nixos/shokoserver: init

nixos/modules/misc/ids.nix

@@ -355,6 +355,7 @@ in
       rstudio-server = 324;
       localtimed = 325;
       automatic-timezoned = 326;
+      shoko = 328;
 
       # When adding a uid, make sure it doesn't match an existing gid. And don't use uids above 399!
 
@@ -666,6 +667,7 @@ in
       localtimed = 325;
       automatic-timezoned = 326;
       uinput = 327;
+      shoko = 328;
 
       # When adding a gid, make sure it doesn't match an existing
       # uid. Users and groups with the same name should have equal

nixos/modules/module-list.nix

@@ -835,6 +835,7 @@
   ./services/misc/safeeyes.nix
   ./services/misc/sdrplay.nix
   ./services/misc/serviio.nix
+  ./services/misc/shokoserver.nix
   ./services/misc/sickbeard.nix
   ./services/misc/signald.nix
   ./services/misc/siproxd.nix

nixos/modules/services/misc/shokoserver.nix

@@ -0,0 +1,78 @@
+{
+  lib,
+  config,
+  pkgs,
+  ...
+}:
+let
+  inherit (lib) mkOption types mkIf;
+
+  cfg = config.services.shokoserver;
+in
+{
+  options = {
+    services.shokoserver = {
+      enable = lib.mkEnableOption "ShokoServer";
+
+      package = lib.mkPackageOption pkgs "shokoserver" { };
+
+      openFirewall = mkOption {
+        type = types.bool;
+        default = false;
+        description = ''
+          Open ports in the firewall for the ShokoAnime api and web interface.
+        '';
+      };
+
+      user = mkOption {
+        type = types.str;
+        default = "shoko";
+        description = "User account under which ShokoServer runs.";
+      };
+
+      group = mkOption {
+        type = types.str;
+        default = "shoko";
+        description = "Group under which ShokoServer runs.";
+      };
+
+      dataDir = mkOption {
+        type = types.str;
+        default = "/var/lib/shoko";
+        description = "The directory where ShokoServer stores its data files.";
+      };
+    };
+  };
+
+  config = mkIf cfg.enable {
+    users = {
+      users.shoko = mkIf (cfg.user == "shoko") {
+        inherit (cfg) group;
+        home = cfg.dataDir;
+        uid = config.ids.uids.shoko;
+        createHome = true;
+      };
+
+      groups.shoko.gid = mkIf (cfg.group == "shoko") config.ids.gids.shoko;
+    };
+
+    systemd.services.shokoserver = {
+      description = "ShokoServer";
+      after = [ "network.target" ];
+      wantedBy = [ "multi-user.target" ];
+
+      serviceConfig = {
+        Type = "simple";
+        User = cfg.user;
+        Group = cfg.group;
+        Environment = "SHOKO_HOME=${cfg.dataDir}";
+        ExecStart = lib.getExe pkgs.shokoserver;
+        Restart = "on-failure";
+      };
+    };
+
+    networking.firewall.allowedTCPPorts = mkIf cfg.openFirewall [ 8111 ];
+  };
+
+  meta.maintainers = [ lib.maintainers.diniamo ];
+}

nixos/tests/all-tests.nix

@@ -906,6 +906,7 @@ in {
   shadow = handleTest ./shadow.nix {};
   shadowsocks = handleTest ./shadowsocks {};
   shattered-pixel-dungeon = handleTest ./shattered-pixel-dungeon.nix {};
+  shokoserver = handleTest ./shokoserver.nix {};
   shiori = handleTest ./shiori.nix {};
   signal-desktop = handleTest ./signal-desktop.nix {};
   silverbullet = handleTest ./silverbullet.nix {};

nixos/tests/shokoserver.nix

@@ -0,0 +1,17 @@
+import ./make-test-python.nix (
+  { lib, ... }:
+  {
+    name = "ShokoServer";
+
+    nodes.machine = {
+      services.shokoserver.enable = true;
+    };
+    testScript = ''
+      machine.wait_for_unit("shokoserver.service")
+      machine.wait_for_open_port(8111)
+      machine.succeed("curl --fail http://localhost:8111")
+    '';
+
+    meta.maintainers = [ lib.maintainers.diniamo ];
+  }
+)