tensamin/iota
Watch
6
0
Fork
You've already forked iota
 0
Code Issues Pull requests 3 Projects Releases 1 Packages Wiki Activity Actions

Merge remote-tracking branch 'refs/remotes/origin/main'

Browse source
This commit is contained in:
Alex Emmet 2026-09-20 21:12:15 +02:00
commit ed4ea9eba4
No known key found for this signature in database
1 changed files with 12 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

20
flake.nix
View file

@ -161,11 +161,12 @@
key = "${cfg.stateDir}/tls/key.pem";
};
} cfg.settings;
configFile =
sourceConfigFile =
if cfg.settingsFile != null then
cfg.settingsFile
else
configFormat.generate "iota-config.yaml" effectiveSettings;
configFile = "${cfg.stateDir}/config.yaml";
descriptionText = "Tensamin Iota daemon";
in
@ -340,7 +341,6 @@
cfg.logDir
];
ReadOnlyPaths = [
configFile
cfg.assetDir
];
ProtectKernelTunables = true;
@ -361,12 +361,16 @@
"IOTA_DEPLOYMENT_MODE=system_socket_activated"
"IOTA_SUPERVISOR=systemd"
];
}
// lib.optionalAttrs (cfg.certFile != null) {
ExecStartPre = "+${pkgs.writeShellScript "iota-setup-tls" ''
install -d -m 0700 -o iota -g iota ${cfg.stateDir}/tls
install -m 0644 -o iota -g iota ${cfg.certFile} ${cfg.stateDir}/tls/cert.pem
install -m 0600 -o iota -g iota ${cfg.keyFile} ${cfg.stateDir}/tls/key.pem
ExecStartPre = "+${pkgs.writeShellScript "iota-setup" ''
# ponytail: Preserve daemon-assigned IDs; remove config.yaml to reseed changed declarative settings.
if [ ! -e ${configFile} ]; then
install -m 0640 -o iota -g iota ${sourceConfigFile} ${configFile}
fi
${lib.optionalString (cfg.certFile != null) ''
install -d -m 0700 -o iota -g iota ${cfg.stateDir}/tls
install -m 0644 -o iota -g iota ${cfg.certFile} ${cfg.stateDir}/tls/cert.pem
install -m 0600 -o iota -g iota ${cfg.keyFile} ${cfg.stateDir}/tls/key.pem
''}
''}";
}
// lib.optionalAttrs (cfg.environmentFiles != [ ]) {