;;; genenetwork-machines --- Guix configuration for genenetwork machines
;;; Copyright © 2022–2024 Arun Isaac <arunisaac@systemreboot.net>
;;; Copyright © 204 Pjotr Prins <pjotr.public01@thebird.nl>
;;;
;;; This file is part of genenetwork-machines.
;;;
;;; genenetwork-machines is free software: you can redistribute it
;;; and/or modify it under the terms of the GNU General Public License
;;; as published by the Free Software Foundation, either version 3 of
;;; the License, or (at your option) any later version.
;;;
;;; genenetwork-machines is distributed in the hope that it will be
;;; useful, but WITHOUT ANY WARRANTY; without even the implied
;;; warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
;;; See the GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License
;;; along with genenetwork-machines.  If not, see
;;; <https://www.gnu.org/licenses/>.

(use-modules (gnu)
             (genenetwork services genenetwork)
             ((gnu packages admin) #:select (shepherd))
             (gn services databases)
             (gnu services databases)
             (forge acme)
             (forge nginx)
             (forge socket))

(operating-system
  (host-name "genenetwork")
  (timezone "UTC")
  (locale "en_US.utf8")
  (bootloader (bootloader-configuration
               (bootloader grub-bootloader)
               (targets (list "/dev/sdX"))))
  (file-systems %base-file-systems)
  (users %base-user-accounts)
  (sudoers-file
   (mixed-text-file "sudoers"
                    "@include " %sudoers-specification
                    "\nacme ALL = NOPASSWD: " (file-append shepherd "/bin/herd") " restart nginx\n"))
  (packages %base-packages)
  (services (cons* (service mysql-service-type
                            (mysql-configuration
                             (auto-upgrade? #f)))
                   (service virtuoso-service-type
                            (virtuoso-configuration
                             (server-port 8891)
                             (http-server-port 8892)))
                   (service forge-nginx-service-type
                            (forge-nginx-configuration
                             (http-listen (forge-ip-socket
                                           (ip "0.0.0.0")
                                           (port 8890)))
                             (https-listen (forge-ip-socket
                                            (ip "0.0.0.0")
                                            (port 8891)))))
                   (service acme-service-type
                            (acme-configuration
                             (email "arunisaac@systemreboot.net")))
                   (service genenetwork-service-type
                            (genenetwork-configuration
                             (server-name "fallback.genenetwork.org")
                             (gn-auth-server-name "fallback-auth.genenetwork.org")
                             (gn2-port 8892)
                             (gn3-port 8893)
                             (sql-uri "mysql://webqtlout:webqtlout@localhost/db_webqtl")
                             (auth-db "/export/data/genenetwork-sqlite/auth.db")
                             (xapian-db "/export/data/genenetwork-xapian")
                             (genotype-files "/export/data/genenetwork/genotype_files")
                             (sparql-endpoint "http://localhost:8892/sparql")
                             (gn3-data-directory "/export/data/genenetwork")))
                   %base-services)))