rrvsh/pantheon
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(nixosModules/server): add librechat service

Browse source
This commit is contained in:
Mohammad Rafiq 2025-05-29 22:19:27 +08:00
parent 0b2192986f
commit a24d727134
No known key found for this signature in database
3 changed files with 78 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

68
modules/nixos/server/default.nix
View file

@ -1,11 +1,77 @@
{ lib, config, ... }:
{
lib,
config,
pkgs,
...
}:
{
options.server = {
mountHelios = lib.mkEnableOption "";
enableDDNS = lib.mkEnableOption "";
librechat = {
enable = lib.mkEnableOption "";
mongodbURI = lib.mkOption { type = lib.types.str; };
creds_key_file = lib.mkOption { type = lib.types.str; };
creds_iv_file = lib.mkOption { type = lib.types.str; };
jwt_secret_file = lib.mkOption { type = lib.types.str; };
jwt_refresh_secret_file = lib.mkOption { type = lib.types.str; };
meili_master_key_file = lib.mkOption { type = lib.types.str; };
path = lib.mkOption {
type = lib.types.str;
default = "/var/lib/librechat";
};
user = lib.mkOption {
type = lib.types.str;
default = "librechat";
};
};
};
config = lib.mkMerge [
(lib.mkIf config.server.librechat.enable {
environment.persistence."/persist".directories = [
{
directory = config.server.librechat.path;
user = config.server.librechat.user;
group = "librechat";
}
];
systemd.services.librechat = {
wantedBy = [ "multi-user.target" ];
after = [ "network.target" ];
description = "Open-source app for all your AI conversations, fully customizable and compatible with any AI provider";
serviceConfig = {
Type = "simple"; # FIXME
User = config.server.librechat.user;
LoadCredential = [
"CREDS_KEY_FILE:${config.server.librechat.creds_key_file}"
"CREDS_IV_FILE:${config.server.librechat.creds_iv_file}"
"JWT_SECRET_FILE:${config.server.librechat.jwt_secret_file}"
"JWT_REFRESH_SECRET_FILE:${config.server.librechat.jwt_refresh_secret_file}"
"MEILI_MASTER_KEY_FILE:${config.server.librechat.meili_master_key_file}"
];
};
script = # sh
''
export MONGO_URI="${config.server.librechat.mongodbURI}"
export CREDS_KEY=$(${pkgs.systemd}/bin/systemd-creds cat CREDS_KEY_FILE)
export CREDS_IV=$(${pkgs.systemd}/bin/systemd-creds cat CREDS_IV_FILE)
export JWT_SECRET=$(${pkgs.systemd}/bin/systemd-creds cat JWT_SECRET_FILE)
export JWT_REFRESH_SECRET=$(${pkgs.systemd}/bin/systemd-creds cat JWT_REFRESH_SECRET_FILE)
export MEILI_MASTER_KEY=$(${pkgs.systemd}/bin/systemd-creds cat MEILI_MASTER_KEY_FILE)
cd ${config.server.librechat.path}
${pkgs.librechat}/bin/librechat-server
'';
};
users.users.librechat = lib.mkIf (config.server.librechat.user == "librechat") {
name = "librechat";
isSystemUser = true;
group = "librechat";
description = "LibreChat server user";
};
users.groups.librechat = lib.mkIf (config.server.librechat.user == "librechat") { };
})
(lib.mkIf config.server.enableDDNS {
services.godns = {
enable = true;