From bdbf858a11cf5948f9b2d5523fbb86ecdf8d9bbd Mon Sep 17 00:00:00 2001
From: Jean-Pierre PRUNARET <jean-pierre+git@prunetwork.fr>
Date: Tue, 1 Nov 2016 19:17:40 +0100
Subject: [PATCH] ajout de services (Elasticsearch & kibana)

---
 public/service-elasticsearch.nix | 34 ++++++++++++++++++++++++++++++++
 public/service-kibana.nix        | 33 +++++++++++++++++++++++++++++++
 2 files changed, 67 insertions(+)
 create mode 100644 public/service-elasticsearch.nix
 create mode 100644 public/service-kibana.nix

diff --git a/public/service-elasticsearch.nix b/public/service-elasticsearch.nix
new file mode 100644
index 0000000..f0718dc
--- /dev/null
+++ b/public/service-elasticsearch.nix
@@ -0,0 +1,34 @@
+{ config, lib, pkgs, ... }:
+
+let
+  inherit (lib) mkIf mkMerge mkThenElse;
+  cfg = config.r6d.config-generator;
+  computers = config.r6d.computers;
+  profiles = config.r6d.profiles;
+in
+
+mkIf cfg.elasticsearch {
+
+  # Paquets
+  environment.systemPackages = with pkgs; [
+  ];
+
+  # Services
+
+  ## E : http://localhost:9200/_cat/indices?v
+  services.elasticsearch = {
+    enable = true;
+    port = 9200;
+    listenAddress = "127.0.0.1";
+    #listenAddress = "_site_";
+  };
+
+  # Réseau
+  # -> Aucun port n'est ouvert caril est recommandé de mettre un proxy HTTP devant
+  networking.firewall = {
+    allowedTCPPorts = [
+    ];
+    allowedUDPPorts = [
+    ];
+  };
+}
diff --git a/public/service-kibana.nix b/public/service-kibana.nix
new file mode 100644
index 0000000..5b8d300
--- /dev/null
+++ b/public/service-kibana.nix
@@ -0,0 +1,33 @@
+{ config, lib, pkgs, ... }:
+
+let
+  inherit (lib) mkIf mkMerge mkThenElse;
+  cfg = config.r6d.config-generator;
+  computers = config.r6d.computers;
+  profiles = config.r6d.profiles;
+in
+
+mkIf cfg.kibana {
+
+  # Paquets
+  environment.systemPackages = with pkgs; [
+  ];
+
+  # Services
+
+  # K : http://localhost:8000
+  services.kibana = {
+    enable = true;
+    elasticsearch.url = "http://127.0.0.1:9200";
+    port = 8000;
+  };
+
+  # Réseau
+  # -> Aucun port n'est ouvert caril est recommandé de mettre un proxy HTTP devant
+  networking.firewall = {
+    allowedTCPPorts = [
+    ];
+    allowedUDPPorts = [
+    ];
+  };
+}