From 210d4e7c2e7102355e8ef92681800157faa57d16 Mon Sep 17 00:00:00 2001
From: Quentin Aristote <quentin@aristote.fr>
Date: Fri, 6 Aug 2021 16:20:44 +0200
Subject: initial commit

---
 modules/filtron.nix | 87 +++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 87 insertions(+)
 create mode 100644 modules/filtron.nix

(limited to 'modules/filtron.nix')

diff --git a/modules/filtron.nix b/modules/filtron.nix
new file mode 100644
index 0000000..55374a7
--- /dev/null
+++ b/modules/filtron.nix
@@ -0,0 +1,87 @@
+{ config, lib, pkgs, ... }:
+
+with lib;
+let
+  cfg = config.services.filtron;
+  addressType = types.submodule {
+    options = {
+      address = mkOption {
+        type = types.str;
+        default = "127.0.0.1";
+      };
+      port = mkOption { type = types.port; };
+    };
+  };
+in {
+  options.services.filtron = {
+    enable = mkEnableOption { name = "filtron"; };
+    package = mkOption {
+      type = types.package;
+      default = pkgs.personal.filtron;
+      defaultText = literalExample "pkgs.personal.filtron";
+      description = ''
+        The package containing the filtron executable.
+      '';
+    };
+    api = mkOption {
+      type = addressType;
+      default = { address = "localhost"; port = 4005; };
+      description = ''
+        API listen address and port.
+      '';
+    };
+    listen = mkOption {
+      type = addressType;
+      default = { port = 4004; };
+      description = ''
+        Proxy listen address and port.
+      '';
+    };
+    target = mkOption {
+      type = addressType;
+      default = { port = 8888; };
+      description = ''
+        Target address and port for reverse proxy.
+      '';
+    };
+    rules = mkOption {
+      type = with types; listOf (attrsOf anything);
+      description = ''
+        Rule list.
+      '';
+    };
+    readBufferSize = mkOption {
+      type = types.int;
+      default = 16384;
+      description = ''
+        Size of the buffer used for reading.
+      '';
+    };
+  };
+
+  config = mkIf cfg.enable {
+    users.users.filtron = {
+      description = "Filtron daemon user";
+      group = "filtron";
+      isSystemUser = true;
+    };
+    users.groups.filtron = { };
+
+    systemd.services.filtron = {
+      wantedBy = [ "multi-user.target" ];
+      after = [ "network.target" ];
+      description = "Start a filtron instance.";
+      serviceConfig = {
+        User = "filtron";
+        ExecStart = with builtins; ''
+          ${cfg.package}/bin/filtron \
+                  -rules ${toFile "filtron-rules.json" (toJSON cfg.rules)} \
+                  -api "${cfg.api.address}:${toString cfg.api.port}" \
+                  -listen "${cfg.listen.address}:${toString cfg.listen.port}" \
+                  -target "${cfg.target.address}:${toString cfg.target.port}" \
+                  -read-buffer-size ${toString cfg.readBufferSize}
+        '';
+      };
+    };
+  };
+}
-- 
cgit v1.2.3