From c2da6c04eb1a12d0ee2f56a3954673f3bddc122b Mon Sep 17 00:00:00 2001
From: David Thompson <address@hidden>
Date: Sun, 2 Aug 2015 23:29:53 -0400
Subject: [PATCH] gnu: services: Add nginx-service.

* gnu/services/web.scm: New file.
* gnu-system.am (GNU_SYSTEM_MODULES): Add it.
---
 gnu-system.am        |   1 +
 gnu/services/web.scm | 101 +++++++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 102 insertions(+)
 create mode 100644 gnu/services/web.scm

diff --git a/gnu-system.am b/gnu-system.am
index 4b1486e..fd53da4 100644
--- a/gnu-system.am
+++ b/gnu-system.am
@@ -345,6 +345,7 @@ GNU_SYSTEM_MODULES =				\
   gnu/services/lirc.scm				\
   gnu/services/networking.scm			\
   gnu/services/ssh.scm				\
+  gnu/services/web.scm				\
   gnu/services/xorg.scm				\
 						\
   gnu/system.scm				\
diff --git a/gnu/services/web.scm b/gnu/services/web.scm
new file mode 100644
index 0000000..c63813b
--- /dev/null
+++ b/gnu/services/web.scm
@@ -0,0 +1,101 @@
+;;; GNU Guix --- Functional package management for GNU
+;;; Copyright © 2015 David Thompson <address@hidden>
+;;;
+;;; This file is part of GNU Guix.
+;;;
+;;; GNU Guix is free software; you can redistribute it and/or modify it
+;;; under the terms of the GNU General Public License as published by
+;;; the Free Software Foundation; either version 3 of the License, or (at
+;;; your option) any later version.
+;;;
+;;; GNU Guix is distributed in the hope that it will be useful, but
+;;; WITHOUT ANY WARRANTY; without even the implied warranty of
+;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+;;; GNU General Public License for more details.
+;;;
+;;; You should have received a copy of the GNU General Public License
+;;; along with GNU Guix.  If not, see <http://www.gnu.org/licenses/>.
+
+(define-module (gnu services web)
+  #:use-module (gnu services)
+  #:use-module (gnu system shadow)
+  #:use-module (gnu packages admin)
+  #:use-module (gnu packages web)
+  #:use-module (guix records)
+  #:use-module (guix monads)
+  #:use-module (guix store)
+  #:use-module (guix gexp)
+  #:export (nginx-service))
+
+;;; Commentary:
+;;;
+;;; Web services.
+;;;
+;;; Code:
+
+(define (default-nginx-config log-directory run-directory)
+  (text-file* "nginx.conf"
+              "user nginx nginx;\n"
+              "pid " run-directory "/pid;\n"
+              "error_log " log-directory "/error.log info;\n"
+              "http {\n"
+              "    access_log " log-directory "/access.log;\n"
+              "    root /var/www;\n"
+              "    server {}\n"
+              "}\n"
+              "events {}\n"))
+
+(define* (nginx-service #:key (nginx nginx)
+                        (log-directory "/var/log/nginx")
+                        (run-directory "/var/run/nginx")
+                        (config-file
+                         (default-nginx-config log-directory run-directory)))
+  "Return a service that runs NGINX, the nginx web server.
+
+The nginx daemon loads its runtime configuration from CONFIG-FIGLE, stores log
+files in LOG-DIRECTORY, and stores temporary runtime files in RUN-DIRECTORY."
+  (define nginx-binary
+    #~(string-append #$nginx "/sbin/nginx"))
+
+  (define (nginx-action . args)
+    (mlet %store-monad ((config-file config-file))
+      (return
+       #~(lambda _
+           (zero?
+            (system* #$nginx-binary "-c" #$config-file address@hidden))))))
+
+  (define activate
+    (mlet %store-monad ((config-file config-file))
+      (return
+       #~(begin
+           (use-modules (guix build utils))
+           (format #t "creating nginx log directory '~a'~%" #$log-directory)
+           (mkdir-p #$log-directory)
+           (format #t "creating nginx run directory '~a'~%" #$run-directory)
+           (mkdir-p #$run-directory)
+           ;; Check configuration file syntax.
+           (system* #$nginx-binary "-c" #$config-file "-t")))))
+
+  ;; TODO: Add 'reload' action.
+  (mlet %store-monad ((start    (nginx-action "-p" run-directory))
+                      (stop     (nginx-action "-s" "stop"))
+                      (activate activate))
+    (return
+     (service
+      (provision '(nginx))
+      (documentation "Run the nginx daemon.")
+      (requirement '(user-processes loopback))
+      (start start)
+      (stop stop)
+      (activate activate)
+      (user-groups (list (user-group
+                          (name "nginx")
+                          (system? #t))))
+      (user-accounts (list (user-account
+                            (name "nginx")
+                            (group "nginx")
+                            (system? #t)
+                            (comment "nginx server user")
+                            (home-directory "/var/empty")
+                            (shell
+                             #~(string-append #$shadow "/sbin/nologin")))))))))
-- 
2.4.3