#pragma once

#include "types.hh"
#include "hash.hh"

#include <map>


namespace nix {


/* Extension of derivations in the Nix store. */
const string drvExtension = ".drv";


/* Abstract syntax of derivations. */

struct DerivationOutput
{
    Path path;
    string hashAlgo; /* hash used for expected hash computation */
    string hash; /* expected hash, may be null */
    DerivationOutput()
    {
    }
    DerivationOutput(Path path, string hashAlgo, string hash)
    {
        this->path = path;
        this->hashAlgo = hashAlgo;
        this->hash = hash;
    }
    void parseHashInfo(bool & recursive, HashType & hashType, Hash & hash) const;
};

typedef std::map<string, DerivationOutput> DerivationOutputs;

/* For inputs that are sub-derivations, we specify exactly which
   output IDs we are interested in. */
typedef std::map<Path, StringSet> DerivationInputs;

typedef std::map<string, string> StringPairs;

struct Derivation
{
    DerivationOutputs outputs; /* keyed on symbolic IDs */
    DerivationInputs inputDrvs; /* inputs that are sub-derivations */
    PathSet inputSrcs; /* inputs that are sources */
    string platform;
    Path builder;
    Strings args;
    StringPairs env;
};


class StoreAPI;


/* Write a derivation to the Nix store, and return its path. */
Path writeDerivation(StoreAPI & store,
    const Derivation & drv, const string & name, bool repair = false);

/* Read a derivation from a file. */
Derivation readDerivation(const Path & drvPath);

/* Print a derivation. */
string unparseDerivation(const Derivation & drv);

/* Check whether a file name ends with the extensions for
   derivations. */
bool isDerivation(const string & fileName);

/* Return true iff this is a fixed-output derivation. */
bool isFixedOutputDrv(const Derivation & drv);

Hash hashDerivationModulo(StoreAPI & store, Derivation drv);

/* Memoisation of hashDerivationModulo(). */
typedef std::map<Path, Hash> DrvHashes;

extern DrvHashes drvHashes;

/* Split a string specifying a derivation and a set of outputs
   (/nix/store/hash-foo!out1,out2,...) into the derivation path and
   the outputs. */
typedef std::pair<string, std::set<string> > DrvPathWithOutputs;
DrvPathWithOutputs parseDrvPathWithOutputs(const string & s);

Path makeDrvPathWithOutputs(const Path & drvPath, const std::set<string> & outputs);

bool wantOutput(const string & output, const std::set<string> & wanted);

PathSet outputPaths(const Derivation & drv);

}
<table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/services/certbot.scm?id=a75387f8eeaacb242af66073c838485df1e87a10&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2024-09-03 13:59:33 +0200'>2024-09-03</span></td><td><a href='/guix/commit/gnu/services/certbot.scm?id=b300a091654f5c07708e86c0c51af4ac8c71783f'>services: certbot: Add certbot-configuration-package to profile.</a><span class='msg-avail'>...<span class='msg-tooltip'>As the manual suggests running a certbot command to view the issued
certificates, add it to the profile.

* gnu/services/certbot.scm (certbot-service-type): Extend profile-service-type
with certbot-configuration-package.

Change-Id: I92618597bbdc8d838420b2e0f82de601b0bc609b
Signed-off-by: Ludovic Courtès &lt;ludo@gnu.org&gt;
</span></span></td><td>Richard Sent</td></tr>
<tr><td><span title='2024-01-31 16:54:19 +0100'>2024-01-31</span></td><td><a href='/guix/commit/gnu/services/certbot.scm?id=023c3e0ac44e7fc35eeebc87535a47df2cd01485'>services: certbot: Add one-shot service to renew certificates.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/services/certbot.scm (certbot-renewal-one-shot): New procedure.
(certbot-service-type)[extensions]: Add it to shepherd-root extension.
(certbot-command): Make connection errors return a different exit code.
(certbot-activation): Remove message with certificate renewal instructions.

Change-Id: I614ac6214a753dba0396e2385a75926c8355caa1
Signed-off-by: Clément Lassieur &lt;clement@lassieur.org&gt;
</span></span></td><td>Carlo Zancanaro</td></tr>
<tr><td><span title='2024-01-31 16:54:16 +0100'>2024-01-31</span></td><td><a href='/guix/commit/gnu/services/certbot.scm?id=d4a4b12f0ac52563254d34dc1e26030b354d3f73'>services: certbot: Reload nginx in deploy hook.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/services/certbot.scm (certbot-deploy-hook): Reload nginx.
* doc/guix.texi (Certificate services): Remove deploy-hook from example.

Change-Id: Ibb10481170a6fda7df72492072b939dd6a6ad176
Signed-off-by: Clément Lassieur &lt;clement@lassieur.org&gt;
</span></span></td><td>Carlo Zancanaro</td></tr>
<tr><td><span title='2024-01-31 16:54:12 +0100'>2024-01-31</span></td><td><a href='/guix/commit/gnu/services/certbot.scm?id=fc0ec9a3cc2707260b88c79286e91fa1a3a594cb'>services: certbot: Create self-signed certificates before certbot runs.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/services/certbot.scm (&lt;certificate-configuration&gt;): Add
start-self-signed? field.
(generate-certificate-gexp): New procedure.
(certbot-activation): Generate self-signed certificates when
start-self-signed? is #t.
* doc/guix.texi (Certificate services): Document start-self-signed?.

Change-Id: Icfd85ae0c3e29324acbcde6ba283546cf0e27a1d
Signed-off-by: Clément Lassieur &lt;clement@lassieur.org&gt;
</span></span></td><td>Carlo Zancanaro</td></tr>
<tr><td><span title='2024-01-31 16:54:03 +0100'>2024-01-31</span></td><td><a href='/guix/commit/gnu/services/certbot.scm?id=a2b1ef903be001d5abfc47fc3e8add04fb748ff3'>services: certbot: Symlink certificates to /etc/certs.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/services/certbot.scm (certbot-deploy-hook): New procedure.
(certbot-command): Pass new deploy hook to certbot.
* doc/guix.texi: Replace "letsencrypt/live" with "certs" throughout, except in
the certbot deploy-hook description.

Change-Id: I2ba5e4903d1e293e566b732a84b07d5a134b697d
Signed-off-by: Clément Lassieur &lt;clement@lassieur.org&gt;
</span></span></td><td>Carlo Zancanaro</td></tr>
<tr><td><span title='2023-06-18 23:12:10 +0200'>2023-06-18</span></td><td><a href='/guix/commit/gnu/services/certbot.scm?id=a82130de50d2c84d77492d9aa43e4b7f4b06b4b2'>services: certbot: Fix nginx crash when certbot is used without domains.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/services/certbot.scm (certbot-nginx-server-configurations):
Don't return a broken nginx-server-configuration with empty server_name
when no certificate domains are configured. Instead add a separate
server for every certificate, so 0 certificates adds 0 servers.

Signed-off-by: Ludovic Courtès &lt;ludo@gnu.org&gt;
Reviewed-by: Bruno Victal &lt;mirai@makinata.eu&gt;
</span></span></td><td>Saku Laesvuori</td></tr>
<tr><td><span title='2023-01-03 16:34:44 -0500'>2023-01-03</span></td><td><a href='/guix/commit/gnu/services/certbot.scm?id=c13c890138545bfda1807ad60e70971736ddf5b5'>services: certbot: Fix broken link.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/services/certbot.scm (certbot-renewal-jobs): Fix broken link.

Signed-off-by: Maxim Cournoyer &lt;maxim.cournoyer@gmail.com&gt;
</span></span></td><td>jgart</td></tr>