summaryrefslogtreecommitdiffstats
path: root/nixos/modules/services/networking/flashpolicyd.nix
diff options
context:
space:
mode:
authorEelco Dolstra <eelco.dolstra@logicblox.com>2013-10-10 13:28:20 +0200
committerEelco Dolstra <eelco.dolstra@logicblox.com>2013-10-10 13:28:20 +0200
commit5c1f8cbc70cd5e6867ef6a2a06d27a40daa07010 (patch)
treea6c0f605be6de3f372ae69905b331f9f75452da7 /nixos/modules/services/networking/flashpolicyd.nix
parent6070bc016bd2fd945b04347e25cfd3738622d2ac (diff)
Move all of NixOS to nixos/ in preparation of the repository merge
Diffstat (limited to 'nixos/modules/services/networking/flashpolicyd.nix')
-rw-r--r--nixos/modules/services/networking/flashpolicyd.nix84
1 files changed, 84 insertions, 0 deletions
diff --git a/nixos/modules/services/networking/flashpolicyd.nix b/nixos/modules/services/networking/flashpolicyd.nix
new file mode 100644
index 000000000000..f5bc550ab5f8
--- /dev/null
+++ b/nixos/modules/services/networking/flashpolicyd.nix
@@ -0,0 +1,84 @@
+{ config, pkgs, ... }:
+
+with pkgs.lib;
+
+let
+
+ cfg = config.services.flashpolicyd;
+
+ flashpolicyd = pkgs.stdenv.mkDerivation {
+ name = "flashpolicyd-0.6";
+
+ src = pkgs.fetchurl {
+ name = "flashpolicyd_v0.6.zip";
+ url = "http://www.adobe.com/content/dotcom/en/devnet/flashplayer/articles/socket_policy_files/_jcr_content/articlePrerequistes/multiplefiles/node_1277808777771/file.res/flashpolicyd_v0.6%5B1%5D.zip";
+ sha256 = "16zk237233npwfq1m4ksy4g5lzy1z9fp95w7pz0cdlpmv0fv9sm3";
+ };
+
+ buildInputs = [ pkgs.unzip pkgs.perl ];
+
+ installPhase = "mkdir $out; cp -pr * $out/; chmod +x $out/*/*.pl";
+ };
+
+ flashpolicydWrapper = pkgs.writeScriptBin "flashpolicyd"
+ ''
+ #! ${pkgs.stdenv.shell}
+ exec ${flashpolicyd}/Perl_xinetd/in.flashpolicyd.pl \
+ --file=${pkgs.writeText "flashpolixy.xml" cfg.policy} \
+ 2> /dev/null
+ '';
+
+in
+
+{
+
+ ###### interface
+
+ options = {
+
+ services.flashpolicyd = {
+
+ enable = mkOption {
+ default = false;
+ description =
+ ''
+ Whether to enable the Flash Policy server. This is
+ necessary if you want Flash applications to make
+ connections to your server.
+ '';
+ };
+
+ policy = mkOption {
+ default =
+ ''
+ <?xml version="1.0"?>
+ <!DOCTYPE cross-domain-policy SYSTEM "/xml/dtds/cross-domain-policy.dtd">
+ <cross-domain-policy>
+ <site-control permitted-cross-domain-policies="master-only"/>
+ <allow-access-from domain="*" to-ports="*" />
+ </cross-domain-policy>
+ '';
+ description = "The policy to be served. The default is to allow connections from any domain to any port.";
+ };
+
+ };
+
+ };
+
+
+ ###### implementation
+
+ config = mkIf cfg.enable {
+
+ services.xinetd.enable = true;
+
+ services.xinetd.services = singleton
+ { name = "flashpolicy";
+ port = 843;
+ unlisted = true;
+ server = "${flashpolicydWrapper}/bin/flashpolicyd";
+ };
+
+ };
+
+}