;;; genenetwork-machines --- Guix configuration for genenetwork machines
;;; Copyright © 2022–2024 Arun Isaac <arunisaac@systemreboot.net>
;;; Copyright © 2024 Frederick Muriuki Muriithi <fredmanglis@protonmail.com>
;;;
;;; This file is part of genenetwork-machines.
;;;
;;; genenetwork-machines is free software: you can redistribute it
;;; and/or modify it under the terms of the GNU General Public License
;;; as published by the Free Software Foundation, either version 3 of
;;; the License, or (at your option) any later version.
;;;
;;; genenetwork-machines is distributed in the hope that it will be
;;; useful, but WITHOUT ANY WARRANTY; without even the implied
;;; warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
;;; See the GNU General Public License for more details.
;;;
;;; You should have received a copy of the GNU General Public License
;;; along with genenetwork-machines.  If not, see
;;; <https://www.gnu.org/licenses/>.

;;; This is the production genenetwork container currently deployed on
;;; tux04.

(use-modules (gnu)
             (genenetwork services genenetwork)
             ((gnu packages admin) #:select (shepherd))
             (gn services databases)
             (gnu services databases)
             (forge acme)
             (forge nginx)
             (forge socket))

(operating-system
  (host-name "genenetwork-production")
  (timezone "UTC")
  (locale "en_US.utf8")
  (bootloader (bootloader-configuration
               (bootloader grub-bootloader)
               (targets (list "/dev/sdX"))))
  (file-systems %base-file-systems)
  (users %base-user-accounts)
  (sudoers-file
   (mixed-text-file "sudoers"
                    "@include " %sudoers-specification
                    "\nacme ALL = NOPASSWD: " (file-append shepherd "/bin/herd") " restart nginx\n"))
  (packages %base-packages)
  (services (cons* (service mysql-service-type
                            (mysql-configuration
                             (auto-upgrade? #f)))
                   (service virtuoso-service-type
                            (virtuoso-configuration
                             (server-port 9892)
                             (http-server-port 9893)
                             (dirs-allowed "/var/lib/virtuoso")
                             (number-of-buffers 4000000)
                             (maximum-dirty-buffers 3000000)))
                   (service forge-nginx-service-type
                            (forge-nginx-configuration
                             (http-listen (forge-ip-socket
                                           (ip "0.0.0.0")
                                           (port 9890)))
                             (https-listen (forge-ip-socket
                                            (ip "0.0.0.0")
                                            (port 9891)))))
                   (service acme-service-type
                            (acme-configuration
                             (email "arunisaac@systemreboot.net")))
                   (service redis-service-type
                            (redis-configuration
                             (bind "127.0.0.1")
                             (port 6379)
                             (working-directory "/var/lib/redis")))
                   (service genenetwork-service-type
                            (genenetwork-configuration
                             (server-name "genenetwork.org")
                             (gn-auth-server-name "auth.genenetwork.org")
                             (gn2-port 9894)
                             (gn3-port 9895)
                             (gn-auth-port 9896)
                             (sql-uri "mysql://webqtlout:webqtlout@localhost/db_webqtl")
                             (xapian-db "/var/lib/xapian")
                             (sparql-endpoint "http://localhost:9893/sparql")
                             (gn3-data-directory "/var/genenetwork/data/genenetwork3")
                             (gn2-secrets "/etc/genenetwork/genenetwork2")
                             (gn3-secrets "/etc/genenetwork/genenetwork3/gn3-secrets.py")
                             (gn-auth-secrets "/etc/genenetwork/gn-auth")
                             (auth-db "/var/lib/genenetwork-sqlite/auth.db")
                             (llm-db-path "/var/lib/genenetwork-gnqa/llm.db")
                             (gn3-alias-server-port 9800)
                             (log-level 'debug)))
                   %base-services)))