nix

TymanWasTaken · TymanWasTaken · commit e989a53e2904 · 2025-03-26T16:25:21.000-06:00
diff --git a/.direnv/bin/nix-direnv-reload b/.direnv/bin/nix-direnv-reload
@@ -0,0 +1,19 @@
+#!/usr/bin/env bash
+set -e
+if [[ ! -d "/home/ty/Dev/website" ]]; then
+  echo "Cannot find source directory; Did you move it?"
+  echo "(Looking for "/home/ty/Dev/website")"
+  echo 'Cannot force reload with this script - use "direnv reload" manually and then try again'
+  exit 1
+fi
+
+# rebuild the cache forcefully
+_nix_direnv_force_reload=1 direnv exec "/home/ty/Dev/website" true
+
+# Update the mtime for .envrc.
+# This will cause direnv to reload again - but without re-building.
+touch "/home/ty/Dev/website/.envrc"
+
+# Also update the timestamp of whatever profile_rc we have.
+# This makes sure that we know we are up to date.
+touch -r "/home/ty/Dev/website/.envrc" "/home/ty/Dev/website/.direnv"/*.rc
diff --git a/.direnv/flake-inputs/01x5k4nlxcpyd85nnr0b9gm89rm8ff4x-source b/.direnv/flake-inputs/01x5k4nlxcpyd85nnr0b9gm89rm8ff4x-source
@@ -0,0 +1 @@
+/nix/store/01x5k4nlxcpyd85nnr0b9gm89rm8ff4x-source
diff --git a/.direnv/flake-inputs/2y9xcdh9v8cl5fnkb1pw1ckfj290f9s1-source b/.direnv/flake-inputs/2y9xcdh9v8cl5fnkb1pw1ckfj290f9s1-source
@@ -0,0 +1 @@
+/nix/store/2y9xcdh9v8cl5fnkb1pw1ckfj290f9s1-source
diff --git a/.direnv/flake-inputs/aaywjs6sqjqcbv33wxy1va9q3811qlmg-source b/.direnv/flake-inputs/aaywjs6sqjqcbv33wxy1va9q3811qlmg-source
@@ -0,0 +1 @@
+/nix/store/aaywjs6sqjqcbv33wxy1va9q3811qlmg-source
diff --git a/.direnv/flake-inputs/yj1wxm9hh8610iyzqnz75kvs6xl8j3my-source b/.direnv/flake-inputs/yj1wxm9hh8610iyzqnz75kvs6xl8j3my-source
@@ -0,0 +1 @@
+/nix/store/yj1wxm9hh8610iyzqnz75kvs6xl8j3my-source
diff --git a/.direnv/flake-profile-a5d5b61aa8a61b7d9d765e1daf971a9a578f1cfa b/.direnv/flake-profile-a5d5b61aa8a61b7d9d765e1daf971a9a578f1cfa
@@ -0,0 +1 @@
+/nix/store/y2m926sg5ms90mh7h7r5vq4c7yaxgf0a-nix-shell-env
diff --git a/.direnv/flake-profile-a5d5b61aa8a61b7d9d765e1daf971a9a578f1cfa.rc b/.direnv/flake-profile-a5d5b61aa8a61b7d9d765e1daf971a9a578f1cfa.rc
diff --git a/.envrc b/.envrc
@@ -0,0 +1 @@
+use flake
diff --git a/flake.lock b/flake.lock
diff --git a/flake.nix b/flake.nix
@@ -0,0 +1,24 @@
+{
+    description = "Moulberry's Bush Website";
+
+    inputs = {
+        nixpkgs.url = "github:NixOS/nixpkgs";
+        flake-utils.url = "github:numtide/flake-utils";
+    };
+
+    outputs = { self, nixpkgs, flake-utils, ... }:
+        flake-utils.lib.eachDefaultSystem (system: let pkgs = nixpkgs.legacyPackages.${system}; in {
+            devShells.default = pkgs.mkShell {
+                packages = with pkgs; [
+                    nodejs_23
+                ];
+            };
+
+            packages.default = self.packages.${system}.website;
+            packages.website = pkgs.callPackage ./nix/package.nix {
+                nodejs = pkgs.nodejs_23;
+            };
+
+            nixosModules.default = ./nix/module.nix;
+        });
+}
diff --git a/nix/module.nix b/nix/module.nix
@@ -0,0 +1,88 @@
+self:
+{ lib, config, ... }:
+{
+    options.services.moulberry-bush-website = {
+        enable = lib.mkEnableOption "moulbery bush website";
+
+        package = lib.mkOption {
+            description = "The package to use for the website";
+            default = null;
+            defaultText = "null";
+            type = lib.types.package;
+        };
+
+        environmentFile = lib.mkOption {
+            description = "An extra file containing environment variables to load (for secrets)";
+            default = null;
+            defaultText = "null";
+            type = lib.types.nullOr lib.types.path;
+        };
+
+        settings = {
+            port = lib.mkOption {
+                description = "The port to run the webserver on";
+                default = 80;
+                defaultText = "80";
+                type = lib.types.port;
+            };
+
+            host = lib.mkOption {
+                description = "The host to listen on";
+                default = "0.0.0.0";
+                defaultText = "0.0.0.0";
+                type = lib.types.str;
+            };
+
+            redirectHost = lib.mkOption {
+                description = "The hostname of the website to give discord as a redirect URL";
+                default = "bush.notenoughupdates.org";
+                defaultText = "bush.notenoughupdates.org";
+                type = lib.types.str;
+            };
+
+            redirectScheme = lib.mkOption {
+                description = "The scheme of the website to give discord as a redirect URL";
+                default = "https";
+                defaultText = "https";
+                type = lib.types.enum [ "http" "https" ];
+            };
+
+            clientId = lib.mkOption {
+                description = "The discord oauth client ID";
+                default = 1262889947946287169;
+                defaultText = "1262889947946287169";
+                type = lib.types.int;
+            };
+        };
+    };
+
+    config = let
+        cfg = config.services.moulberry-bush-website;
+    in lib.mkIf cfg.enable {
+        systemd.services.moulberry-bush-website = {
+            description = "moulberry bush website";
+            wants = [ "network-online.target" ];
+            after = [ "network-online.target" ];
+            wantedBy = [ "multi-user.target" ];
+
+            serviceConfig = {
+                User = "mbwebsite";
+                Group = "mbwebsite";
+                DynamicUser = "yes";
+
+                ExecStart = "${cfg.package}";
+                Restart = "on-failure";
+
+                EnvironmentFile = [ cfg.environmentFile ];
+            };
+
+            environment = {
+                PORT = builtins.toString cfg.port;
+                HOST = cfg.host;
+                REDIRECT_HOST = cfg.redirectHost;
+                REDIRECT_SCHEME = cfg.redirectScheme;
+                CLIENT_ID = builtins.toString cfg.clientId;
+            };
+        };
+    };
+}
diff --git a/nix/package.nix b/nix/package.nix
@@ -0,0 +1,110 @@
+{
+    lib,
+    stdenvNoCC,
+    cacert,
+    nodejs,
+    yarn-berry,
+    makeWrapper
+}:
+
+stdenvNoCC.mkDerivation (finalAttrs: {
+    pname = "website";
+    version = "1";
+
+    src = ./.;
+
+    nativeBuildInputs = [
+        nodejs
+        yarn-berry
+        makeWrapper
+    ];
+
+    yarnOfflineCache = stdenvNoCC.mkDerivation {
+        name = "website-deps";
+        nativeBuildInputs = [ yarn-berry ];
+        inherit (finalAttrs) src;
+
+        NODE_EXTRA_CA_CERTS = "${cacert}/etc/ssl/certs/ca-bundle.crt";
+
+        supportedArchitectures = builtins.toJSON {
+            os = [ "darwin" "linux" ];
+            cpu = [ "arm" "arm64" "ia32" "x64" ];
+            libc = [ "glibc" "musl" ];
+        };
+
+        configurePhase = ''
+            runHook preConfigure
+
+            export HOME="$NIX_BUILD_TOP"
+            export YARN_ENABLE_TELEMETRY=0
+
+            yarn config set enableGlobalCache false
+            yarn config set cacheFolder $out
+            yarn config set supportedArchitectures --json "$supportedArchitectures"
+
+            runHook postConfigure
+        '';
+
+        buildPhase = ''
+            runHook preBuild
+
+            mkdir -p $out
+            yarn install --immutable --mode skip-build
+
+            runHook postBuild
+        '';
+
+        dontInstall = true;
+
+        outputHashAlgo = "sha256";
+        outputHash = "sha256-VeV3p8zNHWdzd9+9BYrJoR9apuBxjk83WyOhp2JjOK0=";
+        outputHashMode = "recursive";
+    };
+
+    configurePhase = ''
+        runHook preConfigure
+
+        export HOME="$NIX_BUILD_TOP"
+        export YARN_ENABLE_TELEMETRY=0
+        export ASTRO_TELEMETRY_DISABLED=1
+
+        yarn config set enableGlobalCache false
+        yarn config set cacheFolder $yarnOfflineCache
+
+        runHook postConfigure
+    '';
+
+    buildPhase = ''
+        runHook preBuild
+
+        yarn install --immutable --immutable-cache
+        yarn build
+
+        runHook postBuild
+    '';
+
+    installPhase = ''
+        runHook preInstall
+
+        mkdir -p $out/{lib,bin}
+
+        cp -r ./dist/* $out/lib/
+
+        echo -e "#!/usr/bin/env sh\n${lib.getExe nodejs} $out/lib/server/entry.mjs" > $out/bin/website
+        chmod +x $out/bin/website
+
+        runHook postInstall
+    '';
+
+    fixupPhase = ''
+        runHook preFixup
+
+        patchShebangs $out/lib
+
+        runHook postFixup
+    '';
+
+    meta = {
+        # TODO
+    };
+})
diff --git a/result b/result
@@ -0,0 +1 @@
+/nix/store/37gfqrsspjg3zy79zrgfwnszacdvzw4b-website-1

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+/nix/store/01x5k4nlxcpyd85nnr0b9gm89rm8ff4x-source`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+/nix/store/2y9xcdh9v8cl5fnkb1pw1ckfj290f9s1-source`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+/nix/store/aaywjs6sqjqcbv33wxy1va9q3811qlmg-source`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+/nix/store/yj1wxm9hh8610iyzqnz75kvs6xl8j3my-source`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+/nix/store/y2m926sg5ms90mh7h7r5vq4c7yaxgf0a-nix-shell-env`