Deploy envoy using system manager

We verify that the envoy service can be deployed using the
system manager.

Author: yvan-sraka

nix/packages/default.nix

@@ -38,6 +38,7 @@
           dbmate-tool = pkgs.callPackage ./dbmate-tool.nix { inherit (self.supabase) defaults; };
           docker-image-ubuntu = pkgs.callPackage ./docker-ubuntu.nix { };
           docs = pkgs.callPackage ./docs.nix { };
+          envoy-bin = pkgs.callPackage ./envoy-bin.nix { };
           supabase-groonga = pkgs.callPackage ./groonga { };
           local-infra-bootstrap = pkgs.callPackage ./local-infra-bootstrap.nix { };
           migrate-tool = pkgs.callPackage ./migrate-tool.nix { psql_15 = self'.packages."psql_15/bin"; };

nix/packages/envoy-bin.nix

@@ -0,0 +1,30 @@
+{
+  envoy-bin,
+  fetchurl,
+  stdenv,
+  ...
+}:
+let
+  version = "1.28.0";
+  inherit (stdenv.hostPlatform) system;
+  throwSystem = throw "envoy-bin is not available for ${system}.";
+  plat =
+    {
+      aarch64-linux = "aarch_64";
+      x86_64-linux = "x86_64";
+    }
+    .${system} or throwSystem;
+  hash =
+    {
+      aarch64-linux = "sha256-65MOMqtVVWQ+CdEdSQ45LQp5DFqA6wsOussQRr27EU0=";
+      x86_64-linux = "sha256-JjlWPOm8CbHua9RzF2C1lsjtHkdM3YPMnfk2RRbhQ2c=";
+    }
+    .${system} or throwSystem;
+in
+envoy-bin.overrideAttrs {
+  inherit version;
+  src = fetchurl {
+    url = "https://github.com/envoyproxy/envoy/releases/download/v${version}/envoy-${version}-linux-${plat}";
+    inherit hash;
+  };
+}

nix/systemConfigs.nix

@@ -1,30 +1,30 @@
-{ self, inputs, ... }:
-let
-  mkModules = system: [
-    ({
-      services.nginx.enable = true;
-      nixpkgs.hostPlatform = system;
-    })
-  ];
-
-  systems = [
-    "aarch64-linux"
-    "x86_64-linux"
-  ];
-
-  mkSystemConfig = system: {
-    name = system;
-    value.default = inputs.system-manager.lib.makeSystemConfig {
-      modules = mkModules system;
-      extraSpecialArgs = {
-        inherit self;
-        inherit system;
-      };
-    };
-  };
-in
-{
-  flake = {
-    systemConfigs = builtins.listToAttrs (map mkSystemConfig systems);
-  };
-}
+ { self, inputs, ... }:
+ let
+   mkModules = system: [
+     ({
+       services.nginx.enable = true;
+       nixpkgs.hostPlatform = system;
+     })
+   ];
+ 
+   systems = [
+     "aarch64-linux"
+     "x86_64-linux"
+   ];
+ 
+   mkSystemConfig = system: {
+     name = system;
+     value.default = inputs.system-manager.lib.makeSystemConfig {
+       modules = mkModules system;
+       extraSpecialArgs = {
+         inherit self;
+         inherit system;
+       };
+     };
+   };
+ in
+ {
+   flake = {
+     systemConfigs = builtins.listToAttrs (map mkSystemConfig systems);
+   };
+ }

nix/systemModules/default.nix

@@ -4,6 +4,8 @@
 {
   imports = [ ./tests ];
   flake = {
-    systemModules = { };
+    systemModules = {
+      envoy = ./envoy.nix;
+    };
   };
 }

nix/systemModules/envoy.nix

@@ -0,0 +1,24 @@
+{
+  lib,
+  nixosModulesPath,
+  self,
+  system,
+  ...
+}:
+{
+  imports = map (path: nixosModulesPath + path) [
+    "/services/networking/envoy.nix"
+  ];
+  config = {
+    services.envoy = {
+      enable = true;
+      package = self.packages.${system}.envoy-bin;
+      # TODO: settings from postgres/ansible/files/envoy_config/
+    };
+    systemd.services.envoy = {
+      wantedBy = lib.mkForce [
+        "system-manager.target"
+      ];
+    };
+  };
+}

nix/systemModules/tests/test_envoy.py

@@ -0,0 +1,3 @@
+def test_envoy_service(host):
+    assert host.service("envoy.service").is_valid
+    assert host.service("envoy.service").is_running