396 lines
14 KiB
Nix
396 lines
14 KiB
Nix
{ config, pkgs, lib, ... }:
|
||
|
||
let
|
||
domains = config.sovran_systemsOS.domainRequirements;
|
||
|
||
domainNamesList = lib.concatMapStringsSep " " (d: d.name) domains;
|
||
|
||
ddnsPrompt = ''
|
||
read -p " Njal.la DDNS curl command (paste full line, or Enter to skip): " DDNS_LINE
|
||
if [ -n "$DDNS_LINE" ]; then
|
||
# Strip any leading "curl " if they pasted the whole command
|
||
DDNS_LINE="''${DDNS_LINE#curl }"
|
||
# Strip surrounding quotes
|
||
DDNS_LINE="''${DDNS_LINE%\"}"
|
||
DDNS_LINE="''${DDNS_LINE#\"}"
|
||
# Replace &auto with &a=''${IP} at the end
|
||
DDNS_LINE="''${DDNS_LINE%auto}&a=''${DOLLAR}{IP}"
|
||
# Remove any trailing double &a= if they already had &a=
|
||
DDNS_LINE=$(echo "$DDNS_LINE" | sed 's/&a=&a=/\&a=/g')
|
||
'';
|
||
|
||
confirmDomain = name: ''
|
||
while true; do
|
||
echo ""
|
||
echo -e " ''${YELLOW}You entered:''${NC}"
|
||
echo -e " Domain: ''${CYAN}$DOMAIN''${NC}"
|
||
if [ -n "''${DDNS_DISPLAY:-}" ]; then
|
||
echo -e " DDNS URL: ''${CYAN}$DDNS_DISPLAY''${NC}"
|
||
fi
|
||
echo ""
|
||
read -p " Is this correct? (y/n): " CONFIRM
|
||
case "$CONFIRM" in
|
||
[yY])
|
||
echo "$DOMAIN" > "/var/lib/domains/${name}"
|
||
echo -e " ''${GREEN}Saved.''${NC}"
|
||
break
|
||
;;
|
||
[nN])
|
||
echo " Let's try again."
|
||
REDO=true
|
||
break
|
||
;;
|
||
*)
|
||
echo " Please enter y or n."
|
||
;;
|
||
esac
|
||
done
|
||
'';
|
||
|
||
domainPrompts = lib.concatMapStringsSep "\n" (d: ''
|
||
REDO=true
|
||
while [ "$REDO" = true ]; do
|
||
REDO=false
|
||
DDNS_DISPLAY=""
|
||
echo ""
|
||
echo -e "''${GREEN}── ${d.label} ──''${NC}"
|
||
EXISTING=""
|
||
if [ -f "/var/lib/domains/${d.name}" ]; then
|
||
EXISTING=$(cat "/var/lib/domains/${d.name}")
|
||
echo -e " Current: ''${CYAN}$EXISTING''${NC}"
|
||
fi
|
||
read -p " Subdomain (e.g. ${d.example}) or Enter to keep current: " DOMAIN_INPUT
|
||
DOMAIN="''${DOMAIN_INPUT:-$EXISTING}"
|
||
|
||
if [ -n "$DOMAIN" ]; then
|
||
${lib.optionalString d.needsDDNS ''
|
||
${ddnsPrompt}
|
||
DDNS_DISPLAY="$DDNS_LINE"
|
||
PENDING_NJALLA="curl \"$DDNS_LINE\""
|
||
fi
|
||
''}
|
||
|
||
${confirmDomain d.name}
|
||
|
||
if [ "$REDO" = false ] && [ -n "''${PENDING_NJALLA:-}" ]; then
|
||
NJALLA_ENTRIES="$NJALLA_ENTRIES
|
||
$PENDING_NJALLA"
|
||
PENDING_NJALLA=""
|
||
fi
|
||
else
|
||
echo " Skipped."
|
||
fi
|
||
done
|
||
'') domains;
|
||
|
||
missingDomainPrompts = lib.concatMapStringsSep "\n" (d: ''
|
||
if [ ! -f "/var/lib/domains/${d.name}" ]; then
|
||
MISSING=true
|
||
REDO=true
|
||
while [ "$REDO" = true ]; do
|
||
REDO=false
|
||
DDNS_DISPLAY=""
|
||
echo ""
|
||
echo -e "''${GREEN}── ${d.label} (NEW) ──''${NC}"
|
||
read -p " Subdomain (e.g. ${d.example}): " DOMAIN
|
||
|
||
if [ -n "$DOMAIN" ]; then
|
||
${lib.optionalString d.needsDDNS ''
|
||
${ddnsPrompt}
|
||
DDNS_DISPLAY="$DDNS_LINE"
|
||
PENDING_NJALLA="curl \"$DDNS_LINE\""
|
||
fi
|
||
''}
|
||
|
||
${confirmDomain d.name}
|
||
|
||
if [ "$REDO" = false ] && [ -n "''${PENDING_NJALLA:-}" ]; then
|
||
NEW_NJALLA_ENTRIES="$NEW_NJALLA_ENTRIES
|
||
$PENDING_NJALLA"
|
||
PENDING_NJALLA=""
|
||
fi
|
||
else
|
||
echo " Skipped."
|
||
fi
|
||
done
|
||
fi
|
||
'') domains;
|
||
|
||
domainSummary = lib.concatMapStringsSep "\n" (d: ''
|
||
if [ -f "/var/lib/domains/${d.name}" ]; then
|
||
echo " ${d.label}: $(cat /var/lib/domains/${d.name})"
|
||
fi
|
||
'') domains;
|
||
|
||
setupScript = pkgs.writeShellScriptBin "sovran-setup-domains" ''
|
||
set -euo pipefail
|
||
|
||
GREEN='\033[0;32m'
|
||
YELLOW='\033[1;33m'
|
||
CYAN='\033[0;36m'
|
||
NC='\033[0m'
|
||
DOLLAR='$'
|
||
|
||
echo ""
|
||
echo -e "''${CYAN}══════════════════════════════════════════════''${NC}"
|
||
echo -e "''${CYAN} Sovran_SystemsOS — Domain & DDNS Setup''${NC}"
|
||
echo -e "''${CYAN}══════════════════════════════════════════════''${NC}"
|
||
echo ""
|
||
echo -e "''${YELLOW}Before running this, you need:''${NC}"
|
||
echo ""
|
||
echo " 1. Domains/subdomains purchased on https://njal.la"
|
||
echo " 2. For each subdomain, add a Dynamic record in"
|
||
echo " your Njal.la dashboard."
|
||
echo " 3. Njal.la will give you a curl command like:"
|
||
echo ""
|
||
echo -e " ''${CYAN}curl \"https://njal.la/update/?h=sub.domain.com&k=abc123&auto\"''${NC}"
|
||
echo ""
|
||
echo " Have those curl commands ready."
|
||
echo ""
|
||
read -p "Press Enter to continue..."
|
||
|
||
# ── Create directories ────────────────────────────
|
||
mkdir -p /var/lib/domains
|
||
mkdir -p /var/lib/njalla
|
||
|
||
NJALLA_ENTRIES=""
|
||
PENDING_NJALLA=""
|
||
|
||
# ── SSL Email ─────────────────────────────────────
|
||
REDO=true
|
||
while [ "$REDO" = true ]; do
|
||
REDO=false
|
||
echo ""
|
||
echo -e "''${GREEN}── SSL Certificate Email ──''${NC}"
|
||
echo "Let's Encrypt needs an email for certificate notifications."
|
||
EXISTING_EMAIL=""
|
||
if [ -f "/var/lib/domains/sslemail" ]; then
|
||
EXISTING_EMAIL=$(cat /var/lib/domains/sslemail)
|
||
echo -e " Current: ''${CYAN}$EXISTING_EMAIL''${NC}"
|
||
fi
|
||
read -p " Email address (or Enter to keep current): " EMAIL_INPUT
|
||
SSL_EMAIL="''${EMAIL_INPUT:-$EXISTING_EMAIL}"
|
||
if [ -n "$SSL_EMAIL" ]; then
|
||
while true; do
|
||
echo ""
|
||
echo -e " ''${YELLOW}You entered:''${NC}"
|
||
echo -e " Email: ''${CYAN}$SSL_EMAIL''${NC}"
|
||
echo ""
|
||
read -p " Is this correct? (y/n): " CONFIRM
|
||
case "$CONFIRM" in
|
||
[yY])
|
||
echo "$SSL_EMAIL" > /var/lib/domains/sslemail
|
||
echo -e " ''${GREEN}Saved.''${NC}"
|
||
break
|
||
;;
|
||
[nN])
|
||
echo " Let's try again."
|
||
REDO=true
|
||
break
|
||
;;
|
||
*)
|
||
echo " Please enter y or n."
|
||
;;
|
||
esac
|
||
done
|
||
fi
|
||
done
|
||
|
||
# ── All module domains ────────────────────────────
|
||
${domainPrompts}
|
||
|
||
# ── Final review ──────────────────────────────────
|
||
echo ""
|
||
echo -e "''${CYAN}══════════════════════════════════════════════''${NC}"
|
||
echo -e "''${CYAN} Review All Entries''${NC}"
|
||
echo -e "''${CYAN}══════════════════════════════════════════════''${NC}"
|
||
echo ""
|
||
echo " Configured domains:"
|
||
${domainSummary}
|
||
echo ""
|
||
echo " DDNS entries:"
|
||
if [ -n "$NJALLA_ENTRIES" ]; then
|
||
echo "$NJALLA_ENTRIES"
|
||
else
|
||
echo " (none)"
|
||
fi
|
||
echo ""
|
||
read -p " Does everything look correct? (y/n): " FINAL_CONFIRM
|
||
if [ "$FINAL_CONFIRM" != "y" ] && [ "$FINAL_CONFIRM" != "Y" ]; then
|
||
echo ""
|
||
echo -e " ''${YELLOW}Setup cancelled. Run 'sudo sovran-setup-domains' to start over.''${NC}"
|
||
echo ""
|
||
exit 1
|
||
fi
|
||
|
||
# ── Write njalla.sh ───────────────────────────────
|
||
echo ""
|
||
echo -e "''${GREEN}── Generating DDNS script ──''${NC}"
|
||
|
||
cat > /var/lib/njalla/njalla.sh <<SCRIPT
|
||
#!/usr/bin/env bash
|
||
IP=\$(dig @resolver4.opendns.com myip.opendns.com +short -4)
|
||
$NJALLA_ENTRIES
|
||
SCRIPT
|
||
|
||
chmod 700 /var/lib/njalla/njalla.sh
|
||
echo " Written to /var/lib/njalla/njalla.sh"
|
||
|
||
# ── Run DDNS update now ───────────────────────────
|
||
echo ""
|
||
read -p "Update Njal.la DNS records now? (y/n): " RUN_NOW
|
||
if [ "$RUN_NOW" = "y" ]; then
|
||
bash /var/lib/njalla/njalla.sh
|
||
echo " DNS records updated."
|
||
fi
|
||
|
||
# ── Mark setup complete ───────────────────────────
|
||
touch /var/lib/domains/.setup-complete
|
||
|
||
# ── Summary ───────────────────────────────────────
|
||
echo ""
|
||
echo -e "''${CYAN}══════════════════════════════════════════════''${NC}"
|
||
echo -e "''${CYAN} Setup Complete!''${NC}"
|
||
echo -e "''${CYAN}══════════════════════════════════════════════''${NC}"
|
||
echo ""
|
||
echo " Domain files: /var/lib/domains/"
|
||
echo " DDNS script: /var/lib/njalla/njalla.sh"
|
||
echo " DDNS cron: Every 15 minutes (already configured)"
|
||
echo ""
|
||
echo -e "''${YELLOW} Rebuilding to activate services with new domains...''${NC}"
|
||
echo ""
|
||
nixos-rebuild switch --flake /etc/nixos#nixos
|
||
'';
|
||
|
||
addDomainScript = pkgs.writeShellScriptBin "sovran-add-domains" ''
|
||
set -euo pipefail
|
||
|
||
GREEN='\033[0;32m'
|
||
YELLOW='\033[1;33m'
|
||
CYAN='\033[0;36m'
|
||
NC='\033[0m'
|
||
DOLLAR='$'
|
||
|
||
MISSING=false
|
||
NEW_NJALLA_ENTRIES=""
|
||
PENDING_NJALLA=""
|
||
|
||
echo ""
|
||
echo -e "''${CYAN}══════════════════════════════════════════════''${NC}"
|
||
echo -e "''${CYAN} Sovran_SystemsOS — New Feature Domains''${NC}"
|
||
echo -e "''${CYAN}══════════════════════════════════════════════''${NC}"
|
||
echo ""
|
||
echo " Checking for newly enabled features that need domains..."
|
||
|
||
mkdir -p /var/lib/domains
|
||
mkdir -p /var/lib/njalla
|
||
|
||
${missingDomainPrompts}
|
||
|
||
if [ "$MISSING" = false ]; then
|
||
echo ""
|
||
echo -e "''${GREEN} All domains are already configured. Nothing to do.''${NC}"
|
||
echo ""
|
||
exit 0
|
||
fi
|
||
|
||
# ── Final review ──────────────────────────────────
|
||
echo ""
|
||
echo -e "''${CYAN}══════════════════════════════════════════════''${NC}"
|
||
echo -e "''${CYAN} Review New Entries''${NC}"
|
||
echo -e "''${CYAN}══════════════════════════════════════════════''${NC}"
|
||
echo ""
|
||
echo " All configured domains:"
|
||
${domainSummary}
|
||
echo ""
|
||
echo " New DDNS entries:"
|
||
if [ -n "$NEW_NJALLA_ENTRIES" ]; then
|
||
echo "$NEW_NJALLA_ENTRIES"
|
||
else
|
||
echo " (none)"
|
||
fi
|
||
echo ""
|
||
read -p " Does everything look correct? (y/n): " FINAL_CONFIRM
|
||
if [ "$FINAL_CONFIRM" != "y" ] && [ "$FINAL_CONFIRM" != "Y" ]; then
|
||
echo ""
|
||
echo -e " ''${YELLOW}Setup cancelled. Run 'sudo sovran-add-domains' to start over.''${NC}"
|
||
echo ""
|
||
exit 1
|
||
fi
|
||
|
||
# ── Append new entries to njalla.sh ───────────────
|
||
if [ -n "$NEW_NJALLA_ENTRIES" ]; then
|
||
echo ""
|
||
echo -e "''${GREEN}── Updating DDNS script ──''${NC}"
|
||
|
||
if [ -f /var/lib/njalla/njalla.sh ]; then
|
||
echo "$NEW_NJALLA_ENTRIES" >> /var/lib/njalla/njalla.sh
|
||
echo " Appended new entries to /var/lib/njalla/njalla.sh"
|
||
else
|
||
cat > /var/lib/njalla/njalla.sh <<SCRIPT
|
||
#!/usr/bin/env bash
|
||
IP=\$(dig @resolver4.opendns.com myip.opendns.com +short -4)
|
||
$NEW_NJALLA_ENTRIES
|
||
SCRIPT
|
||
chmod 700 /var/lib/njalla/njalla.sh
|
||
echo " Created /var/lib/njalla/njalla.sh"
|
||
fi
|
||
|
||
echo ""
|
||
read -p "Update Njal.la DNS records now? (y/n): " RUN_NOW
|
||
if [ "$RUN_NOW" = "y" ]; then
|
||
bash /var/lib/njalla/njalla.sh
|
||
echo " DNS records updated."
|
||
fi
|
||
fi
|
||
|
||
# ── Summary ───────────────────────────────────────
|
||
echo ""
|
||
echo -e "''${CYAN}═<EFBFBD><EFBFBD>════════════════════════════════════════════''${NC}"
|
||
echo -e "''${CYAN} New Domains Added!''${NC}"
|
||
echo -e "''${CYAN}══════════════════════════════════════════════''${NC}"
|
||
echo ""
|
||
echo " All configured domains:"
|
||
${domainSummary}
|
||
echo ""
|
||
echo -e "''${YELLOW} Rebuilding to activate services with new domains...''${NC}"
|
||
echo ""
|
||
nixos-rebuild switch --flake /etc/nixos#nixos
|
||
'';
|
||
|
||
needsSetup = pkgs.writeShellScriptBin "sovran-domains-need-setup" ''
|
||
# First boot — no setup done at all
|
||
if [ ! -f /var/lib/domains/.setup-complete ]; then
|
||
exit 0
|
||
fi
|
||
|
||
# Existing machine — check for missing domain files
|
||
for NAME in ${domainNamesList}; do
|
||
if [ ! -f "/var/lib/domains/$NAME" ]; then
|
||
exit 0
|
||
fi
|
||
done
|
||
|
||
# Everything is configured
|
||
exit 1
|
||
'';
|
||
|
||
in
|
||
{
|
||
environment.systemPackages = [
|
||
setupScript
|
||
addDomainScript
|
||
needsSetup
|
||
];
|
||
|
||
environment.etc."xdg/autostart/sovran-setup-domains.desktop".text = ''
|
||
[Desktop Entry]
|
||
Type=Application
|
||
Name=Sovran_SystemsOS Domain Setup
|
||
Comment=Configure domains for newly enabled features
|
||
Exec=${pkgs.bash}/bin/bash -c 'if ${needsSetup}/bin/sovran-domains-need-setup; then if [ ! -f /var/lib/domains/.setup-complete ]; then ${pkgs.gnome-terminal}/bin/gnome-terminal -- sudo ${setupScript}/bin/sovran-setup-domains; else ${pkgs.gnome-terminal}/bin/gnome-terminal -- sudo ${addDomainScript}/bin/sovran-add-domains; fi; fi'
|
||
Terminal=false
|
||
X-GNOME-Autostart-enabled=true
|
||
'';
|
||
}
|