Signed-off-by: Ryan Lahfa <ryan@dgnum.eu>

@@ -0,0 +63,4 @@
++) -> Any: ...
++@overload
++def get_secret_json(key: str, default_value: Any, development_only: bool = False) -> Any: ...
++def get_secret_json(

@@ -0,0 +94,4 @@
+-        print("Mobile Push Notification Service registration successfully transferred.")
++        print("Success! Here are the received credentials:")
++        print(f"Org id: {org_id!r}")
++        print(f"Org id: {org_key!r}")

@@ -0,0 +15,4 @@
+let
+  python =
+    (python312.override {
+      packageOverrides = lib.composeManyExtensions [

@@ -0,0 +1,21 @@
+# SPDX-FileCopyrightText: 2025 Maurice Debray <maurice.debray@dgnum.eu>

@@ -0,0 +48,4 @@
+  ];
+
+  preBuild = ''
+    ls -lah

@@ -0,0 +1,54 @@
+<!--

@@ -0,0 +7,4 @@
+  cfg = config.services.zulip;
+in
+{
+  config = lib.mkIf cfg.enable {

@@ -0,0 +6,4 @@
+    ./nginx.nix
+    ./camo.nix
+    ./memcached.nix
+    ./nginx.nix

@@ -0,0 +11,4 @@
+    ./rabbitmq.nix
+    ./redis.nix
+    ./zulip.nix
+  ];

@@ -0,0 +1,78 @@
+# SPDX-FileCopyrightText: 2025 Maurice Debray <maurice.debray@dgnum.eu>

@@ -0,0 +15,4 @@
+    mkOption
+    mkEnableOption
+    mkPackageOption
+    ;

@@ -0,0 +16,4 @@
+    mkEnableOption
+    mkPackageOption
+    ;
+  inherit (builtins) toString;

@@ -0,0 +41,4 @@
+      types.attrsOf valueType;
+    generate =
+      name: value:
+      pkgs.callPackage (

@@ -0,0 +54,4 @@
+              black
+            ];
+            value = builtins.toJSON value;
+            pythonGen = ''

@@ -0,0 +121,4 @@
+    ]
+    ++ lib.optional (cfg.orgKeyFile != null) "zulip_org_key:${cfg.orgKeyFile}"
+    ++ lib.optional (cfg.orgIdFile != null) "zulip_org_id:${cfg.orgIdFile}"
+    ++ lib.mapAttrsToList (key: path: "${key}:${path}") cfg.extraSecrets;

@@ -0,0 +145,4 @@
+    };
+    uwsgiPackage = mkOption {
+      type = types.package;
+      default = pkgs.uwsgi.override {

@@ -0,0 +302,4 @@
+  };
+  config = lib.mkIf cfg.enable {
+    services.zulip = {
+      zulipSettings = {

@@ -0,0 +354,4 @@
+        serviceConfig = {
+          User = "zulip";
+          Group = "zulip";
+          ExecStartPre = lib.getExe zulipInit;

@@ -0,0 +392,4 @@
+          inherit LoadCredential;
+
+          # TODO: Hardening
+        };

@@ -0,0 +16,4 @@
+  ];
+
+  extraConfig = {
+    # Disable monitoring

@@ -12,11 +12,15 @@ lib.extra.mkConfig {
 
   enabledServices = [
     # List of services to enable
+    # "zulip"

@@ -98,0 +112,4 @@
+            }
+          ];
+          gateways = [ "2001:41d0:305:2100::1" ];
+          DHCP = "ipv4";

@@ -98,0 +117,4 @@
+        };
+      };
+      hostId = "22297231";
+      netbirdIp = null;

@@ -150,0 +146,4 @@
+      recommendedOptimisation = lib.mkDefault true;
+      recommendedProxySettings = lib.mkDefault true;
+      recommendedTlsSettings = lib.mkDefault true;
+      recommendedZstdSettings = lib.mkDefault true;

@@ -0,0 +22,4 @@
+    };
+
+    systemd.services.postgresql.postStart = lib.mkAfter ''
+      # $PSQL -tAc "SELECT 1 FROM information_schema.schemata WHERE schema_name='zulip'" zulip | grep -q 1 || $PSQL -tAc 'CREATE SCHEMA zulip AUTHORIZATION zulip;' zulip

@@ -0,0 +314,4 @@
+      description = "Extra secrets to pass to zulip. These secrets will be passed to the python processes through loadcredentials. One can access them using `get_secret` function from `zproject.config` module";
+    };
+  };
+  config = lib.mkIf cfg.enable {

@@ -0,0 +386,4 @@
+            };
+          };
+        }) queues)
+        ++ lib.singleton {

@@ -3,1 +3,4 @@
 # SPDX-License-Identifier: EUPL-1.2
+{
+  sources ? import ../lon.nix,
+}: