nix-bitcoin/modules/spark-wallet.nix

90 lines
2.7 KiB
Nix
Raw Normal View History

2018-12-10 08:34:41 -08:00
{ config, lib, pkgs, ... }:
with lib;
let
cfg = config.services.spark-wallet;
nbLib = config.nix-bitcoin.lib;
# Use wasabi rate provider because the default (bitstamp) doesn't accept
# connections through Tor
torRateProvider = "--rate-provider wasabi --proxy socks5h://${config.services.tor.client.socksListenAddress}";
startScript = ''
${optionalString (cfg.getPublicAddressCmd != "") ''
publicURL="--public-url http://$(${cfg.getPublicAddressCmd})"
''}
exec ${config.nix-bitcoin.pkgs.spark-wallet}/bin/spark-wallet \
2020-10-16 08:43:04 -07:00
--ln-path '${config.services.clightning.networkDir}' \
--host ${cfg.address} --port ${toString cfg.port} \
--config '${config.nix-bitcoin.secretsDir}/spark-wallet-login' \
${optionalString cfg.enforceTor torRateProvider} \
$publicURL \
--pairing-qr --print-key ${cfg.extraArgs}
'';
2018-12-10 08:34:41 -08:00
in {
options.services.spark-wallet = {
2021-02-01 13:53:15 -08:00
enable = mkEnableOption "spark-wallet";
address = mkOption {
type = types.str;
default = "localhost";
description = "http(s) server address.";
};
port = mkOption {
type = types.port;
default = 9737;
description = "http(s) server port.";
};
extraArgs = mkOption {
type = types.separatedString " ";
default = "";
description = "Extra command line arguments passed to spark-wallet.";
};
getPublicAddressCmd = mkOption {
type = types.str;
default = "";
description = ''
Bash expression which outputs the public service address.
If set, spark-wallet prints a QR code to the systemd journal which
encodes an URL for accessing the web interface.
'';
};
2021-02-16 08:51:15 -08:00
user = mkOption {
type = types.str;
default = "spark-wallet";
description = "The user as which to run spark-wallet.";
};
group = mkOption {
type = types.str;
default = cfg.user;
description = "The group as which to run spark-wallet.";
};
inherit (nbLib) enforceTor;
2018-12-10 08:34:41 -08:00
};
config = mkIf cfg.enable {
2020-10-18 05:49:20 -07:00
services.clightning.enable = true;
2020-06-15 03:34:11 -07:00
2021-02-16 08:51:15 -08:00
users.users.${cfg.user} = {
group = cfg.group;
extraGroups = [ config.services.clightning.group ];
};
2021-02-16 08:51:15 -08:00
users.groups.${cfg.group} = {};
2019-01-02 07:17:57 -08:00
systemd.services.spark-wallet = {
wantedBy = [ "multi-user.target" ];
requires = [ "clightning.service" ];
after = [ "clightning.service" ];
script = startScript;
serviceConfig = nbLib.defaultHardening // {
2021-02-16 08:51:15 -08:00
User = cfg.user;
2019-01-02 07:17:57 -08:00
Restart = "on-failure";
RestartSec = "10s";
} // (if cfg.enforceTor
then nbLib.allowTor
else nbLib.allowAnyIP)
// nbLib.nodejs;
2018-12-10 08:34:41 -08:00
};
2021-02-16 08:51:15 -08:00
nix-bitcoin.secrets.spark-wallet-login.user = cfg.user;
2019-01-02 07:17:57 -08:00
};
2018-12-10 08:34:41 -08:00
}