service/exportarr: fix apikey

This commit is contained in:
Felix Buehler 2023-07-25 22:20:49 +02:00
parent 724ca9dc1a
commit e4d8129873
7 changed files with 97 additions and 13 deletions

View file

@ -4,16 +4,17 @@ let
mkExportarrService = name: conf:
let
exportarrEnvironment = {
exportarrEnvironment = (
lib.mapAttrs (_: toString) conf.environment
) // {
PORT = toString conf.port;
URL = conf.url;
} // (
lib.mapAttrs (_: toString) conf.environment
);
API_KEY_FILE = lib.mkIf (conf.apiKeyFile != null) "%d/api-key";
};
in
lib.nameValuePair "exportarr-${name}" {
description = "Exportarr Service ${name}";
script = ''exec ${conf.package}/bin/exportarr "$@"'';
script = ''exec ${conf.package}/bin/exportarr ${name} "$@"'';
serviceConfig = {
Restart = "on-failure";
User = "exportarr-${name}";
@ -23,6 +24,9 @@ let
WorkingDirectory = "/var/lib/exportarr-${name}";
RuntimeDirectory = "exportarr-${name}";
LoadCredential = lib.optionalString (conf.apiKeyFile != null)
"api-key:${conf.apiKeyFile}";
CapabilityBoundingSet = "";
LockPersonality = true;
PrivateDevices = true;
@ -88,6 +92,14 @@ in
'';
};
apiKeyFile = lib.mkOption {
type = lib.types.nullOr lib.types.path;
default = null;
description = lib.mdDoc ''
File containing the api-key.
'';
};
package = lib.mkPackageOptionMD pkgs "exportarr" { };
environment = lib.mkOption {
@ -97,7 +109,6 @@ in
See [the configuration guide](https://github.com/onedr0p/exportarr#configuration) for available options.
'';
example = {
API_KEY_FILE = "/run/secrets/exportarr";
PROWLARR__BACKFILL = true;
};
};
@ -107,6 +118,12 @@ in
};
config = lib.mkIf (cfg != { }) {
assertions = lib.mapAttrsToList
(name: config: {
assertion = builtins.elem name [ "sonarr" "radarr" "lidarr" "prowlarr" "readarr" "sabnzbd" ];
message = "exportarr does not support this service.";
})
cfg;
systemd.services = lib.mapAttrs' mkExportarrService cfg;
};
}