diff options
author | ThinkChaos <ThinkChaos@users.noreply.github.com> | 2023-02-27 12:58:29 -0500 |
---|---|---|
committer | ThinkChaos <ThinkChaos@users.noreply.github.com> | 2023-04-19 12:18:47 -0400 |
commit | f7b9a1c561e9c03bad210b9d98dc576a47d1e029 (patch) | |
tree | 0db64f420276e3fe4d181afdd0f7b7679f1a2889 /nixos | |
parent | 184131f50dc568f971174b8a5d5033c363115c45 (diff) |
nixos/gitea: disable LFS related code when it is not configured
Diffstat (limited to 'nixos')
-rw-r--r-- | nixos/modules/services/misc/gitea.nix | 20 |
1 files changed, 13 insertions, 7 deletions
diff --git a/nixos/modules/services/misc/gitea.nix b/nixos/modules/services/misc/gitea.nix index 86a9b21b008e0..3679faf9ab914 100644 --- a/nixos/modules/services/misc/gitea.nix +++ b/nixos/modules/services/misc/gitea.nix @@ -399,7 +399,6 @@ in { DOMAIN = cfg.domain; STATIC_ROOT_PATH = toString cfg.staticRootPath; - LFS_JWT_SECRET = "#lfsjwtsecret#"; ROOT_URL = cfg.rootUrl; } (mkIf cfg.enableUnixSocket { @@ -412,8 +411,8 @@ in }) (mkIf cfg.lfs.enable { LFS_START_SERVER = true; + LFS_JWT_SECRET = "#lfsjwtsecret#"; }) - ]; session = { @@ -434,7 +433,7 @@ in JWT_SECRET = "#oauth2jwtsecret#"; }; - lfs = mkIf (cfg.lfs.enable) { + lfs = mkIf cfg.lfs.enable { PATH = cfg.lfs.contentDir; }; }; @@ -466,9 +465,6 @@ in "d '${cfg.dump.backupDir}' 0750 ${cfg.user} ${cfg.group} - -" "z '${cfg.dump.backupDir}' 0750 ${cfg.user} ${cfg.group} - -" "Z '${cfg.dump.backupDir}' - ${cfg.user} ${cfg.group} - -" - "d '${cfg.lfs.contentDir}' 0750 ${cfg.user} ${cfg.group} - -" - "z '${cfg.lfs.contentDir}' 0750 ${cfg.user} ${cfg.group} - -" - "Z '${cfg.lfs.contentDir}' - ${cfg.user} ${cfg.group} - -" "d '${cfg.repositoryRoot}' 0750 ${cfg.user} ${cfg.group} - -" "z '${cfg.repositoryRoot}' 0750 ${cfg.user} ${cfg.group} - -" "Z '${cfg.repositoryRoot}' - ${cfg.user} ${cfg.group} - -" @@ -490,6 +486,11 @@ in # If we have a folder or symlink with gitea locales, remove it # And symlink the current gitea locales in place "L+ '${cfg.stateDir}/conf/locale' - - - - ${cfg.package.out}/locale" + + ] ++ lib.optionals cfg.lfs.enable [ + "d '${cfg.lfs.contentDir}' 0750 ${cfg.user} ${cfg.group} - -" + "z '${cfg.lfs.contentDir}' 0750 ${cfg.user} ${cfg.group} - -" + "Z '${cfg.lfs.contentDir}' - ${cfg.user} ${cfg.group} - -" ]; systemd.services.gitea = { @@ -532,9 +533,11 @@ in ${exe} generate secret JWT_SECRET > ${oauth2JwtSecret} fi + ${lib.optionalString cfg.lfs.enable '' if [ ! -s ${lfsJwtSecret} ]; then ${exe} generate secret LFS_JWT_SECRET > ${lfsJwtSecret} fi + ''} if [ ! -s ${internalToken} ]; then ${exe} generate secret INTERNAL_TOKEN > ${internalToken} @@ -544,9 +547,12 @@ in ${replaceSecretBin} '#secretkey#' '${secretKey}' '${runConfig}' ${replaceSecretBin} '#dbpass#' '${cfg.database.passwordFile}' '${runConfig}' ${replaceSecretBin} '#oauth2jwtsecret#' '${oauth2JwtSecret}' '${runConfig}' - ${replaceSecretBin} '#lfsjwtsecret#' '${lfsJwtSecret}' '${runConfig}' ${replaceSecretBin} '#internaltoken#' '${internalToken}' '${runConfig}' + ${lib.optionalString cfg.lfs.enable '' + ${replaceSecretBin} '#lfsjwtsecret#' '${lfsJwtSecret}' '${runConfig}'" + ''} + ${lib.optionalString (cfg.mailerPasswordFile != null) '' ${replaceSecretBin} '#mailerpass#' '${cfg.mailerPasswordFile}' '${runConfig}' ''} |