nix/2.home-manager
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

opencode: add environmentFile option to set OPENCODE_SERVER_PASSWORD

Browse source 
This commit introduces a new option for the Opencode web service to
allow configuring an environment file so that we can safely specify an
`OPENCODE_SERVER_PASSWORD` environment variable to secure access to the
service without exposing the secret to the Nix store.
This commit is contained in:
squat 2026-03-20 16:09:18 +01:00 • committed by Austin Horstman
parent 51f49da12c
commit 6267895e98
5 changed files with 102 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

1
tests/modules/programs/opencode/default.nix
View file

@ -25,4 +25,5 @@
opencode-mcp-integration = ./mcp-integration.nix;
opencode-mcp-integration-with-override = ./mcp-integration-with-override.nix;
opencode-web-service = ./web-service.nix;
opencode-web-service-environment-file = ./web-service-environment-file.nix;
}

29
tests/modules/programs/opencode/web-service-environment-file.nix Normal file
View file

@ -0,0 +1,29 @@
{
pkgs,
...
}:
{
programs.opencode = {
enable = true;
web = {
enable = true;
environmentFile = "/run/secrets/opencode";
};
};
nmt.script =
if pkgs.stdenv.hostPlatform.isDarwin then
''
serviceFile=LaunchAgents/org.nix-community.home.opencode-web.plist
assertFileExists "$serviceFile"
serviceFileNormalized="$(normalizeStorePaths "$serviceFile")"
assertFileContent "$serviceFileNormalized" ${./web-service-environment-file.plist}
''
else
''
serviceFile=home-files/.config/systemd/user/opencode-web.service
assertFileExists "$serviceFile"
assertFileContent "$serviceFile" ${./web-service-environment-file.service}
'';
}

25
tests/modules/programs/opencode/web-service-environment-file.plist Normal file
View file

@ -0,0 +1,25 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>KeepAlive</key>
<dict>
<key>Crashed</key>
<true/>
<key>SuccessfulExit</key>
<false/>
</dict>
<key>Label</key>
<string>org.nix-community.home.opencode-web</string>
<key>ProcessType</key>
<string>Background</string>
<key>ProgramArguments</key>
<array>
<string>/bin/sh</string>
<string>-c</string>
<string>/bin/wait4path /nix/store &amp;&amp; exec /nix/store/00000000000000000000000000000000-opencode-launchd-wrapper/bin/opencode-launchd-wrapper</string>
</array>
<key>RunAtLoad</key>
<true/>
</dict>
</plist>

12
tests/modules/programs/opencode/web-service-environment-file.service Normal file
View file

@ -0,0 +1,12 @@
[Install]
WantedBy=default.target
[Service]
EnvironmentFile=/run/secrets/opencode
ExecStart=@opencode@/bin/opencode serve
Restart=always
RestartSec=5
[Unit]
After=network.target
Description=OpenCode Web Service