mirror of
https://github.com/fort-nix/nix-bitcoin.git
synced 2024-11-30 03:32:05 +03:00
582cb86d74
- Adds nanopos to netns-isolation.services - Adds cfg.enforceTor and extraArgs to bring nanopos in line with other services - Adds charged-url option to allow using nanopos with network namespaces. - Modularizes nginx so webindex can be used without nanopos. - Adds host option (defaults to localhost) as target of hidden service - Removes unnecessary after
120 lines
3.0 KiB
Nix
120 lines
3.0 KiB
Nix
{ config, lib, pkgs, ... }:
|
|
|
|
with lib;
|
|
|
|
let
|
|
cfg = config.services.nanopos;
|
|
inherit (config) nix-bitcoin-services;
|
|
defaultItemsFile = pkgs.writeText "items.yaml" ''
|
|
tea:
|
|
price: 0.02 # denominated in the currency specified by --currency
|
|
title: Green Tea # title is optional, defaults to the key
|
|
|
|
coffee:
|
|
price: 1
|
|
|
|
bamba:
|
|
price: 3
|
|
|
|
beer:
|
|
price: 7
|
|
|
|
hat:
|
|
price: 15
|
|
|
|
tshirt:
|
|
price: 25
|
|
'';
|
|
|
|
in {
|
|
options.services.nanopos = {
|
|
enable = mkOption {
|
|
type = types.bool;
|
|
default = false;
|
|
description = ''
|
|
If enabled, the nanopos service will be installed.
|
|
'';
|
|
};
|
|
port = mkOption {
|
|
type = types.port;
|
|
default = 9116;
|
|
description = ''
|
|
"The port on which to listen for connections.";
|
|
'';
|
|
};
|
|
itemsFile = mkOption {
|
|
type = types.path;
|
|
default = defaultItemsFile;
|
|
description = ''
|
|
"The items file (see nanopos README).";
|
|
'';
|
|
};
|
|
charged-url = mkOption {
|
|
type = types.str;
|
|
default = "http://localhost:9112";
|
|
description = ''
|
|
"The lightning charge server url.";
|
|
'';
|
|
};
|
|
host = mkOption {
|
|
type = types.str;
|
|
default = "127.0.0.1";
|
|
description = ''
|
|
"http server listen address.";
|
|
'';
|
|
};
|
|
extraArgs = mkOption {
|
|
type = types.separatedString " ";
|
|
default = "";
|
|
description = "Extra command line arguments passed to nanopos.";
|
|
};
|
|
enforceTor = nix-bitcoin-services.enforceTor;
|
|
};
|
|
|
|
config = mkIf cfg.enable {
|
|
assertions = [
|
|
{ assertion = config.services.lightning-charge.enable;
|
|
message = "nanopos requires lightning-charge.";
|
|
}
|
|
];
|
|
|
|
environment.systemPackages = [ pkgs.nix-bitcoin.nanopos ];
|
|
|
|
services.nginx = {
|
|
enable = true;
|
|
virtualHosts."_" = {
|
|
root = "/var/www";
|
|
extraConfig = ''
|
|
location /store/ {
|
|
proxy_pass http://${toString cfg.host}:${toString cfg.port};
|
|
rewrite /store/(.*) /$1 break;
|
|
}
|
|
'';
|
|
};
|
|
};
|
|
|
|
systemd.services.nanopos = {
|
|
description = "Run nanopos";
|
|
wantedBy = [ "multi-user.target" ];
|
|
requires = [ "lightning-charge.service" ];
|
|
after = [ "lightning-charge.service" ];
|
|
serviceConfig = nix-bitcoin-services.defaultHardening // {
|
|
EnvironmentFile = "${config.nix-bitcoin.secretsDir}/nanopos-env";
|
|
ExecStart = "${pkgs.nix-bitcoin.nanopos}/bin/nanopos -y ${cfg.itemsFile} -i ${toString cfg.host} -p ${toString cfg.port} -c ${toString cfg.charged-url} --show-bolt11 ${cfg.extraArgs}";
|
|
User = "nanopos";
|
|
Restart = "on-failure";
|
|
RestartSec = "10s";
|
|
} // (if cfg.enforceTor
|
|
then nix-bitcoin-services.allowTor
|
|
else nix-bitcoin-services.allowAnyIP)
|
|
// nix-bitcoin-services.nodejs;
|
|
};
|
|
users.users.nanopos = {
|
|
description = "nanopos User";
|
|
group = "nanopos";
|
|
};
|
|
users.groups.nanopos = {};
|
|
nix-bitcoin.secrets.nanopos-env.user = "nanopos";
|
|
};
|
|
}
|