owntracks and updates

services/caddy.nix

@@ -69,6 +69,11 @@ in
       "${matrix_hostname}:8448".extraConfig =
         config.services.caddy.virtualHosts."${config.services.matrix-conduit.settings.global.server_name
         }".extraConfig;
+
+      "owntracks.${service_configs.https.domain}".extraConfig = ''
+        ${import ../secrets/owntracks_caddy_auth.nix}
+        reverse_proxy :${builtins.toString service_configs.ports.owntracks}
+      '';
     };
   };
 

services/owntracks.nix

@@ -0,0 +1,34 @@
+{ pkgs, service_configs, ... }:
+let
+  owntracks_pkg = pkgs.owntracks-recorder.overrideAttrs (old: {
+    installPhase =
+      old.installPhase
+      + ''
+        mkdir -p $out/usr/share/ot-recorder
+        cp -R docroot/* $out/usr/share/ot-recorder'';
+  });
+in
+{
+  users.groups.owntracks = { };
+  users.users.owntracks = {
+    isNormalUser = true;
+    group = "owntracks";
+  };
+
+  systemd.services.owntracks = {
+    enable = true;
+    description = "Store and access data published by OwnTracks apps";
+    wantedBy = [ "multi-user.target" ];
+
+    serviceConfig = {
+      User = "owntracks";
+      Group = "owntracks";
+      WorkingDirectory = "${owntracks_pkg}";
+      ExecStart = "${owntracks_pkg}/bin/ot-recorder -S ${service_configs.owntracks.data_dir} --doc-root usr/share/ot-recorder --http-port ${builtins.toString service_configs.ports.owntracks} --port 0";
+    };
+  };
+
+  systemd.tmpfiles.rules = [
+    "d ${service_configs.owntracks.data_dir} 0750 owntracks owntracks"
+  ];
+}