{ config, lib, pkgs, ... }: with lib; let cfg = config.services.nix-bitcoin-webindex; inherit (config) nix-bitcoin-services; indexFile = pkgs.writeText "index.html" ''

nix-bitcoin

store

lightning node: CLIGHTNING_ID

''; createWebIndex = pkgs.writeText "make-index.sh" '' set -e mkdir -p /var/www/ cp ${indexFile} /var/www/index.html chown -R nginx /var/www/ nodeinfo . <(nodeinfo) sed -i "s/CLIGHTNING_ID/$CLIGHTNING_ID/g" /var/www/index.html ''; in { options.services.nix-bitcoin-webindex = { enable = mkOption { type = types.bool; default = false; description = '' If enabled, the webindex service will be installed. ''; }; enforceTor = nix-bitcoin-services.enforceTor; }; config = mkIf cfg.enable { services.nginx = { enable = true; virtualHosts."_" = { root = "/var/www"; extraConfig = '' location /store/ { proxy_pass http://127.0.0.1:${toString config.services.nanopos.port}; rewrite /store/(.*) /$1 break; } ''; }; }; services.tor.hiddenServices.nginx = { map = [{ port = 80; } { port = 443; }]; version = 3; }; # create-web-index systemd.services.create-web-index = { description = "Get node info"; wantedBy = [ "multi-user.target" ]; after = [ "nodeinfo.service" ]; path = with pkgs; [ nix-bitcoin.nodeinfo config.services.clightning.cli jq sudo ]; serviceConfig = { ExecStart="${pkgs.bash}/bin/bash ${createWebIndex}"; User = "root"; Type = "simple"; RemainAfterExit="yes"; Restart = "on-failure"; RestartSec = "10s"; } // nix-bitcoin-services.defaultHardening // (if cfg.enforceTor then nix-bitcoin-services.allowTor else nix-bitcoin-services.allowAnyIP ); }; }; }