{ pkgs, config, lib, ... }: /* this is a wrapper module for glance that allows you to to pass monitor entries in with nix, all declaratively! | <8yy> | V V # add to glance modules.services.glance.links.mediastack = [{ title = service; url = "https://${cfg.url}"; error-url = "http://${homelab.host_ip}:${toString cfg.port}"; check-url = "http://${homelab.host_ip}:${toString cfg.port}"; icon = "di:${service}"; allow-insecure = true; }]; */ let service = "glance"; cfg = config.modules.services.${service}; sec = config.sops.secrets; homelab = config.modules.homelab; in { options.modules.services.${service} = { enable = lib.mkEnableOption "enables ${service}"; # set port options port = lib.mkOption { type = lib.types.int; default = 7700; description = "set port for ${service} (default: ${toString cfg.port}"; }; url = lib.mkOption { type = lib.types.str; default = "${homelab.base_domain}"; description = "set domain for ${service}"; }; data_dir = lib.mkOption { type = lib.types.str; default = "/var/lib/${service}"; description = "set data directory for ${service}"; }; ids = lib.mkOption { type = lib.types.int; default = cfg.port; description = "set uid and pid of ${service} user (matches port by default)"; }; backup = lib.mkOption { type = lib.types.bool; default = true; description = "enable backups for ${service}"; }; links = { services = lib.mkOption { type = lib.types.listOf lib.types.attrs; default = []; description = "list of links for ${service}"; }; mediastack = lib.mkOption { type = lib.types.listOf lib.types.attrs; default = []; description = "list of links for ${service}"; }; system = lib.mkOption { type = lib.types.listOf lib.types.attrs; default = []; description = "list of links for ${service}"; }; }; }; config = lib.mkIf cfg.enable { # declare ${service} group users.groups.${service} = { gid = lib.mkForce cfg.ids; }; # declare ${service} user users.users.${service} = { description = "${service} server user"; uid = lib.mkForce cfg.ids; isSystemUser = true; home = cfg.data_dir; createHome = true; group = "${service}"; extraGroups = []; }; services.${service} = { enable = true; openFirewall = true; settings = { server = { host = "0.0.0.0"; port = cfg.port; }; pages = [ { name = "snowbelle"; hide-desktop-navigation = true; columns = [ { size = "small"; widgets = [ { type = "calendar"; first-day-of-week = "monday"; } { type = "server-stats"; servers = [ { type = "local"; name = "snowbelle"; } ]; } { type = "clock"; hour-format = "24h"; timezones = [ { timezone = "America/Chicago"; label = "HTX"; } { timezone = "America/Denver"; label = "AF"; } ]; } { type = "twitch-channels"; channels = [ "mang0" "SaltSSBM" "thewaffle77" "ironmouse" "linustech" ]; } ]; } { size = "full"; widgets = [ { type = "search"; autofocus = true; search-engine = "https://www.ecosia.org/search?q={QUERY}"; new-tab = true; bangs = [ { title = "YouTube"; shortcut = "!y"; url = "https://www.youtube.com/results?search_query={QUERY}"; } { title = "Google"; shortcut = "!g"; url = "https://www.google.com/search?q={QUERY}"; } { title = "Github"; shortcut = "!gh"; url = "https://github.com/search?q={QUERY}&type=repositories"; } ]; } { type = "monitor"; cache = "1m"; title = "services"; sites = cfg.links.services; } { type = "monitor"; cache = "1m"; title = "mediastack"; sites = cfg.links.mediastack; } { type = "monitor"; cache = "1m"; title = "system"; sites = cfg.links.system; } { type = "custom-api"; title = "recpro"; url = "https://api.mcstatus.io/v2/status/java/mc.recoil.pro"; cache = "5s"; template = "
\n
\n {{ if .JSON.Bool \"online\" }}\n \n {{ else }}\n \n \n \n {{ end }}\n
\n\n
\n \n {{ .JSON.String \"host\" }}\n {{ if .JSON.Bool \"online\" }}\n \n {{ else }}\n \n {{ end }}\n \n\n \n
\n
"; } ]; } { size = "small"; widgets = [ { type = "weather"; location = "Pearland, Texas, United States"; units = "imperial"; hour-format = "24h"; } { type = "custom-api"; title = "uptime"; title-url = "127.0.0.1:7901"; url = "127.0.0.1:7901/api/status-page/glance"; subrequests = {heartbeats = {url = "127.0.0.1:7901/api/status-page/heartbeat/glance";};}; cache = "10m"; template = "{{ $hb := .Subrequest \"heartbeats\" }}\n\n{{ if not (.JSON.Exists \"publicGroupList\") }}\n

Error reading response

\n{{ else if eq (len (.JSON.Array \"publicGroupList\")) 0 }}\n

No monitors found

\n{{ else }}\n\n\n{{ end }}\n"; } { type = "markets"; markets = [ { symbol = "SPY"; name = "S&P 500"; } { symbol = "XMR-USD"; name = "Monero"; } { symbol = "NVDA"; name = "NVIDIA"; } { symbol = "AAPL"; name = "Apple"; } { symbol = "MSFT"; name = "Microsoft"; } ]; } { type = "releases"; cache = "1d"; repositories = [ "glanceapp/glance" "go-gitea/gitea" "immich-app/immich" "syncthing/syncthing" ]; } ]; } ]; } ]; }; }; # override umask to make permissions work out systemd.services.${service}.serviceConfig = { UMask = lib.mkForce "0007"; # User = "${service}"; # Group = "${service}"; }; # # open firewall # networking.firewall.allowedTCPPorts = [ cfg.port ]; # sops.secrets = { # "${service}_" = { # owner = "${service}"; # group = "${service}"; # }; # }; # add to caddy for reverse proxy services.caddy.virtualHosts."${cfg.url}" = { # serverAliases = [ "${homelab.public_domain}" ]; extraConfig = '' tls ${sec."ssl_blakedheld_crt".path} ${sec."ssl_blakedheld_key".path} reverse_proxy http://127.0.0.1:${toString cfg.port} ''; }; # add to backups modules.system.backups.baks = { ${service} = { paths = [ cfg.data_dir ]; }; }; }; }