forked from DGNum/infrastructure
69 lines
1.6 KiB
Nix
69 lines
1.6 KiB
Nix
# SPDX-FileCopyrightText: 2024 Lubin Bailly <lubin.bailly@dgnum.eu>
|
|
#
|
|
# SPDX-License-Identifier: EUPL-1.2
|
|
|
|
{
|
|
config,
|
|
lib,
|
|
pkgs,
|
|
...
|
|
}:
|
|
{
|
|
services = {
|
|
ulogd = {
|
|
enable = true;
|
|
logLevel = 5;
|
|
settings = {
|
|
global = {
|
|
logfile = "/var/log/ulogd.log";
|
|
stack = [ "ct1:NFCT,ip2str1:IP2STR,pgsql1:PGSQL" ];
|
|
};
|
|
ct1 = { };
|
|
pgsql1 = {
|
|
db = "ulogd";
|
|
user = "ulogd";
|
|
table = "ulog2_ct";
|
|
procedure = "INSERT_CT";
|
|
};
|
|
};
|
|
};
|
|
postgresql = {
|
|
enable = true;
|
|
identMap = ''
|
|
ulogd-map root ulogd
|
|
'';
|
|
authentication = ''
|
|
local ulogd ulogd peer map=ulogd-map
|
|
'';
|
|
|
|
ensureUsers = [
|
|
{
|
|
name = "ulogd";
|
|
ensureDBOwnership = true;
|
|
}
|
|
];
|
|
ensureDatabases = [ "ulogd" ];
|
|
};
|
|
};
|
|
systemd.services.ulogd = {
|
|
serviceConfig.StateDirectory = "ulogd";
|
|
requires = [ "postgresql.service" ];
|
|
after = [ "postgresql.service" ];
|
|
path = [ config.services.postgresql.package ];
|
|
preStart = lib.mkAfter ''
|
|
if ! test -e "/var/lib/ulogd/.initialized"; then
|
|
psql -f "${pkgs.ulogd.doc}/share/doc/ulogd-pgsql/pgsql-ulogd2.sql" -d ulogd -U ulogd
|
|
touch "/var/lib/ulogd/.initialized"
|
|
fi
|
|
'';
|
|
};
|
|
environment.defaultPackages = [
|
|
(pkgs.callPackage ./fill-vlan_prefixes.nix {
|
|
inherit (config.networking) vlans-info;
|
|
postgresql = config.services.postgresql.package;
|
|
})
|
|
(pkgs.callPackage ./nat-request-daddr.nix {
|
|
postgresql = config.services.postgresql.package;
|
|
})
|
|
];
|
|
}
|