Install envoy using system manager

Author: yvan-sraka

nix/packages/default.nix

@@ -36,6 +36,7 @@
           dbmate-tool = pkgs.callPackage ./dbmate-tool.nix { inherit (self.supabase) defaults; };
           docker-image-ubuntu = pkgs.callPackage ./docker-ubuntu.nix { };
           docs = pkgs.callPackage ./docs.nix { };
+          envoy-bin = pkgs.callPackage ./envoy-bin.nix { };
           supabase-groonga = pkgs.callPackage ./groonga { };
           local-infra-bootstrap = pkgs.callPackage ./local-infra-bootstrap.nix { };
           migrate-tool = pkgs.callPackage ./migrate-tool.nix { psql_15 = self'.packages."psql_15/bin"; };

nix/packages/docker-ubuntu.nix

@@ -1,4 +1,9 @@
-{ runCommand, dockerTools, xz, buildEnv }:
+{
+  runCommand,
+  dockerTools,
+  xz,
+  buildEnv,
+}:
 let
   ubuntu-cloudimg =
     let

nix/packages/envoy-bin.nix

@@ -0,0 +1,30 @@
+{
+  envoy-bin,
+  fetchurl,
+  stdenv,
+  ...
+}:
+let
+  version = "1.28.0";
+  inherit (stdenv.hostPlatform) system;
+  throwSystem = throw "envoy-bin is not available for ${system}.";
+  plat =
+    {
+      aarch64-linux = "aarch_64";
+      x86_64-linux = "x86_64";
+    }
+    .${system} or throwSystem;
+  hash =
+    {
+      aarch64-linux = "";
+      x86_64-linux = "sha256-JjlWPOm8CbHua9RzF2C1lsjtHkdM3YPMnfk2RRbhQ2c=";
+    }
+    .${system} or throwSystem;
+in
+envoy-bin.overrideAttrs {
+  inherit version;
+  src = fetchurl {
+    url = "https://github.com/envoyproxy/envoy/releases/download/v${version}/envoy-${version}-linux-${plat}";
+    inherit hash;
+  };
+}

nix/systemModules/default.nix

@@ -4,6 +4,8 @@
 {
   imports = [ ./tests ];
   flake = {
-    systemModules = { };
+    systemModules = {
+      envoy = ./envoy.nix;
+    };
   };
 }

nix/systemModules/envoy.nix

@@ -0,0 +1,23 @@
+{
+  lib,
+  nixosModulesPath,
+  self',
+  ...
+}:
+{
+  imports = map (path: nixosModulesPath + path) [
+    "/services/networking/envoy.nix"
+  ];
+  config = {
+    services.envoy = {
+      enable = true;
+      package = self'.packages.envoy-bin;
+      # TODO: settings from postgres/ansible/files/envoy_config/
+    };
+    systemd.services.envoy = {
+      wantedBy = lib.mkForce [
+        "system-manager.target"
+      ];
+    };
+  };
+}

nix/systemModules/tests/default.nix

@@ -14,11 +14,13 @@
             lib = pkgs.lib;
             systemManagerConfig = self.inputs.system-manager.lib.makeSystemConfig {
               modules = [
+                self.systemModules.envoy
                 ({
                   services.nginx.enable = true;
                   nixpkgs.hostPlatform = pkgs.system;
                 })
               ];
+              extraSpecialArgs = { inherit self'; };
             };
 
             dockerImageUbuntuWithTools =

nix/systemModules/tests/test_envoy.py

@@ -0,0 +1,3 @@
+def test_envoy_service(host):
+    assert host.service("envoy.service").is_valid
+    assert host.service("envoy.service").is_running