12 23:18:46 +03:00
};
2023-11-27 18:17:27 +02:00
samba-wsdd = {
enable = true;
inherit (cfg) hostname;
};
2023-09-17 22:12:46 +03:00
};
2023-09-12 13:31:46 +03:00
2023-09-17 22:12:46 +03:00
users.users.jakstpub = {
description = "Jakstys Public";
home = "/var/empty";
shell = "/bin/sh";
2023-09-17 22:12:46 +03:00
group = "jakstpub";
isSystemUser = true;
createHome = false;
uid = cfg.uidgid;
};
2023-09-12 13:31:46 +03:00
2023-09-17 22:12:46 +03:00
users.groups.jakstpub.gid = cfg.uidgid;
2023-09-12 13:31:46 +03:00
2023-09-17 22:12:46 +03:00
systemd.services.samba-smbd = {
unitConfig.Requires = cfg.requires;
2023-09-12 13:31:46 +03:00
};
2023-09-17 22:12:46 +03:00
mj.services.friendlyport.ports = [
{
2024-07-29 15:39:54 +03:00
subnets = with myData.subnets; [
tailscale.cidr
vno1.cidr
vno3.cidr
];
2023-09-17 22:12:46 +03:00
tcp = [
80 # caddy above
139 # smbd
445 # smbd
5357 # wsdd
];
2024-07-29 15:39:54 +03:00
udp = [ 3702 ]; # wsdd
2023-09-17 22:12:46 +03:00
}
];
};
2023-09-12 13:31:46 +03:00
}