Flake for my desktop, laptop, and my homelab.
attempt fix
+28
-4
+23
-2
modules/services/gotify.nix
+23
-2
modules/services/gotify.nix
···
8
8
# keep-sorted end
9
9
...
10
10
}: let
11
-
inherit (lib) mkForce;
11
+
inherit
12
+
(lib)
13
+
# keep-sorted start
14
+
getExe
15
+
mkForce
16
+
mkAfter
17
+
# keep-sorted end
18
+
;
12
19
13
20
templates = config.sops.templates;
14
21
inherit (vars) groundDomain;
···
55
62
};
56
63
57
64
systemd.services.gotify-server = {
58
-
after = [
65
+
after = mkAfter [
59
66
# keep-sorted start
60
67
"authentik-worker.service"
61
68
"authentik.service"
···
63
70
"sops-install-secrets.service"
64
71
# keep-sorted end
65
72
];
73
+
66
74
requires = [
67
75
# keep-sorted start
68
76
"authentik-worker.service"
···
75
83
preStart = let
76
84
inherit (pkgs.nur.repos.adam0) gotifyPlugins;
77
85
inherit (config.services.gotify) stateDirectoryName;
86
+
oidcDiscoveryUrl = "${config.services.gotify.environment.GOTIFY_OIDC_ISSUER}.well-known/openid-configuration";
78
87
in ''
88
+
for attempt in $(${pkgs.coreutils}/bin/seq 1 60); do
89
+
if ${getExe pkgs.curl} --fail --silent --show-error --max-time 5 ${oidcDiscoveryUrl} >/dev/null; then
90
+
break
91
+
fi
92
+
93
+
if [ "$attempt" -eq 60 ]; then
94
+
exit 1
95
+
fi
96
+
97
+
${pkgs.coreutils}/bin/sleep 2
98
+
done
99
+
79
100
install -Dm755 ${gotifyPlugins.gotify-authentik-plugin}/authentik-plugin.so /var/lib/${stateDirectoryName}/data/plugins/authentik-plugin.so
80
101
install -Dm755 ${gotifyPlugins.gotify-webhooks-plugin}/webhooks-plugin.so /var/lib/${stateDirectoryName}/data/plugins/webhooks-plugin.so
81
102
chown gotify:gotify /var/lib/gotify/data/plugins/*.so
+5
-2
modules/services/traefik.nix
+5
-2
modules/services/traefik.nix
···
2
2
flake.modules.nixos.traefik = {
3
3
# keep-sorted start
4
4
config,
5
+
lib,
5
6
vars,
6
7
# keep-sorted end
7
8
...
8
9
}: let
10
+
inherit (lib) mkAfter;
11
+
9
12
secrets = config.sops.secrets;
10
13
templates = config.sops.templates;
11
14
···
246
249
tmpfiles.rules = ["d /var/log/traefik 0750 traefik traefik -"];
247
250
248
251
services.traefik = {
249
-
wants = ["podman.socket"];
250
-
after = ["podman.socket"];
252
+
wants = mkAfter ["podman.socket"];
253
+
after = mkAfter ["podman.socket"];
251
254
252
255
serviceConfig.TimeoutStopSec = "60s";
253
256
stopIfChanged = false;