dotfiles/nixng/containers/matrix/synapse/redis.nix

{
  makeSystem,
  nixpkgs,
}:
makeSystem {
  system = "x86_64-linux";
  name = "redis";
  inherit nixpkgs;
  config = {pkgs, ...}: {
    dumb-init = {
      enable = true;
      type.services = {};
    };

    users.users."redis" = {
      home = "/var/empty";
      uid = 9001;
      group = "redis";
    };

    users.groups."redis" = {
      gid = 9001;
    };

    init.services.redis = {
      enabled = true;
      shutdownOnExit = true;
      script = pkgs.writeShellScript "redis-run" ''
        cd /var/lib/redis
        chpst -U redis:redis ${pkgs.redis}/bin/redis-server ${./redis.conf}
      '';
    };

    init.services.redis-setup = {
      enabled = true;
      script = pkgs.writeShellScript "redis-run" ''
        export PATH="${pkgs.redis}/bin:$PATH"
        nc -z 127.0.0.1 6379 -w 10 -v || exit 1

        redis-cli acl setuser default on '>'"$(cat /secrets/redis_password)" allcommands allkeys
        sleep 86400
      '';
    };
  };
}