|
13 | 13 | githubActions = nix-github-actions.lib.mkGithubMatrix { |
14 | 14 | checks = nixpkgs.lib.getAttrs [ "x86_64-linux" ] self.checks; |
15 | 15 | }; |
| 16 | + |
| 17 | + nixosModules.default = self.nixosModules.tailscale-manager; |
| 18 | + nixosModules.tailscale-manager = import ./nix/nixos-module.nix; |
| 19 | + |
| 20 | + overlays.default = final: prev: { |
| 21 | + tailscale-manager = self.packages.${prev.system}.tailscale-manager; |
| 22 | + }; |
| 23 | + |
16 | 24 | } // flake-utils.lib.eachDefaultSystem (system: |
17 | 25 | let |
18 | | - pkgs = nixpkgs.legacyPackages.${system}; |
| 26 | + pkgs = nixpkgs.legacyPackages.${system}.extend self.overlays.default; |
19 | 27 |
|
20 | 28 | haskellPackages = pkgs.haskellPackages; |
21 | 29 |
|
22 | 30 | jailbreakUnbreak = pkg: |
23 | 31 | pkgs.haskell.lib.doJailbreak (pkg.overrideAttrs (_: { meta = { }; })); |
24 | | - |
25 | | - packageName = "tailscale-manager"; |
26 | 32 | in { |
27 | | - packages.${packageName} = ( |
28 | | - haskellPackages.callCabal2nix packageName self rec { |
| 33 | + packages.tailscale-manager = ( |
| 34 | + haskellPackages.callCabal2nix "tailscale-manager" self rec { |
29 | 35 | # Dependency overrides go here |
30 | 36 | }).overrideAttrs (x: { |
31 | 37 | outputs = x.outputs ++ ["testreport"]; |
|
34 | 40 | ''; |
35 | 41 | }); |
36 | 42 |
|
37 | | - packages.default = self.packages.${system}.${packageName}; |
| 43 | + packages.default = self.packages.${system}.tailscale-manager; |
38 | 44 |
|
39 | 45 | checks.tailscale-manager = self.packages.${system}.tailscale-manager; |
40 | 46 |
|
|
49 | 55 | inputsFrom = map (__getAttr "env") (__attrValues self.packages.${system}); |
50 | 56 | }; |
51 | 57 |
|
52 | | - nixosModules.default = self.nixosModules.${system}.tailscale-manager; |
53 | | - nixosModules.tailscale-manager = { config, lib, pkgs, ... }: |
54 | | - with lib; |
55 | | - let |
56 | | - cfg = config.services.tailscale-manager; |
57 | | - configFile = pkgs.writeTextFile { |
58 | | - name = "tailscale-manager.json"; |
59 | | - text = generators.toJSON {} { |
60 | | - routes = cfg.routes; |
61 | | - hostRoutes = cfg.hostRoutes; |
62 | | - extraArgs = cfg.extraArgs; |
63 | | - awsManagedPrefixLists = cfg.awsManagedPrefixLists; |
64 | | - }; |
65 | | - }; |
66 | | - in { |
67 | | - options.services.tailscale-manager = { |
68 | | - enable = mkEnableOption "tailscale-manager"; |
69 | | - package = mkPackageOption self.packages.${system} "tailscale-manager" {}; |
70 | | - interval = mkOption { |
71 | | - type = types.int; |
72 | | - default = 300; |
73 | | - description = "Interval between runs, in seconds"; |
74 | | - }; |
75 | | - routes = mkOption { |
76 | | - type = types.listOf types.str; |
77 | | - default = []; |
78 | | - description = "List of CIDR prefix routes to advertise"; |
79 | | - }; |
80 | | - hostRoutes = mkOption { |
81 | | - type = types.listOf types.str; |
82 | | - default = []; |
83 | | - description = "List of hostnames and IP addresses to add as /32 routes"; |
84 | | - }; |
85 | | - awsManagedPrefixLists = mkOption { |
86 | | - type = types.listOf types.str; |
87 | | - default = []; |
88 | | - description = "AWS prefix list IDs for route discovery"; |
89 | | - }; |
90 | | - extraArgs = mkOption { |
91 | | - type = types.listOf types.str; |
92 | | - default = []; |
93 | | - description = "Extra arguments for `tailscale set`"; |
94 | | - }; |
95 | | - dryRun = mkOption { |
96 | | - type = types.bool; |
97 | | - default = false; |
98 | | - description = "Enable dry-run mode, don't actually apply changes."; |
99 | | - }; |
100 | | - maxShrinkRatio = mkOption { |
101 | | - type = types.float; |
102 | | - default = 0.5; |
103 | | - description = "How much route shrinkage is allowed between subsequent runs (between 0 and 1)"; |
104 | | - }; |
105 | | - socketPath = mkOption { |
106 | | - type = types.path; |
107 | | - default = "/var/run/tailscale/tailscaled.sock"; |
108 | | - description = "Path to the tailscaled socket"; |
109 | | - }; |
110 | | - }; |
111 | | - config = mkIf cfg.enable { |
112 | | - systemd.services.tailscale-manager = { |
113 | | - after = ["tailscaled.service"]; |
114 | | - wants = ["tailscaled.service"]; |
115 | | - wantedBy = ["multi-user.target"]; |
116 | | - # Never give up on trying to restart |
117 | | - startLimitIntervalSec = 0; |
118 | | - serviceConfig = { |
119 | | - Type = "exec"; |
120 | | - Restart = "always"; |
121 | | - # Restart at increasing intervals to avoid things like EC2 |
122 | | - # metadata service rate limits |
123 | | - RestartSec = 1; |
124 | | - RestartSteps = 30; |
125 | | - RestartMaxDelaySec = 60; |
126 | | - ExecStart = lib.escapeShellArgs ( |
127 | | - [ "${cfg.package}/bin/tailscale-manager" configFile |
128 | | - "--tailscale=${config.services.tailscale.package}/bin/tailscale" |
129 | | - "--socket=${cfg.socketPath}" |
130 | | - "--interval=${toString cfg.interval}" |
131 | | - "--max-shrink-ratio=${toString cfg.maxShrinkRatio}" |
132 | | - ] ++ lib.optional cfg.dryRun "--dryrun" |
133 | | - ); |
134 | | - }; |
135 | | - }; |
136 | | - }; |
137 | | - }; |
138 | 58 | }); |
139 | 59 | } |
0 commit comments