nixfmt

modules/nixos/crowdsec/default.nix

@@ -1,4 +1,9 @@
-{ config, lib, pkgs, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
 with lib;
 let
   cfg = config.nas-apps.crowdsec;
@@ -7,23 +12,25 @@ in
   imports = [ ./options.nix ];
   config = lib.mkIf cfg.enable {
     services = {
-      crowdsec = let
-        yaml = (pkgs.formats.yaml {}).generate;
-        acquisitions_file = yaml "acquisitions.yaml" {
-          source = "journalctl";
-          journalctl_filter = ["_SYSTEMD_UNIT=sshd.service"];
-          labels.type = "syslog";
-        };
-      in  {
-        enable = true;
-        enrollKeyFile = "${cfg.dataDir}/enroll.key";
-        settings = {
-          crowdsec_service.acquisition_path = acquisitions_file;
-          api.server = {
-            listen_uri = "0.0.0.0:${toString cfg.port}";
+      crowdsec =
+        let
+          yaml = (pkgs.formats.yaml { }).generate;
+          acquisitions_file = yaml "acquisitions.yaml" {
+            source = "journalctl";
+            journalctl_filter = [ "_SYSTEMD_UNIT=sshd.service" ];
+            labels.type = "syslog";
+          };
+        in
+        {
+          enable = true;
+          enrollKeyFile = "${cfg.dataDir}/enroll.key";
+          settings = {
+            crowdsec_service.acquisition_path = acquisitions_file;
+            api.server = {
+              listen_uri = "0.0.0.0:${toString cfg.port}";
+            };
           };
         };
-      };
 
       crowdsec-firewall-bouncer = {
         enable = true;
@@ -35,17 +42,19 @@ in
     };
 
     systemd.services.crowdsec.serviceConfig = {
-      ExecStartPre = let
-        script = pkgs.writeScriptBin "register-bouncer" ''
-          #!${pkgs.runtimeShell}
-          set -eu
-          set -o pipefail
+      ExecStartPre =
+        let
+          script = pkgs.writeScriptBin "register-bouncer" ''
+            #!${pkgs.runtimeShell}
+            set -eu
+            set -o pipefail
 
-          if ! cscli bouncers list | grep -q "nas-bouncer"; then
-            cscli bouncers add "nas-bouncer" --key "${cfg.apiKey}"
-          fi
-        '';
-      in ["${script}/bin/register-bouncer"];
+            if ! cscli bouncers list | grep -q "nas-bouncer"; then
+              cscli bouncers add "nas-bouncer" --key "${cfg.apiKey}"
+            fi
+          '';
+        in
+        [ "${script}/bin/register-bouncer" ];
     };
 
     networking = {
@@ -55,4 +64,4 @@ in
       };
     };
   };
-}
+}