{ description = "Actual budget app"; inputs.nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable"; outputs = { self, nixpkgs }: let pkgs = import nixpkgs { system = "x86_64-linux"; }; pname = "actual-server"; version = "24.7.0"; src = pkgs.fetchFromGitHub { owner = "actualbudget"; repo = pname; rev = "v${version}"; sha256 = "sha256-WpHjXrofOHYr7CiodWzoE688R1pbDPbVCA4aSXMolNM="; }; package = pkgs.stdenv.mkDerivation (finalAttrs: { inherit pname version src; nativeBuildInputs = with pkgs; [ yarn-berry nodejs python3 jq moreutils makeWrapper ]; yarnOfflineCache = pkgs.stdenvNoCC.mkDerivation { name = "actual-deps"; nativeBuildInputs = with pkgs; [ yarn-berry ]; inherit (finalAttrs) src; NODE_EXTRA_CA_CERTS = "${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"; supportedArchitectures = builtins.toJSON { os = [ "darwin" "linux" ]; cpu = [ "arm" "arm64" "ia32" "x64" ]; libc = [ "glibc" "musl" ]; }; configurePhase = '' runHook preConfigure export HOME="$NIX_BUILD_TOP" export YARN_ENABLE_TELEMETRY=0 yarn config set enableGlobalCache false yarn config set cacheFolder $out yarn config set supportedArchitectures --json "$supportedArchitectures" runHook postConfigure ''; buildPhase = '' runHook preBuild mkdir -p $out yarn install --immutable --mode skip-build runHook postBuild ''; dontInstall = true; outputHashAlgo = "sha256"; outputHash = "sha256-PVwNLvd1N9cVUQNpnHCduTedSP9SOlU2uu1NYEgTijg="; outputHashMode = "recursive"; }; patchPhase = '' sed -i '1i#!${pkgs.nodejs}/bin/node' app.js ''; configurePhase = '' runHook preConfigure export HOME="$NIX_BUILD_TOP" export YARN_ENABLE_TELEMETRY=0 export npm_config_nodedir=${pkgs.nodejs} yarn config set enableGlobalCache false yarn config set cacheFolder $yarnOfflineCache runHook postConfigure ''; buildPhase = '' runHook preBuild yarn install --immutable --immutable-cache yarn build yarn workspaces focus --all --production runHook postBuild ''; installPhase = '' runHook preInstall mkdir -p $out/{bin,lib} mkdir $out/lib/actual cp -r package.json app.js src migrations node_modules $out/lib/actual/ chmod +x $out/lib/actual/app.js makeWrapper $out/lib/actual/app.js $out/bin/actual --chdir $out/lib/actual runHook postInstall ''; fixupPhase = '' runHook preFixup patchShebangs $out/lib runHook postFixup ''; }); in rec { packages.x86_64-linux = { "${pname}" = package; default = package; }; nixosModules.default = { lib, config, pkgs, ... }: with lib; let cfg = config.services.actual; dataDir = "/var/lib/actual"; cfgFile = pkgs.writeText "actual.json" (builtins.toJSON { inherit dataDir; inherit (cfg) hostname port; serverFiles = "${dataDir}/server-files"; userFiles = "${dataDir}/user-files"; }); in { options.services.actual = { enable = mkEnableOption "Actual budget server"; hostname = mkOption { type = types.str; default = "127.0.0.1"; }; port = mkOption { type = types.port; default = 5006; }; }; config = mkIf cfg.enable { users.users.actual = { name = "actual"; group = "actual"; isSystemUser = true; }; users.groups.actual = {}; systemd.services.actual-server = { description = "Actual budget server"; documentation = [ "https://actualbudget.org/docs/" ]; wantedBy = [ "multi-user.target" ]; after = [ "networking.target" ]; serviceConfig = { ExecStart = "${package}/bin/actual"; Restart = "always"; User = "actual"; Group = "actual"; PrivateTmp = true; StateDirectory = "actual"; }; environment.ACTUAL_CONFIG_PATH = "${cfgFile}"; }; }; }; }; }