Merge pull request #297805 from ambroisie/podgrab-user

{ config, lib, pkgs, ... }:

let

  cfg = config.services.podgrab;

  stateDir = "/var/lib/podgrab";

in

{

  options.services.podgrab = with lib; {

      example = 4242;

      description = "The port on which Podgrab will listen for incoming HTTP traffic.";

    };

    dataDirectory = mkOption {

      type = types.path;

      default = "${stateDir}/data";

      example = "/mnt/podcasts";

      description = "Directory to store downloads.";

    };

    user = mkOption {

      type = types.str;

      default = "podgrab";

      description = "User under which Podgrab runs, and which owns the download directory.";

    };

    group = mkOption {

      type = types.str;

      default = "podgrab";

      description = "Group under which Podgrab runs, and which owns the download directory.";

    };

  };

  config = lib.mkIf cfg.enable {

    systemd.tmpfiles.settings."10-pyload" = {

      ${cfg.dataDirectory}.d = { inherit (cfg) user group; };

    };

    systemd.services.podgrab = {

      description = "Podgrab podcast manager";

      wantedBy = [ "multi-user.target" ];

      environment = {

        CONFIG = "/var/lib/podgrab/config";

        DATA = "/var/lib/podgrab/data";

        CONFIG = "${stateDir}/config";

        DATA = cfg.dataDirectory;

        GIN_MODE = "release";

        PORT = toString cfg.port;

      };

      serviceConfig = {

        DynamicUser = true;

        User = cfg.user;

        Group = cfg.group;

        EnvironmentFile = lib.optionals (cfg.passwordFile != null) [

          cfg.passwordFile

        ];

        ExecStart = "${pkgs.podgrab}/bin/podgrab";

        WorkingDirectory = "${pkgs.podgrab}/share";

        StateDirectory = [ "podgrab/config" "podgrab/data" ];

        StateDirectory = [ "podgrab/config" ];

      };

    };

    users.users.podgrab = lib.mkIf (cfg.user == "podgrab") {

      isSystemUser = true;

      group = cfg.group;

    };

    users.groups.podgrab = lib.mkIf (cfg.group == "podgrab") { };

  };

  meta.maintainers = with lib.maintainers; [ ambroisie ];