118 lines
2.9 KiB
Nix
118 lines
2.9 KiB
Nix
|
{ config, lib, pkgs, ... }:
|
|||
|
|
|
|||
|
|
with lib;
|
|||
|
|
|
|||
|
|
let
|
|||
|
|
|
|||
|
|
cfg = config.services.polipo;
|
|||
|
|
|
|||
|
|
polipoConfig = pkgs.writeText "polipo.conf" ''
|
|||
|
|
proxyAddress = ${cfg.proxyAddress}
|
|||
|
|
proxyPort = ${toString cfg.proxyPort}
|
|||
|
|
allowedClients = ${concatStringsSep ", " cfg.allowedClients}
|
|||
|
|
${optionalString (cfg.parentProxy != "") "parentProxy = ${cfg.parentProxy}" }
|
|||
|
|
${optionalString (cfg.socksParentProxy != "") "socksParentProxy = ${cfg.socksParentProxy}" }
|
|||
|
|
${config.services.polipo.extraConfig}
|
|||
|
|
'';
|
|||
|
|
|
|||
|
|
in
|
|||
|
|
|
|||
|
|
{
|
|||
|
|
|
|||
|
|
options = {
|
|||
|
|
|
|||
|
|
services.polipo = {
|
|||
|
|
|
|||
|
|
enable = mkOption {
|
|||
|
|
type = types.bool;
|
|||
|
|
default = false;
|
|||
|
|
description = "Whether to run the polipo caching web proxy.";
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
proxyAddress = mkOption {
|
|||
|
|
type = types.string;
|
|||
|
|
default = "127.0.0.1";
|
|||
|
|
description = "IP address on which Polipo will listen.";
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
proxyPort = mkOption {
|
|||
|
|
type = types.int;
|
|||
|
|
default = 8123;
|
|||
|
|
description = "TCP port on which Polipo will listen.";
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
allowedClients = mkOption {
|
|||
|
|
type = types.listOf types.string;
|
|||
|
|
default = [ "127.0.0.1" "::1" ];
|
|||
|
|
example = [ "127.0.0.1" "::1" "134.157.168.0/24" "2001:660:116::/48" ];
|
|||
|
|
description = ''
|
|||
|
|
List of IP addresses or network addresses that may connect to Polipo.
|
|||
|
|
'';
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
parentProxy = mkOption {
|
|||
|
|
type = types.string;
|
|||
|
|
default = "";
|
|||
|
|
example = "localhost:8124";
|
|||
|
|
description = ''
|
|||
|
|
Hostname and port number of an HTTP parent proxy;
|
|||
|
|
it should have the form ‘host:port’.
|
|||
|
|
'';
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
socksParentProxy = mkOption {
|
|||
|
|
type = types.string;
|
|||
|
|
default = "";
|
|||
|
|
example = "localhost:9050";
|
|||
|
|
description = ''
|
|||
|
|
Hostname and port number of an SOCKS parent proxy;
|
|||
|
|
it should have the form ‘host:port’.
|
|||
|
|
'';
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
extraConfig = mkOption {
|
|||
|
|
type = types.lines;
|
|||
|
|
default = "";
|
|||
|
|
description = ''
|
|||
|
|
Polio configuration. Contents will be added
|
|||
|
|
verbatim to the configuration file.
|
|||
|
|
'';
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
config = mkIf cfg.enable {
|
|||
|
|
|
|||
|
|
users.extraUsers = singleton
|
|||
|
|
{ name = "polipo";
|
|||
|
|
uid = config.ids.uids.polipo;
|
|||
|
|
description = "Polipo caching proxy user";
|
|||
|
|
home = "/var/cache/polipo";
|
|||
|
|
createHome = true;
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
users.extraGroups = singleton
|
|||
|
|
{ name = "polipo";
|
|||
|
|
gid = config.ids.gids.polipo;
|
|||
|
|
members = [ "polipo" ];
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
systemd.services.polipo = {
|
|||
|
|
description = "caching web proxy";
|
|||
|
|
after = [ "network.target" "nss-lookup.target" ];
|
|||
|
|
wantedBy = [ "multi-user.target"];
|
|||
|
|
preStart = ''
|
|||
|
|
${pkgs.coreutils}/bin/chown polipo:polipo /var/cache/polipo -R
|
|||
|
|
'';
|
|||
|
|
serviceConfig = {
|
|||
|
|
ExecStart = "${pkgs.polipo}/bin/polipo -c ${polipoConfig}";
|
|||
|
|
ExecReload = "${pkgs.coreutils}/bin/kill -USR1 $MAINPID";
|
|||
|
|
User = "polipo";
|
|||
|
|
};
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
}
|