Enable the upstream nginx module from nixpkgs.

nix/modules/default.nix

@@ -6,20 +6,25 @@
   imports = [
     ./etc.nix
     ./systemd.nix
+    ./upstream/nixpkgs
   ];
 
-  options = {
+  options =
+    let
+      inherit (lib) types;
+    in
+    {
 
       nixpkgs = {
         # TODO: switch to lib.systems.parsedPlatform
         hostPlatform = lib.mkOption {
-        type = lib.types.str;
+          type = types.str;
           example = "x86_64-linux";
         };
       };
 
       assertions = lib.mkOption {
-      type = lib.types.listOf lib.types.unspecified;
+        type = types.listOf types.unspecified;
         internal = true;
         default = [ ];
         example = [{ assertion = false; message = "you can't enable this for that reason"; }];
@@ -33,7 +38,7 @@
       warnings = lib.mkOption {
         internal = true;
         default = [ ];
-      type = lib.types.listOf lib.types.str;
+        type = types.listOf types.str;
         example = [ "The `foo' service is deprecated and will go away soon!" ];
         description = lib.mdDoc ''
           This option allows modules to show warnings to users during
@@ -41,6 +46,47 @@
         '';
       };
 
+      # Statically assigned UIDs and GIDs.
+      # Ideally we use DynamicUser as much as possible to avoid the need for these.
+      ids = {
+        uids = lib.mkOption {
+          internal = true;
+          description = lib.mdDoc ''
+            The user IDs used by system-manager.
+          '';
+          type = types.attrsOf types.int;
+        };
+
+        gids = lib.mkOption {
+          internal = true;
+          description = lib.mdDoc ''
+            The group IDs used by system-manager.
+          '';
+          type = types.attrsOf types.int;
+        };
+      };
+
+      # No-op option for now.
+      # TODO: should we include the settings in /etc/logrotate.d ?
+      services.logrotate = lib.mkOption {
+        internal = true;
+        default = { };
+        type = types.freeform;
+      };
+
+      # No-op option for now.
+      users = lib.mkOption {
+        internal = true;
+        default = { };
+        type = types.freeform;
+      };
+
+      networking = {
+        enableIPv6 = lib.mkEnableOption "IPv6" // {
+          default = true;
+        };
+      };
+
       system-manager = {
         allowAnyDistro = lib.mkEnableOption "the usage of system-manager on untested distributions";
 
@@ -50,12 +96,12 @@
               enable = lib.mkEnableOption "the assertion";
 
               name = lib.mkOption {
-              type = lib.types.str;
+                type = types.str;
                 default = name;
               };
 
               script = lib.mkOption {
-              type = lib.types.str;
+                type = types.str;
               };
             };
           }));

nix/modules/upstream/nixpkgs/default.nix

@@ -0,0 +1,15 @@
+{ nixosModulesPath
+, ...
+}:
+{
+  imports = [
+    ./nginx.nix
+  ] ++
+  # List of imported NixOS modules
+  # TODO: how will we manage this in the long term?
+  map (path: nixosModulesPath + path) [
+    "/misc/meta.nix"
+    "/security/acme/"
+    "/services/web-servers/nginx/"
+  ];
+}

nix/modules/upstream/nixpkgs/nginx.nix

@@ -0,0 +1,6 @@
+{
+  systemd.services.nginx.serviceConfig.DynamicUser = true;
+
+  # Disable this for now
+  services.logrotate.settings.nginx = { };
+}

test/nix/modules/default.nix

@@ -6,6 +6,8 @@
   config = {
     nixpkgs.hostPlatform = "x86_64-linux";
 
+    services.nginx.enable = true;
+
     environment.etc = {
       foo = {
         text = ''