guix-glicid/glicid/services/caddy.scm

(define-module (glicid services caddy)
               #:use-module (guix gexp)
               #:use-module (gnu packages bash)
               #:use-module (gnu services)
               #:use-module (gnu services shepherd)
               #:use-module (guix records)
               #:use-module (gnu system shadow)
               #:use-module (gnu system privilege)
               #:use-module (ice-9 match)
               #:use-module (glicid packages caddy)
               #:export (%caddy-accounts
                          caddy-configuration
                          caddy-configuration?
                          caddy-shepherd-service
                          caddy-service-type
                          ))


(define %caddy-accounts
  (list
    (user-group (name "caddy")(system? #t))
    (user-account
      (name "caddy")
      (group "caddy")
      (system? #t)
      (home-directory "/var/lib/caddy")
      (shell (file-append bash "/sbin/nologin")))))

(define-record-type* <caddy-configuration> caddy-configuration
                     make-caddy-configuration
                     caddy-configuration?
                     (caddy caddy-configuration-caddy (default caddy-dirty))
                     (config-file caddy-config-file (default "/etc/caddy/Caddyfile"))
                     (log-file caddy-log-file (default "/var/log/caddy.log"))
                     )

(define caddy-service
  (match-lambda
    (($ <caddy-configuration> caddy config-file log-file)
     (list (shepherd-service (provision '(caddy))
                             (documentation "Run caddy.")
                             (requirement '(user-processes))
                             (respawn? #t)
                             (start #~(make-forkexec-constructor (list #$(file-append caddy "/sbin/caddy")
                                                                       "-c"
                                                                       #$config-file)
                                                                 #:log-file #$log-file
                                                                 #:environment-variables (list 
                                                                                           (string-append "PATH="
                                                                                                          "/run/current-system/profile/bin"
                                                                                                          ":/run/current-system/profile/sbin"
                                                                                                          ":/run/current-system/profile/libexec"))))
                             (stop #~(make-kill-destructor)))))))


(define caddy-service-type
  (service-type
    (name 'caddy)
    (default-value (caddy-configuration))
    (extensions (list
                  (service-extension shepherd-root-service-type (compose list caddy-service))
                  (service-extension privileged-program-service-type (const (list
                                                                              (privileged-program
                                                                                (program (file-append caddy-dirty "/sbin/caddy"))
                                                                                (capabilities "cap_net_bind_service=+ep")
                                                                                (user "caddy")
                                                                                (group "caddy")
                                                                                ))))
                  ))
    (description "run caddy web server service")))