5e40066c7f
The strategy of invoking node2nix inside a derivation (installPhase in this case) does not work, as under NixOS installations there is no network traffic allowed during a derivation build. Hence, we move node2nix outside and rewrite the packaging into the modules. Also switch to callPackage instead of plain imports. This could probably be done on all other imported packages inside of nix-bitcoin-pkgs.nix.
84 lines
1.8 KiB
Nix
84 lines
1.8 KiB
Nix
{ config, lib, pkgs, ... }:
|
|
|
|
with lib;
|
|
|
|
let
|
|
cfg = config.services.nanopos;
|
|
defaultItemsFile = pkgs.writeText "items.yaml" ''
|
|
tea:
|
|
price: 0.02 # denominated in the currency specified by --currency
|
|
title: Green Tea # title is optional, defaults to the key
|
|
|
|
coffee:
|
|
price: 1
|
|
|
|
bamba:
|
|
price: 3
|
|
|
|
beer:
|
|
price: 7
|
|
|
|
hat:
|
|
price: 15
|
|
|
|
tshirt:
|
|
price: 25
|
|
'';
|
|
|
|
in {
|
|
options.services.nanopos = {
|
|
enable = mkOption {
|
|
type = types.bool;
|
|
default = false;
|
|
description = ''
|
|
If enabled, the nanopos service will be installed.
|
|
'';
|
|
};
|
|
port = mkOption {
|
|
type = types.ints.u16;
|
|
default = 9116;
|
|
description = ''
|
|
"The port on which to listen for connections.";
|
|
'';
|
|
};
|
|
itemsFile = mkOption {
|
|
type = types.path;
|
|
default = defaultItemsFile;
|
|
description = ''
|
|
"The items file (see nanopos README).";
|
|
'';
|
|
};
|
|
};
|
|
|
|
config = mkIf cfg.enable {
|
|
users.users.nanopos =
|
|
{
|
|
description = "nanopos User";
|
|
group = "nanopos";
|
|
extraGroups = [ "keys" ];
|
|
};
|
|
users.groups.nanopos = {
|
|
name = "nanopos";
|
|
};
|
|
|
|
systemd.services.nanopos = {
|
|
description = "Run nanopos";
|
|
wantedBy = [ "multi-user.target" ];
|
|
requires = [ "lightning-charge.service" ];
|
|
after = [ "lightning-charge.service" ];
|
|
serviceConfig = {
|
|
EnvironmentFile = "/secrets/lightning-charge-api-token-for-nanopos";
|
|
ExecStart = "${pkgs.nanopos}/bin/nanopos -y ${cfg.itemsFile} -p ${toString cfg.port} --show-bolt11";
|
|
|
|
User = "nanopos";
|
|
Restart = "on-failure";
|
|
RestartSec = "10s";
|
|
PrivateTmp = "true";
|
|
ProtectSystem = "full";
|
|
NoNewPrivileges = "true";
|
|
PrivateDevices = "true";
|
|
};
|
|
};
|
|
};
|
|
}
|