cluster/services/c-f32aebf5: drop
This commit is contained in:
parent
b9d0c97887
commit
36a5dd6927
2 changed files with 0 additions and 209 deletions
|
|
@ -1,6 +0,0 @@
|
|||
{
|
||||
services.c-f32aebf5 = {
|
||||
nodes.host = [ "VEGAS" ];
|
||||
nixos.host = [ ./host.nix ];
|
||||
};
|
||||
}
|
||||
|
|
@ -1,203 +0,0 @@
|
|||
{ config, lib, pkgs, ... }:
|
||||
|
||||
let
|
||||
cid = "c-f32aebf5";
|
||||
link = config.links.${cid};
|
||||
root = "/var/lib/${cid}";
|
||||
home = "${root}/pfx";
|
||||
|
||||
sptAki = {
|
||||
release-3_8_0 = pkgs.fetchurl {
|
||||
url = "https://dev.sp-tarkov.com/SPT/Stable-releases/releases/download/3.8.0/RELEASE-SPT-3.8.0-29197-2dd4d91.7z";
|
||||
hash = "sha256-IRMzI+hQkoCmVJXkAV4c/b2l/MtLb98IwDftMbFTlxA=";
|
||||
};
|
||||
update-3_8_1 = pkgs.fetchurl {
|
||||
url = "https://spt-releases.modd.in/SPT-3.8.1-29197-d3ac83e.7z";
|
||||
hash = "sha256-3roQlHgi8CUtLKji2YZLNgo8s92eUv3a+AbKo7VFB2U=";
|
||||
};
|
||||
};
|
||||
|
||||
installSpt = pkgs.writeShellScript "install-spt" ''
|
||||
mkdir spt
|
||||
cd spt
|
||||
${pkgs.p7zip}/bin/7z x -y ${sptAki.release-3_8_0}
|
||||
${pkgs.p7zip}/bin/7z x -y ${sptAki.update-3_8_1}
|
||||
'';
|
||||
in
|
||||
|
||||
{
|
||||
links.${cid} = {
|
||||
protocol = "http";
|
||||
ipv4 = config.reflection.interfaces.primary.addrPublic;
|
||||
};
|
||||
|
||||
users.users.${cid} = {
|
||||
isNormalUser = true;
|
||||
group = cid;
|
||||
inherit home;
|
||||
openssh.authorizedKeys.keys = [
|
||||
"ssh-rsa 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"
|
||||
];
|
||||
};
|
||||
users.groups.${cid} = {};
|
||||
|
||||
systemd.services.${cid} = {
|
||||
wantedBy = [ "multi-user.target" ];
|
||||
|
||||
path = [
|
||||
pkgs.jq
|
||||
pkgs.wine64Packages.staging
|
||||
pkgs.tmux
|
||||
];
|
||||
|
||||
preStart = ''
|
||||
cd ${home}
|
||||
test -e drive_c || wine64 wineboot
|
||||
|
||||
cd drive_c
|
||||
test -e spt || ${installSpt}
|
||||
|
||||
cd spt
|
||||
jq < Aki_Data/Server/configs/http.json > .http-new.json \
|
||||
'.ip = "${link.ipv4}" | .port = ${link.portStr} | .backendIp = "${link.ipv4}" | .backendPort = ${link.portStr}'
|
||||
mv .http-new.json Aki_Data/Server/configs/http.json
|
||||
'';
|
||||
|
||||
script = ''
|
||||
cd ${home}/drive_c/spt
|
||||
tmux new -s 0 -d wine64 Aki.Server.exe
|
||||
exec tmux wait-for stop
|
||||
'';
|
||||
|
||||
environment = {
|
||||
WINEPREFIX = "${home}";
|
||||
};
|
||||
|
||||
restartIfChanged = false;
|
||||
|
||||
serviceConfig = {
|
||||
DynamicUser = true;
|
||||
User = cid;
|
||||
Group = cid;
|
||||
ReadWritePaths = [ home ];
|
||||
|
||||
ExecStop = "${pkgs.wine64Packages.staging}/bin/wineserver --kill";
|
||||
Restart = "on-failure";
|
||||
|
||||
CPUQuota = "75%";
|
||||
MemoryMax = "2G";
|
||||
MemorySwapMax = "2G";
|
||||
|
||||
IPAddressDeny = [
|
||||
"10.0.0.0/8"
|
||||
"100.64.0.0/10"
|
||||
"169.254.0.0/16"
|
||||
"172.16.0.0/12"
|
||||
"192.0.0.0/24"
|
||||
"192.0.2.0/24"
|
||||
"192.168.0.0/16"
|
||||
"198.18.0.0/15"
|
||||
"198.51.100.0/24"
|
||||
"203.0.113.0/24"
|
||||
"240.0.0.0/4"
|
||||
"100::/64"
|
||||
"2001:2::/48"
|
||||
"2001:db8::/32"
|
||||
"fc00::/7"
|
||||
"fe80::/10"
|
||||
];
|
||||
IPAddressAllow = lib.unique config.networking.nameservers;
|
||||
};
|
||||
};
|
||||
|
||||
systemd.services."${cid}-backup" = {
|
||||
startAt = "04:00";
|
||||
|
||||
script = ''
|
||||
cd ${home}/drive_c/spt/user
|
||||
tarball=".profiles-backup-$(date +%s).tar"
|
||||
final="profiles-backup-$(date +%Y-%m-%d-%H:%M:%S).tar.xz"
|
||||
${pkgs.gnutar}/bin/tar cvf "$tarball" profiles/
|
||||
${pkgs.xz}/bin/xz -9 "$tarball"
|
||||
mv "''${tarball}.xz" "$final"
|
||||
${pkgs.rotate-backups}/bin/rotate-backups -S yes -q --daily 30 --weekly 12 -I 'profiles-backup-*.tar.xz' .
|
||||
'';
|
||||
|
||||
unitConfig.ConditionPathExists = "${home}/drive_c/spt/user";
|
||||
|
||||
serviceConfig = {
|
||||
Type = "oneshot";
|
||||
DynamicUser = true;
|
||||
User = cid;
|
||||
Group = cid;
|
||||
ReadWritePaths = [ home ];
|
||||
PrivateNetwork = true;
|
||||
};
|
||||
};
|
||||
|
||||
systemd.services."${cid}-auto-restart" = {
|
||||
startAt = "05:00";
|
||||
|
||||
script = ''
|
||||
echo -n "Service status: "
|
||||
if ! systemctl is-active '${cid}.service'; then
|
||||
echo Service not active.
|
||||
exit
|
||||
fi
|
||||
|
||||
for i in {1..120}; do
|
||||
if test "$(${pkgs.iproute2}/bin/ss -H -tn 'cgroup = /sys/fs/cgroup/system.slice/${cid}.service' | wc -l)" != 0; then
|
||||
echo Service in use.
|
||||
exit
|
||||
fi
|
||||
sleep 1
|
||||
done
|
||||
|
||||
echo Restarting service...
|
||||
systemctl restart --no-block '${cid}.service'
|
||||
'';
|
||||
|
||||
unitConfig.ConditionPathExists = "${home}/drive_c/spt";
|
||||
|
||||
serviceConfig = {
|
||||
Type = "oneshot";
|
||||
};
|
||||
};
|
||||
systemd.services."${cid}-control" = {
|
||||
script = ''
|
||||
if test -e ${home}/drive_c/spt/control/restart; then
|
||||
echo Action: restart
|
||||
trap 'rm -f ${home}/drive_c/spt/control/restart' EXIT
|
||||
systemctl restart ${cid}.service
|
||||
elif test -e ${home}/drive_c/spt/control/shutdown; then
|
||||
echo Action: stop
|
||||
systemctl stop ${cid}.service
|
||||
else
|
||||
echo Action: start
|
||||
systemctl start ${cid}.service
|
||||
fi
|
||||
'';
|
||||
|
||||
unitConfig.ConditionPathExists = "${home}/drive_c/spt/control";
|
||||
|
||||
serviceConfig = {
|
||||
Type = "oneshot";
|
||||
};
|
||||
};
|
||||
|
||||
systemd.paths."${cid}-control" = {
|
||||
wantedBy = [ "paths.target" ];
|
||||
pathConfig.PathChanged = "${home}/drive_c/spt/control";
|
||||
};
|
||||
|
||||
services.openssh.extraConfig = ''
|
||||
Match User ${cid}
|
||||
ChrootDirectory ${root}
|
||||
ForceCommand internal-sftp -d /pfx/drive_c
|
||||
AllowTcpForwarding no
|
||||
X11Forwarding no
|
||||
PasswordAuthentication no
|
||||
'';
|
||||
|
||||
networking.firewall.allowedTCPPorts = [ link.port ];
|
||||
}
|
||||
Loading…
Reference in a new issue