summary refs log tree commit diff
path: root/services/dendrite.nix
blob: 5eecfd6d813787424857ccc41f18a9710fe9ef87 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
{ lib, pkgs, unstablePkgs, ... }:

let
  inherit (pkgs) dockerTools;

  dendriteDir = "/srv/dendrite";

  dendrite = unstablePkgs.dendrite;

  baseImageArm = dockerTools.pullImage {
    imageName = "alpine";
    imageDigest = "sha256:1e42bbe2508154c9126d48c2b8a75420c3544343bf86fd041fb7527e017a4b4a";
    sha256 = "06c0q5kk60i89y1d83a28wk282ymp806xjcsmlca4cwwqp590j0q";
    finalImageName = "alpine";
    finalImageTag = "3.20.3";
    os = "linux";
    arch = "arm64";
  };

  dendriteImage = dockerTools.buildLayeredImage {
    name = "dendrite";
    tag = dendrite.version;
    fromImage = baseImageArm;

    contents = [ dendrite ];
  };

in
{
  virtualisation.oci-containers.containers = {
    dendrite = {
      imageFile = dendriteImage;
      image = "dendrite:${dendrite.version}";
      ports = [ 
        "127.0.0.1:8008:8008"
        "127.0.0.1:8448:8448"
      ];

      volumes = [
        "${dendriteDir}/config:/etc/dendrite"
        "${dendriteDir}/data:/var/dendrite"
      ];

      entrypoint = "${dendrite}/bin/dendrite";
      workdir = "/etc/dendrite";
      
      dependsOn = [ "dendrite-db" ];

      extraOptions = [
        "--network-alias=dendrite"
        "--network=dendrite"
      ];
    };

    dendrite-db = {
      # TODO: pull through `dockerTools`.
      image = "postgres:15-alpine";
      volumes = [ "${dendriteDir}/pgdata:/var/lib/postgresql/data" ];

      environment = {
        "POSTGRES_DATABASE" = "dendrite";
        "POSTGRES_USER" = "dendrite";
        "POSTGRES_PASSWORD" = "TFbQi2cHnzwe26";
      };

      extraOptions = [
        "--network-alias=db"
        "--network=dendrite"
      ];
    };
  };

  systemd = let
    root = "docker-dendrite-root";
    network = "docker-dendrite-network";

    containerService = {
      serviceConfig = {
        Restart = lib.mkOverride 90 "always";
        RestartMaxDelaySec = lib.mkOverride 90 "1m";
        RestartSec = lib.mkOverride 90 "100ms";
        RestartSteps = lib.mkOverride 90 9;
      };
      after = [ "${network}.service" ]; requires = [ "${network}.service" ];
      partOf = [ "${root}.target" ]; wantedBy = [ "${root}.target" ];
    };
  in {
    services = {
      "docker-dendrite-db" = containerService;
      "docker-dendrite" = containerService;

      "${network}" = {
        path = [ pkgs.docker ];
        serviceConfig = {
          Type = "oneshot";
          RemainAfterExit = true;
          ExecStop = "docker network rm -f dendrite";
        };
        script = ''
          docker network inspect dendrite || docker network create dendrite --driver=bridge
        '';
        partOf = [ "${root}.target" ]; wantedBy = [ "${root}.target" ];
      };
    };

    targets = {
      "${root}" = { wantedBy = [ "multi-user.target" ]; };
    };
  };
}