project-software/affine/affine.nix

# Auto-generated using compose2nix v0.3.1.
{ pkgs, lib, config, ... }:

let affine-static = "/var/lib/affine";

in {

	system.activationScripts.affine-dir = ''
		mkdir -p ${affine-static}/{config,db,storage}
	'';

  # Runtime
  virtualisation.docker = {
    enable = true;
    autoPrune.enable = true;
  };

  # Enable container name DNS for non-default Podman networks.
  # https://github.com/NixOS/nixpkgs/issues/226365
  networking.firewall.interfaces."docker+".allowedUDPPorts = [ 53 ];

  virtualisation.oci-containers.backend = "docker";

  # Containers
  virtualisation.oci-containers.containers."affine_migration_job" = {
    image = "ghcr.io/toeverything/affine:stable";
    environment = with config.affine.env; {
      "AFFINE_INDEXER_ENABLED" = "false";
      "AFFINE_REVISION" = config.affine.revision;
      "CONFIG_LOCATION" = "${affine-static}/config";
      "DATABASE_URL" = "postgresql://${DB_USERNAME}:${DB_PASSWORD}@postgres:5432/${DB_DATABASE}";
      "DB_DATABASE" = DB_DATABASE;
      "DB_DATA_LOCATION" = "${affine-static}/db";
      "DB_PASSWORD" = DB_PASSWORD;
      "DB_USERNAME" = DB_USERNAME;
      "PORT" = toString PORT;
      "REDIS_SERVER_HOST" = "redis";
      "UPLOAD_LOCATION" = "${affine-static}/storage";
    };
    volumes = [
      "${affine-static}/config:/root/.affine/config:rw"
      "${affine-static}/storage:/root/.affine/storage:rw"
    ];
    cmd = [ "sh" "-c" "node ./scripts/self-host-predeploy.js" ];
    dependsOn = [
      "affine_postgres"
      "affine_redis"
    ];
    log-driver = "journald";
    extraOptions = [
      "--network-alias=affine_migration"
      "--network=affine_default"
    ];
  };
  systemd.services."docker-affine_migration_job" = {
    serviceConfig = {
      Restart = lib.mkOverride 90 "no";
    };
    after = [
      "docker-network-affine_default.service"
    ];
    requires = [
      "docker-network-affine_default.service"
    ];
    partOf = [
      "docker-compose-affine-root.target"
    ];
    wantedBy = [
      "docker-compose-affine-root.target"
    ];
  };
  virtualisation.oci-containers.containers."affine_postgres" = {
    image = "pgvector/pgvector:pg16";
    environment = with config.affine.env; {
      "POSTGRES_DB" = DB_DATABASE;
      "POSTGRES_HOST_AUTH_METHOD" = "trust";
      "POSTGRES_INITDB_ARGS" = "--data-checksums";
      "POSTGRES_PASSWORD" = DB_PASSWORD;
      "POSTGRES_USER" = DB_USERNAME;
    };
    volumes = [
      "${affine-static}/db:/var/lib/postgresql/data:rw"
    ];
    log-driver = "journald";
    extraOptions = with config.affine.env; [
      "--health-cmd=[\"pg_isready\", \"-U\", \"${DB_USERNAME}\", \"-d\", \"${DB_DATABASE}\"]"
      "--health-interval=10s"
      "--health-retries=5"
      "--health-timeout=5s"
      "--network-alias=postgres"
      "--network=affine_default"
    ];
  };
  systemd.services."docker-affine_postgres" = {
    serviceConfig = {
      Restart = lib.mkOverride 90 "always";
    };
    after = [
      "docker-network-affine_default.service"
    ];
    requires = [
      "docker-network-affine_default.service"
    ];
    partOf = [
      "docker-compose-affine-root.target"
    ];
    wantedBy = [
      "docker-compose-affine-root.target"
    ];
  };
  virtualisation.oci-containers.containers."affine_redis" = {
    image = "redis";
    log-driver = "journald";
    extraOptions = [
      "--health-cmd=[\"redis-cli\", \"--raw\", \"incr\", \"ping\"]"
      "--health-interval=10s"
      "--health-retries=5"
      "--health-timeout=5s"
      "--network-alias=redis"
      "--network=affine_default"
    ];
  };
  systemd.services."docker-affine_redis" = {
    serviceConfig = {
      Restart = lib.mkOverride 90 "always";
    };
    after = [
      "docker-network-affine_default.service"
    ];
    requires = [
      "docker-network-affine_default.service"
    ];
    partOf = [
      "docker-compose-affine-root.target"
    ];
    wantedBy = [
      "docker-compose-affine-root.target"
    ];
  };
  virtualisation.oci-containers.containers."affine_server" = {
    image = "ghcr.io/toeverything/affine:stable";
    environment = with config.affine.env; {
      "AFFINE_INDEXER_ENABLED" = "false";
      "AFFINE_REVISION" = config.affine.revision;
      "CONFIG_LOCATION" = "${affine-static}/config";
      "DATABASE_URL" = "postgresql://${DB_USERNAME}:${DB_PASSWORD}@postgres:5432/${DB_DATABASE}";
      "DB_DATABASE" = DB_DATABASE;
      "DB_DATA_LOCATION" = "${affine-static}/db";
      "DB_PASSWORD" = DB_PASSWORD;
      "DB_USERNAME" = DB_USERNAME;
      "PORT" = toString PORT;
      "REDIS_SERVER_HOST" = "redis";
      "UPLOAD_LOCATION" = "${affine-static}/storage";
    };
    volumes = [
		"${affine-static}/config:/root/.affine/config:rw"
    "${affine-static}/storage:/root/.affine/storage:rw"
    ];
    ports = [
      "${ toString config.affine.env.PORT}:3010/tcp"
    ];
    dependsOn = [
      "affine_migration_job"
      "affine_postgres"
      "affine_redis"
    ];
    log-driver = "journald";
    extraOptions = [
      "--network-alias=affine"
      "--network=affine_default"
    ];
  };
  systemd.services."docker-affine_server" = {
    serviceConfig = {
      Restart = lib.mkOverride 90 "always";
    };
    after = [
      "docker-network-affine_default.service"
    ];
    requires = [
      "docker-network-affine_default.service"
    ];
    partOf = [
      "docker-compose-affine-root.target"
    ];
    wantedBy = [
      "docker-compose-affine-root.target"
    ];
  };

  # Networks
  systemd.services."docker-network-affine_default" = {
    path = [ pkgs.docker ];
    serviceConfig = {
      Type = "oneshot";
      RemainAfterExit = true;
      ExecStop = "docker network rm -f affine_default";
    };
    script = ''
      docker network inspect affine_default || docker network create affine_default
    '';
    partOf = [ "docker-compose-affine-root.target" ];
    wantedBy = [ "docker-compose-affine-root.target" ];
  };

  # Root service
  # When started, this will automatically create all resources and start
  # the containers. When stopped, this will teardown all resources.
  systemd.targets."docker-compose-affine-root" = {
    unitConfig = {
      Description = "Root target generated by compose2nix.";
    };
    wantedBy = [ "multi-user.target" ];
  };
}