41 lines
1.1 KiB
Nix
41 lines
1.1 KiB
Nix
{config, pkgs, lib, self, system, ... }:
|
|
let
|
|
cfg = config.services.gatekeeper;
|
|
in
|
|
{
|
|
options = {
|
|
services.gatekeeper = {
|
|
enable = lib.mkEnableOption "Enable the gatekeeper api service.";
|
|
dotenv = lib.mkOption {
|
|
type = lib.types.path;
|
|
default = null;
|
|
description = "The path to a .env file with the keys";
|
|
};
|
|
db = {
|
|
type = lib.types.path;
|
|
default = null;
|
|
description = "Where to save the database.";
|
|
};
|
|
};
|
|
};
|
|
config = lib.mkIf cfg.enable {
|
|
users.extraGroups.gatekeeper = {};
|
|
users.extraUsers.gatekeeper = {
|
|
description = "gatekeeper user";
|
|
group = "gatekeeper";
|
|
isSystemUser = true;
|
|
};
|
|
#environment.systemPackages = [self.packages.${system}.default];
|
|
systemd.services.gatekeeper = {
|
|
script = ''
|
|
export LD_LIBRARY_PATH="${lib.getLib pkgs.pcsclite}/lib''${LD_LIBRARY_PATH:+:$LD_LIBRARY_PATH}"
|
|
exec ${pkgs.python3.pkgs.uvicorn}/bin/uvicorn run ${self}/app/main.py
|
|
'';
|
|
wantedBy = ["multi-user.target"];
|
|
serviceConfig = {
|
|
User = "gatekeeper";
|
|
Restart = "on-failure";
|
|
};
|
|
};
|
|
};
|
|
} |