sunshine/flake.nix

{
  description = "A very basic flake";

  inputs = {
    nixpkgs = { };
    flake-utils = { };
  };

  outputs = { self, nixpkgs, flake-utils }:
    flake-utils.lib.eachSystem [ "x86_64-linux" ]
      (system:
        let
          pkgs = nixpkgs.legacyPackages.${system};
          lib = nixpkgs.lib;
        in
        {
          formatter = pkgs.nixpkgs-fmt;
          packages = {
            sunshine = pkgs.stdenv.mkDerivation {
              pname = "sunshine";
              version = "0.14.1";

              src = pkgs.fetchFromGitHub {
                owner = "LizardByte";
                repo = "Sunshine";
                rev = "6000b85b1a4ec574d93fbc7545f5bf48f3d5aaa7";
                sha256 = "SB2DAOYf2izIwwRWEw2wt5L5oCDbb6YOqXw/z/PD1pQ=";
                fetchSubmodules = true;
              };

              buildInputs = with pkgs; [
                avahi
                (boost.override { enableStatic = true; })
                ffmpeg
                libevdev
                libpulseaudio
                xorg.libX11
                xorg.libxcb
                xorg.libXfixes
                xorg.libXrandr
                xorg.libXtst
                openssl
                libopus
                udev
                libdrm
                valgrind.dev
                wayland
                libffi
                icu
              ];

              hardeningDisable = [ "format" ];

              nativeBuildInputs = with pkgs; [
                cmake
                pkgconf
                makeWrapper
              ];

              cmakeFlags = [
                "-DCMAKE_INSTALL_PREFIX=${placeholder "out"}"
                "-DSUNSHINE_ASSETS_DIR=share/sunshine"
                "-DSUNSHINE_CONFIG_DIR=share/sunshine"
              ];

              # patches = [ ./001-cmake-find-evdev.patch ];
              patches = [ ./sunshine.patch ];

              preConfigure = ''
                substituteInPlace CMakeLists.txt \
                  --replace "/usr/include/libevdev-1.0" "${pkgs.libevdev}/include/libevdev-1.0" \
              '';

              postInstall = ''
                rm -r $out/lib/systemd              
                wrapProgram $out/bin/sunshine --prefix LD_LIBRARY_PATH : "${lib.makeLibraryPath (with pkgs; [ avahi mesa libGL ])}"
              '';
            };
          };
          packages.default = self.packages.${system}.sunshine;

          devShells.default = with pkgs; mkShell {
            nativeBuildInputs = [ nix-prefetch-scripts nix-prefetch-github cmake-language-server ];
            inputsFrom = [ self.packages.${system}.sunshine ];
          };

        }) // {
      nixosModules.sunshine = { pkgs, config, lib, ... }:
        with lib;
        let
          cfg = config.services.sunshine;
          sunshine = self.packages.${pkgs.system}.sunshine;
        in
        {
          options.services.sunshine = {
            enable = mkEnableOption "sunshine";

            user = mkOption {
              description = "The user using sunshine";
              type = types.str;
            };

            openFirewall = mkOption {
              description = "Open the necessary ports for sunshine";
              type = types.bool;
              default = false;
            };
          };

          config = mkIf cfg.enable {
            environment.systemPackages = [ sunshine ];

            hardware.uinput.enable = true;

            users.extraUsers.${cfg.user}.extraGroups = [ "uinput" "video" ];
            security.wrappers.sunshine = {
              owner = "root";
              group = "root";
              capabilities = "cap_sys_admin+p";
              source = "${sunshine}/bin/sunshine";
            };

            systemd.user.services.sunshine = {
              description = "Sunshine is a Gamestream host for Moonlight";

              serviceConfig.ExecStart = "${config.security.wrapperDir}/sunshine";

              wantedBy = [ "graphical-session.target" ];
            };

            networking.firewall = mkIf cfg.openFirewall {
              allowedTCPPorts = [
                48010
              ];

              allowedTCPPortRanges = [
                { from = 47984; to = 47990; }
              ];

              allowedUDPPortRanges = [
                { from = 47998; to = 48000; }
              ];
            };
          };
        };
    };
}