Compare commits

..

No commits in common. "d713083febdac50058e58706914acead8acf6751" and "fe6d91adee1be0f409dda86686e64dc4b3d31df5" have entirely different histories.

2 changed files with 24 additions and 41 deletions

View file

@ -45,10 +45,10 @@ in
extra-config = mkOption { extra-config = mkOption {
description = "Any options from NixOS"; description = "Any options from NixOS";
}; };
apply = mkOption {
type = with types; functionTo raw;
default = policy: requests: lib.mkMerge (requests ++ [ policy.extra-config ]);
}; };
config = {
resource-type = types.raw; # TODO: what's the type of a NixOS configuration?
apply = policy: requests: lib.mkMerge (requests ++ [ policy.extra-config ]);
}; };
}; };
}; };
@ -85,10 +85,9 @@ in
type = types.bool; type = types.bool;
default = false; default = false;
}; };
}; apply = mkOption {
config = { type = with types; functionTo raw; # TODO: splice out the user type from NixOS
resource-type = types.raw; # TODO: splice out the user type from NixOS default =
apply =
policy: requests: policy: requests:
let let
# Filter out requests that need wheel if policy doesn't allow it # Filter out requests that need wheel if policy doesn't allow it
@ -104,6 +103,7 @@ in
}; };
}; };
}; };
};
applications.hello = applications.hello =
{ ... }: { ... }:
{ {
@ -120,9 +120,7 @@ in
resources = resources =
cfg: cfg:
lib.optionalAttrs cfg.enable { lib.optionalAttrs cfg.enable {
hello.login-shell.packages = { dummy.login-shell.packages.hello = pkgs.hello;
inherit (pkgs) hello;
};
}; };
}; };
environments.single-nixos-vm = environment: { environments.single-nixos-vm = environment: {

View file

@ -72,26 +72,11 @@ in
type = submoduleWith { type = submoduleWith {
class = "fediversity-resource-policy"; class = "fediversity-resource-policy";
modules = [ modules = [
(policy: { {
_class = "fediversity-resource-policy"; options.apply = mkOption {
options = {
# TODO(@fricklerhandwerk): not sure it can be made
# sensible syntactically, but essentially we want to
# ensure that `apply` is defined, but since its output
# depends on the specific policy we also need to
# determine that somehow.
# hopefully this also helps with correct composition down the line.
resource-type = mkOption {
description = "The type of resource this policy configures";
type = types.optionType;
};
# TODO(@fricklerhandwerk): do we need a function type here as well, or is it in the way?
apply = mkOption {
description = "Apply the policy to a request"; description = "Apply the policy to a request";
type = functionTo policy.config.resource-type;
}; };
}; }
})
]; ];
}; };
}; };