add fhcalendar download

This commit is contained in:
Kopatz
2024-08-12 23:25:13 +02:00
parent b5af251a0e
commit 668afc76d8
5 changed files with 52 additions and 2 deletions

View File

@@ -55,7 +55,7 @@ in
libheif #convert heic to jpg with `heif-convert something.heic something.jpg`
imagemagick #convert images
tree
#kop-newproject # creates a shell.nix and .envrc
kop-newproject # creates a shell.nix and .envrc
nix-tree # show nix derivations
];
};

View File

@@ -27,5 +27,37 @@ in {
medium = [ "/var/lib/radicale/"];
large = [ "/var/lib/radicale/"];
};
systemd.services.kop-fhcalendar = {
description = "Download fh calendar";
wants = [ "network-online.target" ];
after = [ "network.target" "network-online.target" ];
wantedBy = [ "multi-user.target" ];
serviceConfig = let
# stinky
dir = "${config.services.radicale.settings.storage.filesystem_folder}/collection-root/kopatz/b6d2c446-8109-714a-397f-1f35d3136639";
in {
ExecStart = "${pkgs.kop-fhcalendar}/bin/kop-fhcalendar";
WorkingDirectory = dir;
BindPaths = [ "${dir}" ];
User = "radicale";
Restart = "on-failure";
RestartSec = "5s";
PrivateMounts = lib.mkDefault true;
PrivateTmp = lib.mkDefault true;
PrivateUsers = lib.mkDefault true;
ProtectClock = lib.mkDefault true;
ProtectControlGroups = lib.mkDefault true;
ProtectHome = lib.mkDefault true;
ProtectHostname = lib.mkDefault true;
ProtectKernelLogs = lib.mkDefault true;
ProtectKernelModules = lib.mkDefault true;
ProtectKernelTunables = lib.mkDefault true;
ProtectSystem = lib.mkDefault "strict";
# Needs network access
PrivateNetwork = lib.mkDefault false;
};
};
};
}