nixos-config/modules/systemdNotify.nix

109 lines
3 KiB
Nix

{ config, lib, pkgs, ... }:
with lib;
# TODO replace with more secure service, e.g. matrix-sendmail (matrix-commander)
# needs to support queueing
# flake: https://github.com/emmanuelrosa/erosanix/blob/master/modules/matrix-sendmail.nix
# call `matrix-commander --login` with credentials on service start
let
cfg = config.systemd.notify;
sendmail = pkgs.writeScript "sendmail" ''
#!${pkgs.runtimeShell}
${pkgs.system-sendmail}/bin/sendmail -t <<ERRMAIL
To: ${cfg.email.mailTo}
From: ${cfg.email.mailFrom}
Subject: Service $1 failed
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset=UTF-8
$(systemctl status --full "$1")
ERRMAIL
'';
in {
options = {
systemd.notify = {
enable = mkOption {
type = types.bool;
default = false;
description = "Whether to enable notifications for failed services.";
};
method = mkOption {
type = types.enum [ "libnotify" "email" ];
default = "libnotify";
description = "The method for sending notifications.";
};
libnotify.user = mkOption {
type = types.str;
default = null;
description = "User session to which the notification will be sent.";
};
email.mailTo = mkOption {
type = types.str;
default = null;
description =
"Email address to which the service status will be mailed.";
};
email.mailFrom = mkOption {
type = types.str;
default = null;
description =
"Email address from which the service status will be mailed.";
};
};
systemd.services = mkOption {
type = with types;
attrsOf (submodule {
config.onFailure = optional cfg.enable "notify@%n.service";
});
};
};
config = mkIf cfg.enable {
assertions = [
{
assertion = cfg.method != "libnotify" || cfg.libnotify.user != null;
message = "You need to specify a user";
}
{
assertion = cfg.method != "email"
|| (cfg.email.mailTo != null && cfg.email.mailFrom != null);
message = "You need to specify a sender and a receiver";
}
];
systemd.services."notify@" = {
onFailure = lib.mkForce [ ];
} // optionalAttrs (cfg.method == "libnotify") {
description = "Desktop notifications for %i service failure";
environment = {
DBUS_SESSION_BUS_ADDRESS = "unix:path=/run/user/${
toString config.users.users.${cfg.libnotify.user}.uid
}/bus";
INSTANCE = "%i";
};
script = ''
${pkgs.libnotify}/bin/notify-send --urgency=critical \
"Service '$INSTANCE' failed" \
"$(journalctl -n 6 -o cat -u $INSTANCE)"
'';
serviceConfig = {
Type = "oneshot";
User = cfg.libnotify.user;
};
} // optionalAttrs (cfg.method == "email") {
description = "E-Mail notifications for %i service failure";
serviceConfig = {
ExecStart = "${sendmail} %i";
Type = "oneshot";
};
};
};
}