Server: added bread-discordbot.

system/server/derekBot.nix

@@ -0,0 +1,75 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}: let
+  cfg = config.niksos.server;
+  userGroup = "bread-dcbot";
+  gitRepo = "https://github.com/The-Breadening/Breadener";
+
+  bash = lib.getExe pkgs.bash;
+  varLib = "/var/lib/";
+  mainDir =
+    varLib
+    + (
+      if !cfg
+      then ""
+      else config.systemd.services.bread-dcbot.serviceConfig.StateDirectory
+    )
+    + "/";
+  programDir = mainDir + "program";
+  denoDir = mainDir + "deno";
+  path = builtins.concatStringsSep ":" (map (x: "${x}/bin/") [pkgs.coreutils pkgs.typst pkgs.deno]);
+in {
+  config = lib.mkIf config.niksos.server {
+    systemd.services.bread-dcbot = {
+      enable = true;
+      after = ["network.target"];
+      wantedBy = ["default.target"];
+      description = "Breadener bot or smt.";
+
+      environment = {
+        "DENO_DIR" = denoDir;
+        "PATH" = lib.mkForce path;
+      };
+
+      preStart = ''
+        export PATH=${path}
+
+        cd "${mainDir}"
+        chown -R ${userGroup}:${userGroup} ${mainDir}* || echo
+
+        mkdir -p "${programDir}" "${denoDir}"
+        if [ -d "${programDir}" ]; then
+          git clone "${gitRepo}"
+        fi
+        chmod -R 750 ${mainDir}* || echo
+
+        rm "${mainDir}/prodBot.json" || echo
+        ln -s "${config.age.secrets.${userGroup}.path}" "${mainDir}/prodBot.json"
+
+        cd "${programDir}"
+        git fetch
+        git reset --hard HEAD
+
+        DENO_DIR=${denoDir} deno i
+      '';
+
+      serviceConfig = {
+        StateDirectory = userGroup;
+        ExecStart = "${bash} -c 'cd ${programDir} && deno run prod'";
+        User = userGroup;
+        Group = userGroup;
+        Restart = "always";
+        RuntimeMaxSec = 6 * 60 * 60; # 6h * 60min * 60s
+      };
+    };
+
+    users.groups.${userGroup} = {};
+    users.users.${userGroup} = {
+      group = userGroup;
+      isSystemUser = true;
+    };
+  };
+}