feat: create an activation script and systemd service

Author: samrose

flake.nix

@@ -91,14 +91,40 @@
             buildInputs = [ pkgs.bash auth-service ];
 
             buildPhase = ''
-              mkdir -p $out/etc $out/bin
+              mkdir -p $out/etc $out/bin $out/lib/systemd/system
 
               # Write the auth configuration
               cat > $out/etc/auth.env <<EOF
               # Auth configuration generated by Nix
               ${lib.concatStringsSep "\n" (lib.mapAttrsToList (name: value: "${name}=${value}") config.config.auth.settings)}
               EOF
 
+              # Write the systemd unit file
+              cat > $out/lib/systemd/system/gotrue.service <<EOF
+              [Unit]
+              Description=Gotrue
+
+              [Service]
+              Type=simple
+              WorkingDirectory=/opt/gotrue
+              ExecStart=/opt/gotrue/gotrue --config-dir /etc/auth.d
+              User=gotrue
+              Restart=always
+              RestartSec=3
+
+              MemoryAccounting=true
+              MemoryMax=50%
+
+              EnvironmentFile=-/etc/gotrue.generated.env
+              EnvironmentFile=/etc/gotrue.env
+              EnvironmentFile=-/etc/gotrue.overrides.env
+
+              Slice=services.slice
+
+              [Install]
+              WantedBy=multi-user.target
+              EOF
+
               # Write a script to manage the auth service
               cat > $out/bin/manage-auth <<EOF
               #!/bin/sh
@@ -133,14 +159,76 @@
               esac
               EOF
               chmod +x $out/bin/manage-auth
+
+              # Write the activation script
+              cat > $out/bin/activate <<EOF
+              #!/bin/sh
+              set -e
+
+              # Create necessary directories
+              mkdir -p /opt/gotrue
+              mkdir -p /etc/auth.d
+              mkdir -p /etc/gotrue
+
+              # Create gotrue user if it doesn't exist
+              if ! id "gotrue" &>/dev/null; then
+                useradd -r -s /bin/false gotrue
+              fi
+
+              # Set proper ownership
+              chown -R gotrue:gotrue /opt/gotrue
+              chown -R gotrue:gotrue /etc/auth.d
+              chown -R gotrue:gotrue /etc/gotrue
+
+              # Set proper permissions
+              chmod 775 /opt/gotrue
+              chmod 775 /etc/auth.d
+              chmod 775 /etc/gotrue
+
+              # Copy the binary
+              cp ${auth-service}/bin/supabase-auth /opt/gotrue/gotrue
+              chown gotrue:gotrue /opt/gotrue/gotrue
+              chmod 755 /opt/gotrue/gotrue
+
+              # Copy the systemd unit file
+              cp $out/lib/systemd/system/gotrue.service /etc/systemd/system/
+              chmod 644 /etc/systemd/system/gotrue.service
+
+              # Copy the environment file
+              cp $out/etc/auth.env /etc/gotrue.generated.env
+              chown gotrue:gotrue /etc/gotrue.generated.env
+              chmod 600 /etc/gotrue.generated.env
+
+              # Create symlinks for easy access
+              ln -sf $out/bin/manage-auth /usr/local/bin/gotrue-manage
+              ln -sf $out/share/gotrue/gotrue.service /usr/local/share/gotrue/gotrue.service
+              ln -sf $out/bin/activate /usr/local/bin/auth-activate
+
+              # Reload systemd
+              systemctl daemon-reload
+
+              # Enable and start the service
+              systemctl enable gotrue.service
+              systemctl restart gotrue.service
+
+              echo "Gotrue service has been activated and started"
+              echo "You can manage the service using: gotrue-manage {start|stop|restart|status}"
+              EOF
+              chmod +x $out/bin/activate
+
+              # Create symlinks to the systemd unit files for easy access
+              mkdir -p $out/share/gotrue
+              ln -s $out/lib/systemd/system/gotrue.service $out/share/gotrue/gotrue.service
             '';
 
             installPhase = "true";
           };
 
         in
         {
-          packages.default = authConfigOutput;
+          packages = {
+            default = authConfigOutput;
+          };
           devShells.default = pkgs.mkShell {
             buildInputs = [ 
               pkgs.bash