services.rsshub: fix

This commit is contained in:
陈浩南 2024-08-29 11:41:25 +08:00
parent 5bc06f6c00
commit b12d519fd5

View File

@ -13,22 +13,26 @@ inputs:
inherit (builtins) map listToAttrs toString; inherit (builtins) map listToAttrs toString;
in mkIf rsshub.enable in mkIf rsshub.enable
{ {
systemd.services.rsshub = systemd =
{ {
description = "rsshub"; services.rsshub =
after = [ "network.target" "redis-rsshub.service" ];
requires = [ "redis-rsshub.service" ];
wantedBy = [ "multi-user.target" ];
serviceConfig =
{ {
User = inputs.config.users.users.rsshub.name; description = "rsshub";
Group = inputs.config.users.users.rsshub.group; after = [ "network.target" "redis-rsshub.service" ];
EnvironmentFile = inputs.config.sops.templates."rsshub/env".path; requires = [ "redis-rsshub.service" ];
WorkingDirectory = "${inputs.pkgs.localPackages.rsshub}"; wantedBy = [ "multi-user.target" ];
ExecStart = "${inputs.pkgs.localPackages.rsshub}/bin/rsshub"; serviceConfig =
CapabilityBoundingSet = [ "CAP_NET_BIND_SERVICE" ]; {
AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ]; User = inputs.config.users.users.rsshub.name;
Group = inputs.config.users.users.rsshub.group;
EnvironmentFile = inputs.config.sops.templates."rsshub/env".path;
WorkingDirectory = "${inputs.pkgs.localPackages.rsshub}";
ExecStart = "${inputs.pkgs.localPackages.rsshub}/bin/rsshub";
CapabilityBoundingSet = [ "CAP_NET_BIND_SERVICE" ];
AmbientCapabilities = [ "CAP_NET_BIND_SERVICE" ];
};
}; };
tmpfiles.rules = [ "d /var/cache/rsshub 0700 rsshub rsshub" ];
}; };
sops = sops =
{ {
@ -46,6 +50,8 @@ inputs:
YOUTUBE_CLIENT_ID='${placeholder."rsshub/youtube-client-id"}' YOUTUBE_CLIENT_ID='${placeholder."rsshub/youtube-client-id"}'
YOUTUBE_CLIENT_SECRET='${placeholder."rsshub/youtube-client-secret"}' YOUTUBE_CLIENT_SECRET='${placeholder."rsshub/youtube-client-secret"}'
YOUTUBE_REFRESH_TOKEN='${placeholder."rsshub/youtube-refresh-token"}' YOUTUBE_REFRESH_TOKEN='${placeholder."rsshub/youtube-refresh-token"}'
XDG_CONFIG_HOME='/var/cache/rsshub/chromium'
XDG_CACHE_HOME='/var/cache/rsshub/chromium'
''; '';
secrets = (listToAttrs (map (secret: { name = "rsshub/${secret}"; value = {}; }) secrets = (listToAttrs (map (secret: { name = "rsshub/${secret}"; value = {}; })
[ [