diff options
author | Ethel Morgan <eth@ethulhu.co.uk> | 2020-05-24 00:48:08 +0100 |
---|---|---|
committer | Ethel Morgan <eth@ethulhu.co.uk> | 2020-05-24 00:48:08 +0100 |
commit | d651b709ab303bc31b7c21ca43547c1e094e9d77 (patch) | |
tree | 48f1d6af85960239463cdb52076f925aa372c227 /modules/services/snapclient.nix | |
parent | 17fc5c96fcb7c1ed192ec5680bc073ea12938bf6 (diff) |
add a service definition for snapclient
Diffstat (limited to 'modules/services/snapclient.nix')
-rw-r--r-- | modules/services/snapclient.nix | 43 |
1 files changed, 43 insertions, 0 deletions
diff --git a/modules/services/snapclient.nix b/modules/services/snapclient.nix new file mode 100644 index 0000000..4fdf266 --- /dev/null +++ b/modules/services/snapclient.nix @@ -0,0 +1,43 @@ +{ config, lib, pkgs, ... }: +with lib; + +let + + cfg = config.eth.services.snapclient; + +in { + + options.eth.services.snapclient = { + + enable = mkEnableOption "Whether to enable snapclient."; + + hostID = mkOption { + type = types.str; + default = config.networking.hostName; + description = "The name to give to the snapserver."; + example = "Living Room"; + }; + }; + + config = mkIf cfg.enable { + + systemd.services.snapclient = { + enable = true; + description = "Snapcast client"; + wants = [ "network.target" "sound.target" ]; + after = [ "network.target" "sound.target" ]; + wantedBy = [ "multi-user.target" ]; + serviceConfig = { + DynamicUser = "yes"; + Group = "audio"; + ExecStart = "${pkgs.snapcast}/bin/snapclient --hostID ${escapeShellArg cfg.hostID}"; + NoNewPrivileges = true; + ProtectKernelTunables = true; + ProtectControlGroups = true; + ProtectKernelModules = true; + RestrictAddressFamilies = "AF_INET AF_INET6 AF_UNIX"; + RestrictNamespaces = true; + }; + }; + }; +} |