lassulus / kpop Goto Github PK

...
kpop.write {
  "/srv/http/my-webblog" = {
    type = "path";
    src = ./myBlog; # copies into nix-store
  };
  "/srv/http/my-isos" = {
    type = "path";
    owner = "nginx";
    group = "nginx";
    mode = "u=rwXg=rwXo-rwX";
    src = "${toString ./.}/my-downloaded-isos"; # does not copy into the store
  };
  "/srv/http/nixos.iso" = {
    type = "curl";
    src = "http://nixos.org/isos/nixos-minimal.iso";
    owner = "nginx";
  };
  "/srv/http/my-generated-iso" = {
    type = "derivation";
    gcroot = "my-iso.gcroot";
    src = pkgs.writeText "this-should-be-an-iso.md" ''
      hello please pretend this is an iso
    '';
  };
  "/srv/http/stockholm" = {
    type = "git";
    src = "https://cgit.krebsco.de/stockholm";
  };
  "/srv/http/stooockholm" = {
    type = "symlink";
    target = "/srv/http/stockholm";
  };
  "/srv/http/something-we-cant-precalculate" = {
    type = "script";
    script = pkgs.writers.writeDash "do_cool_stuff" ''
      ${pkgs.curl}/bin/curl http://localhost:3000/some-stats.json |
        ${pkgs.jq}/bin/jq '.[] | select('somestat')' > "$out"
    '';
  };
  "/var/lib/secrets" = {
    type = "passwordstore";
    src = "$HOME/.password-store/hosts/somemagichost";
    name = "hosts/somemagichost";
  };
}
...

  ... some nixos config ...
  systemd.services.nginx.serviceConfig.ExecStartPre = [
    (pkgs.writeScript "populate-stockholm" ''
      ${kpop.lib.git {
        src = "https://cgit.krebsco.de/stockholm"
      }} "/srv/http/stockholm"
    )
  ];

  ... some nixos config ...
  systemd.services.my-weather-service = {
    ...
    serviceConfig.ExecStartPre = [
      "+$(pkgs.writers.writeDash "get_secrets" ''
        ${kpop.write {
          "/weather.token" = {
            type = "age";
            src = "/var/lib/crypted_secrets/myServer/weather-api-token";
          };
        }} "/run/weather/api-token"
      '';
    ];
  };