Merge pull request #254078 from nbraud/hail

- `kratos` has been updated from 0.10.1 to the first stable version 1.0.0, please read the [0.10.1 to 0.11.0](https://github.com/ory/kratos/releases/tag/v0.11.0), [0.11.0 to 0.11.1](https://github.com/ory/kratos/releases/tag/v0.11.1), [0.11.1 to 0.13.0](https://github.com/ory/kratos/releases/tag/v0.13.0) and [0.13.0 to 1.0.0](https://github.com/ory/kratos/releases/tag/v1.0.0) upgrade guides. The most notable breaking change is the introduction of one-time passwords (`code`) and update of the default recovery strategy from `link` to `code`.

- The `hail` NixOS module was removed, as `hail` was unmaintained since 2017.

## Other Notable Changes {#sec-release-23.11-notable-changes}

- The Cinnamon module now enables XDG desktop integration by default. If you are experiencing collisions related to xdg-desktop-portal-gtk you can safely remove `xdg.portal.extraPortals = [ pkgs.xdg-desktop-portal-gtk ];` from your NixOS configuration.

  ./services/continuous-integration/gitlab-runner.nix

  ./services/continuous-integration/gocd-agent/default.nix

  ./services/continuous-integration/gocd-server/default.nix

  ./services/continuous-integration/hail.nix

  ./services/continuous-integration/hercules-ci-agent/default.nix

  ./services/continuous-integration/hydra/default.nix

  ./services/continuous-integration/jenkins/default.nix

{ config, lib, pkgs, ...}:

with lib;

let

  cfg = config.services.hail;

in {

  ###### interface

  options.services.hail = {

    enable = mkOption {

      type = types.bool;

      default = false;

      description = lib.mdDoc ''

        Enables the Hail Auto Update Service. Hail can automatically deploy artifacts

        built by a Hydra Continuous Integration server. A common use case is to provide

        continuous deployment for single services or a full NixOS configuration.'';

    };

    profile = mkOption {

      type = types.str;

      default = "hail-profile";

      description = lib.mdDoc "The name of the Nix profile used by Hail.";

    };

    hydraJobUri = mkOption {

      type = types.str;

      description = lib.mdDoc "The URI of the Hydra Job.";

    };

    netrc = mkOption {

      type = types.nullOr types.path;

      description = lib.mdDoc "The netrc file to use when fetching data from Hydra.";

      default = null;

    };

    package = mkOption {

      type = types.package;

      default = pkgs.haskellPackages.hail;

      defaultText = literalExpression "pkgs.haskellPackages.hail";

      description = lib.mdDoc "Hail package to use.";

    };

  };

  ###### implementation

  config = mkIf cfg.enable {

    systemd.services.hail = {

      description = "Hail Auto Update Service";

      wants = [ "network-online.target" ];

      wantedBy = [ "multi-user.target" ];

      path = with pkgs; [ nix ];

      environment = {

        HOME = "/var/lib/empty";

      };

      serviceConfig = {

        ExecStart = "${cfg.package}/bin/hail --profile ${cfg.profile} --job-uri ${cfg.hydraJobUri}"

          + lib.optionalString (cfg.netrc != null) " --netrc-file ${cfg.netrc}";

      };

    };

  };

}