Files
slimes-website/flake.nix

115 lines
3.9 KiB
Nix

{
description = "Slimes API Website";
inputs = {
nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
};
outputs =
{ self, nixpkgs, ... }:
let
supportedSystems = [
"x86_64-linux"
# "aarch64-linux"
# "x86_64-darwin"
# "aarch64-darwin"
];
forAllSystems = nixpkgs.lib.genAttrs supportedSystems;
in
{
packages = forAllSystems (
system:
let
pkgs = import nixpkgs { inherit system; };
in
{
default = pkgs.rustPlatform.buildRustPackage {
pname = "slimes-website";
version = "0.1.0";
src = ./.;
cargoLock.lockFile = ./Cargo.lock;
nativeBuildInputs = [ pkgs.pkg-config ];
buildInputs = [
pkgs.openssl
# pkgs.sqlite
];
PKG_CONFIG_PATH = "${pkgs.openssl.dev}/lib/pkgconfig";
OPENSSL_LIB_DIR = "${pkgs.openssl.out}/lib";
OPENSSL_INCLUDE_DIR = "${pkgs.openssl.dev}/include";
};
}
);
devShells = forAllSystems (
system:
let
pkgs = import nixpkgs { inherit system; };
in
{
default = pkgs.mkShell {
packages = [
pkgs.rustc
pkgs.cargo
pkgs.rust-analyzer
pkgs.pkg-config
pkgs.openssl
];
env = {
PKG_CONFIG_PATH = "${pkgs.openssl.dev}/lib/pkgconfig";
OPENSSL_DIR = "${pkgs.openssl.dev}";
};
};
}
);
nixosModules.default =
{
config,
lib,
pkgs,
...
}:
let
cfg = config.services.slimes-website;
in
{
options.services.slimes-website = {
enable = lib.mkEnableOption "Slimes API Website";
port = lib.mkOption {
type = lib.types.port;
default = 9003;
};
# databasePath = lib.mkOption {
# type = lib.types.str;
# default = "/var/lib/slimes-website/database.db";
# };
};
config = lib.mkIf cfg.enable {
systemd.services.slimes-website = {
description = "Slimes API Website";
after = [ "network.target" ];
wantedBy = [ "multi-user.target" ];
serviceConfig = {
ExecStart = "${
self.packages.${pkgs.system}.default
}/bin/slimes-website --port ${toString cfg.port} --host";
Restart = "on-failure";
StateDirectory = "slimes-website";
DynamicUser = true;
ProtectSystem = "strict";
ProtectHome = true;
NoNewPrivileges = true;
};
};
};
};
};
}