nix: add tap service for spindle

Signed-off-by: Seongmin Lee <[e-mail]>

flake.nix

···
       imports = [./nix/modules/spindle.nix];
 
       services.tangled.spindle.package = lib.mkDefault self.packages.${pkgs.stdenv.hostPlatform.system}.spindle;
+      services.tangled.spindle.tap-package = lib.mkDefault self.packages.${pkgs.system}.tap;
     };
     nixosModules.did-method-plc = {
       lib,

nix/modules/spindle.nix

···
           type = types.package;
           description = "Package to use for the spindle";
         };
+        tap-package = mkOption {
+          type = types.package;
+          description = "Package to use for the spindle";
+        };
+
+        atpRelayUrl = mkOption {
+          type = types.str;
+          default = "https://relay1.us-east.bsky.network";
+          description = "atproto relay";
+        };
 
         server = {
           listenAddr = mkOption {
···
 
     config = mkIf cfg.enable {
       virtualisation.docker.enable = true;
+
+      systemd.services.spindle-tap = {
+        description = "spindle tap service";
+        after = ["network.target" "docker.service"];
+        wantedBy = ["multi-user.target"];
+        serviceConfig = {
+          LogsDirectory = "spindle-tap";
+          StateDirectory = "spindle-tap";
+          Environment = [
+            "TAP_BIND=:2480"
+            "TAP_PLC_URL=${cfg.server.plcUrl}"
+            "TAP_RELAY_URL=${cfg.atpRelayUrl}"
+            "TAP_COLLECTION_FILTERS=${concatStringsSep "," [
+              "sh.tangled.repo"
+              "sh.tangled.repo.collaborator"
+              "sh.tangled.spindle.member"
+            ]}"
+          ];
+          ExecStart = "${getExe cfg.tap-package} run";
+        };
+      };
 
       systemd.services.spindle = {
         description = "spindle service";

nix/vm.nix

···
 
   plcUrl = envVarOr "TANGLED_VM_PLC_URL" "https://plc.directory";
   jetstream = envVarOr "TANGLED_VM_JETSTREAM_ENDPOINT" "wss://jetstream1.us-west.bsky.network/subscribe";
+  relayUrl = envVarOr "TANGLED_VM_RELAY_URL" "https://relay1.us-east.bsky.network";
 in
   nixpkgs.lib.nixosSystem {
     inherit system;
···
         };
         services.tangled.spindle = {
           enable = true;
+          atpRelayUrl = relayUrl;
           server = {
             owner = envVar "TANGLED_VM_SPINDLE_OWNER";
             hostname = envVarOr "TANGLED_VM_SPINDLE_HOST" "localhost:6555";