29027fd1e1
Using pkgs.lib on the spine of module evaluation is problematic because the pkgs argument depends on the result of module evaluation. To prevent an infinite recursion, pkgs and some of the modules are evaluated twice, which is inefficient. Using ‘with lib’ prevents this problem.
151 lines
3.7 KiB
Nix
151 lines
3.7 KiB
Nix
# Avahi daemon.
|
|
{ config, lib, pkgs, ... }:
|
|
|
|
with lib;
|
|
|
|
let
|
|
|
|
cfg = config.services.avahi;
|
|
|
|
inherit (pkgs) avahi;
|
|
|
|
avahiDaemonConf = with cfg; pkgs.writeText "avahi-daemon.conf" ''
|
|
[server]
|
|
${# Users can set `networking.hostName' to the empty string, when getting
|
|
# a host name from DHCP. In that case, let Avahi take whatever the
|
|
# current host name is; setting `host-name' to the empty string in
|
|
# `avahi-daemon.conf' would be invalid.
|
|
if hostName != ""
|
|
then "host-name=${hostName}"
|
|
else ""}
|
|
browse-domains=${concatStringsSep ", " browseDomains}
|
|
use-ipv4=${if ipv4 then "yes" else "no"}
|
|
use-ipv6=${if ipv6 then "yes" else "no"}
|
|
|
|
[wide-area]
|
|
enable-wide-area=${if wideArea then "yes" else "no"}
|
|
|
|
[publish]
|
|
disable-publishing=${if publishing then "no" else "yes"}
|
|
'';
|
|
|
|
in
|
|
|
|
{
|
|
|
|
###### interface
|
|
|
|
options = {
|
|
|
|
services.avahi = {
|
|
|
|
enable = mkOption {
|
|
default = false;
|
|
description = ''
|
|
Whether to run the Avahi daemon, which allows Avahi clients
|
|
to use Avahi's service discovery facilities and also allows
|
|
the local machine to advertise its presence and services
|
|
(through the mDNS responder implemented by `avahi-daemon').
|
|
'';
|
|
};
|
|
|
|
hostName = mkOption {
|
|
type = types.str;
|
|
description = ''
|
|
Host name advertised on the LAN. If not set, avahi will use the value
|
|
of config.networking.hostName.
|
|
'';
|
|
};
|
|
|
|
browseDomains = mkOption {
|
|
default = [ "0pointer.de" "zeroconf.org" ];
|
|
description = ''
|
|
List of non-local DNS domains to be browsed.
|
|
'';
|
|
};
|
|
|
|
ipv4 = mkOption {
|
|
default = true;
|
|
description = ''Whether to use IPv4'';
|
|
};
|
|
|
|
ipv6 = mkOption {
|
|
default = false;
|
|
description = ''Whether to use IPv6'';
|
|
};
|
|
|
|
wideArea = mkOption {
|
|
default = true;
|
|
description = ''Whether to enable wide-area service discovery.'';
|
|
};
|
|
|
|
publishing = mkOption {
|
|
default = true;
|
|
description = ''Whether to allow publishing.'';
|
|
};
|
|
|
|
nssmdns = mkOption {
|
|
default = false;
|
|
description = ''
|
|
Whether to enable the mDNS NSS (Name Service Switch) plug-in.
|
|
Enabling it allows applications to resolve names in the `.local'
|
|
domain by transparently querying the Avahi daemon.
|
|
'';
|
|
};
|
|
|
|
};
|
|
|
|
};
|
|
|
|
|
|
###### implementation
|
|
|
|
config = mkIf cfg.enable {
|
|
|
|
services.avahi.hostName = mkDefault config.networking.hostName;
|
|
|
|
users.extraUsers = singleton
|
|
{ name = "avahi";
|
|
uid = config.ids.uids.avahi;
|
|
description = "`avahi-daemon' privilege separation user";
|
|
home = "/var/empty";
|
|
};
|
|
|
|
users.extraGroups = singleton
|
|
{ name = "avahi";
|
|
gid = config.ids.gids.avahi;
|
|
};
|
|
|
|
system.nssModules = optional cfg.nssmdns pkgs.nssmdns;
|
|
|
|
environment.systemPackages = [ avahi ];
|
|
|
|
jobs.avahi_daemon =
|
|
{ name = "avahi-daemon";
|
|
|
|
startOn = "ip-up";
|
|
|
|
script =
|
|
''
|
|
export PATH="${avahi}/bin:${avahi}/sbin:$PATH"
|
|
|
|
# Make NSS modules visible so that `avahi_nss_support ()' can
|
|
# return a sensible value.
|
|
export LD_LIBRARY_PATH="${config.system.nssModules.path}"
|
|
|
|
mkdir -p /var/run/avahi-daemon
|
|
|
|
exec ${avahi}/sbin/avahi-daemon --syslog -f "${avahiDaemonConf}"
|
|
'';
|
|
};
|
|
|
|
services.dbus.enable = true;
|
|
services.dbus.packages = [avahi];
|
|
|
|
# Enabling Avahi without exposing it in the firewall doesn't make
|
|
# sense.
|
|
networking.firewall.allowedUDPPorts = [ 5353 ];
|
|
|
|
};
|
|
|
|
}
|