kalmenn/pterodactyl-nix
1
0
Fork 0
Code Issues Pull requests Activity

testing

Browse source
This commit is contained in:
kalmenn 2025-07-07 13:52:45 +02:00
parent 6fbd9b2a6c
commit 50f600854d
Signed by: kalmenn
GPG key ID: F500055C44BC3834
6 changed files with 206 additions and 73 deletions
Download patch file Download diff file Expand all files Collapse all files

1
.gitignore vendored Normal file
View file

@ -0,0 +1 @@
/result

12
flake.nix
View file

@ -11,9 +11,13 @@
); );
packages = nixpkgs.lib.genAttrs [ "x86_64-linux" ] ( packages = nixpkgs.lib.genAttrs [ "x86_64-linux" ] (
system: nixpkgs.lib.genAttrs [ "pterodactyl" "php" "wings" ] ( system: let
package: import ./packages/${package}.nix { pkgs = import nixpkgs { inherit system; }; }; pkgs = import nixpkgs { inherit system; };
) in rec {
}); php = import ./packages/php.nix { inherit pkgs; };
pterodactyl = import ./packages/pterodactyl.nix { inherit pkgs php; };
wings = import ./packages/wings.nix { inherit pkgs; };
}
);
}; };
} }

233
modules/pterodactyl.nix
View file

@ -2,20 +2,36 @@
{ lib, config, pkgs, ... }: { lib, config, pkgs, ... }:
let let
cfg = config.services.pterodactyl; thisConfig = config.services.pterodactyl;
flakePkgs = flake.outputs.packages.${pkgs.system};
defaultUser = "pterodactyl"; defaultUser = "pterodactyl";
in { in {
options.services.pterodactyl = { options.services.pterodactyl = {
enable = lib.mkEnableOption "Enable the pterodacytl game server panel"; enable = lib.mkEnableOption "Enable the pterodacytl game server panel";
proxy = { pkg = lib.mkOption {
enable = lib.mkEnableOption "Automatically configure Nginx to serve the panel"; type = lib.types.package;
serverName = lib.mkOption { description = "The package in which to source the php files used by pterodactyl";
default = flake.outputs.packages.${pkgs.system}.pterodactyl;
};
dataDir = lib.mkOption {
type = lib.types.str;
description = "The directory in which to store stateful data";
default = "/var/lib/pterodactyl";
};
server = {
enable = lib.mkEnableOption ''
Automatically configure Nginx to serve the panel
If you need more control over the nginx proxy, for now you must leave this option disabled
and write your own nginx configuration. Feel free to copy ours as a starting point.
'';
name = lib.mkOption {
type = lib.types.str; type = lib.types.str;
description = "The canonical domain on which the panel will be hosted"; description = "The canonical domain name on which the panel will be hosted";
default = "localhost"; default = "localhost";
example = "pterodactyl.example.com"; example = "pterodactyl.example.com";
}; };
@ -27,27 +43,64 @@ in {
}; };
}; };
user = lib.mkOption { php = {
type = lib.types.str; socket = lib.mkOption {
description = '' type = lib.types.path;
The user that owns the files managed by the panel. description = "The location of the unix socket used by php-fpm";
If you change this, make sure their files are accessible by your www user default = config.services.phpfpm.pools.pterodactyl.socket;
(probably "nginx"). };
'';
default = defaultUser;
example = defaultUser;
};
pkg = lib.mkOption { user = lib.mkOption {
type = lib.types.package; type = lib.types.str;
description = "The package in which to source the php files used by pterodactyl"; description = ''
default = flakePkgs.pterodactyl; The user that the php-fpm processes will run under. See also the `group` option.
};
dataDir = lib.mkOption { If you change this, make sure the unix socket is accessible by your www user
type = lib.types.str; (probably "nginx").
description = "The directory in which to store stateful data"; '';
default = "/var/lib/pterodactyl"; default = defaultUser;
};
group = lib.mkOption {
type = lib.types.str;
description = ''
The group that the php-fpm processes will run under. See also the `user` option.
If you change this, make sure the unix socket is accessible by your www user
(probably "nginx").
'';
default = defaultUser;
};
home = lib.mkOption {
type = lib.types.path;
description = ''
Where Pterodactyl stores its stateful data is hardcoded to be right next to its php
scripts. But since we'd like to store the latter in the nix store and the nix store is
immutable, we have to find a workaround.
So, the directory pointed to by this option will be where we instruct php to find its
scripts and data. And the actual files will be simlinked to from this directory, so we can
actually store them in a different location.
'';
default = "/var/lib/pterodactyl";
};
manageHome = lib.mkOption {
type = lib.types.bool;
description = ''
Whether or not to automatically create the symlinks
See services.pterodactyl.php.home for details.
'';
default = true;
};
pkg = lib.mkOption {
type = lib.types.package;
description = "The php package to use";
default = flake.outputs.packages.${pkgs.system}.php;
};
}; };
redis = { redis = {
@ -67,29 +120,37 @@ in {
}; };
}; };
config = lib.mkIf cfg.enable { config = lib.mkIf thisConfig.enable {
users = lib.mkIf (cfg.user == defaultUser) { users = {
users.${cfg.user} = { users = {
isSystemUser = true; ${thisConfig.php.user} = lib.mkIf (thisConfig.php.user == defaultUser) {
createHome = true; isSystemUser = true;
home = cfg.dataDir; createHome = true;
group = cfg.user; home = thisConfig.php.home;
group = thisConfig.php.group;
};
${config.services.nginx.user} = lib.mkIf (thisConfig.php.group == defaultUser) {
extraGroups = [ thisConfig.php.group ];
};
}; };
groups.${cfg.user} = { }; groups = {
${thisConfig.php.group} = lib.mkIf (thisConfig.php.group == defaultUser) {};
users.${config.services.nginx.user}.extraGroups = [ cfg.user ]; };
}; };
services.redis.servers.${cfg.redis.name} = lib.mkIf cfg.redis.configureLocally { services.redis.servers.${thisConfig.redis.name} = lib.mkIf thisConfig.redis.configureLocally {
enable = true; enable = true;
port = cfg.redis.port; port = thisConfig.redis.port;
}; };
services.nginx = lib.mkIf cfg.proxy.enable { services.nginx = lib.mkIf thisConfig.server.enable {
enable = true; enable = true;
virtualHosts."${cfg.serverName}" = { virtualHosts."pterodactyl" = {
serverName = thisConfig.server.name;
root = "${config.services.pterodactyl.pkg}/public"; root = "${config.services.pterodactyl.pkg}/public";
extraConfig = '' extraConfig = ''
@ -101,7 +162,7 @@ in {
include ${pkgs.nginx}/conf/fastcgi_params; include ${pkgs.nginx}/conf/fastcgi_params;
fastcgi_split_path_info ^(.+\.php)(/.+)$; fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass unix:${config.services.phpfpm.pools.pterodactyl.socket}; fastcgi_pass unix:${thisConfig.php.socket};
fastcgi_index index.php; fastcgi_index index.php;
@ -127,7 +188,7 @@ in {
}; };
services.phpfpm.pools.pterodactyl = { services.phpfpm.pools.pterodactyl = {
user = cfg.user; user = thisConfig.php.user;
settings = { settings = {
"listen.owner" = config.services.nginx.user; "listen.owner" = config.services.nginx.user;
"pm" = "dynamic"; "pm" = "dynamic";
@ -145,21 +206,81 @@ in {
}; };
}; };
systemd.services.pteroq = {
enable = true; systemd = {
description = "Pterodactyl Queue Worker"; tmpfiles.settings."10-pterodactyl" = lib.mkIf thisConfig.php.manageHome (let
after = [ "redis-${cfg.redis.name}.service" ]; home = thisConfig.php.home;
unitConfig = { StartLimitInterval = 180; }; src = "${thisConfig.pkg}/share/php/pterodactyl-panel";
serviceConfig = { data = thisConfig.dataDir;
User = cfg.user;
Group = cfg.user; user = thisConfig.php.user;
Restart = "always"; group = thisConfig.php.group;
ExecStart = in {
"${flakePkgs.php}/bin/php ${cfg.pkg}/artisan queue:work --queue=high,standard,low --sleep=3 --tries=3"; "${data}/cache" = { "d" = { inherit group user; mode = "750"; }; };
StartLimitBurst = 30; "${data}/storage" = { "d" = { inherit group user; mode = "750"; }; };
RestartSec = "5s"; });
services = {
pterodactyl-setup = lib.mkIf thisConfig.php.manageHome {
description = "Setup the necessary files for the pterodactyl panel to work";
before = [ "pteroq.service" ]
++ (if thisConfig.server.enable then [ "nginx.service" ] else []);
wantedBy = [ "multi-user.target" "pteroq.service" ]
++ (if thisConfig.server.enable then [ "nginx.service" ] else []);
serviceConfig = {
Type = "oneshot";
User = thisConfig.php.user;
Group = thisConfig.php.group;
ExecStart = pkgs.writeShellScript "pterodactyl-setup.sh" ''
SRC="${thisConfig.pkg}/share/php/pterodactyl-panel/";
HOME="${thisConfig.php.home}";
USER="${thisConfig.php.user}";
GROUP="${thisConfig.php.group}";
rm $HOME/* -r;
mkdir -p -m 0770 "$HOME";
for file in app bootstrap config database public resources routes vendor artisan; do
cp -r "$SRC/$file" "$HOME"
chmod -R 0550 "$HOME/$file"
done;
mkdir -p -m 0550 "$HOME/bootstrap"
cp "$SRC/bootstrap/app.php" "$HOME/bootstrap/app.php";
chmod -R 0550 "$HOME/bootstrap/app.php";
ln -s "${thisConfig.dataDir}/cache" "$HOME/bootstrap/cache";
ln -s "${thisConfig.dataDir}/storage" "$HOME/storage";
'';
};
};
pteroq = {
enable = true;
description = "Pterodactyl Queue Worker";
after = [ "redis-${thisConfig.redis.name}.service" ];
unitConfig = { StartLimitInterval = 180; };
serviceConfig = {
User = thisConfig.php.user;
Group = thisConfig.php.group;
WorkingDirectory = thisConfig.php.home;
ExecStart = "${thisConfig.php.pkg}/bin/php ${thisConfig.php.home}/artisan queue:work --queue=high,standard,low --sleep=3 --tries=3";
Restart = "always";
RestartSec = "5s";
StartLimitBurst = 30;
};
wantedBy = [ "multi-user.target" ];
};
}; };
wantedBy = [ "multi-user.target" ];
}; };
}; };
} }

10
packages/php.nix
View file

@ -1,12 +1,12 @@
{ pkgs }: { pkgs ? import <nixpkgs> }:
pkgs.php83.buildEnv { pkgs.php83.buildEnv {
extensions = { enabled, all, }: enabled ++ (with all; [ extensions = { enabled, all, }: enabled ++ (with all; [
redis redis
# xdebug xdebug
]); ]);
# extraConfig = '' extraConfig = ''
# xdebug.mode=debug xdebug.mode=debug
# ''; '';
} }

21
packages/pterodactyl.nix
View file

@ -1,9 +1,16 @@
{ pkgs }: { pkgs ? import <nixpkgs>, php ? pkgs.php }:
let php.buildComposerProject2 (finalAttrs: {
pname = "pterodactyl-panel";
version = "1.11.11"; version = "1.11.11";
in pkgs.fetchzip {
url = "https://github.com/pterodactyl/panel/releases/download/v${ version }/panel.tar.gz"; src = pkgs.fetchzip {
hash = "sha256-0nOHtReVUVXYQY/glS4x0gkbhetoXSWg4rRwOJlkcM8="; url = "https://github.com/pterodactyl/panel/releases/download/v${finalAttrs.version}/panel.tar.gz";
stripRoot = false; hash = "sha256-0nOHtReVUVXYQY/glS4x0gkbhetoXSWg4rRwOJlkcM8=";
} stripRoot = false;
};
vendorHash = "sha256-WBzGGWCWNqvU4Ws7wBh8Ads7RBawBaxN1QNIUI4ivOQ=";
inherit php;
})

2
packages/wings.nix
View file

@ -1,4 +1,4 @@
{ pkgs }: { pkgs ? import <nixpkgs> }:
let let
version = "1.11.13"; version = "1.11.13";