123 lines
2.4 KiB
Nix
123 lines
2.4 KiB
Nix
{
|
|
self,
|
|
config,
|
|
tree,
|
|
pkgs,
|
|
...
|
|
}: let
|
|
inherit (builtins) attrNames elem;
|
|
|
|
hostName = config.networking.hostName;
|
|
|
|
hetznerARMContainerAddresses = import "${self}/hosts/hetzner-arm/data/containerAddresses.nix";
|
|
|
|
defaultPorts = {
|
|
internalPipedBackend = 3012;
|
|
internalPipedProxy = 3013;
|
|
|
|
internalNginxPort = 8199;
|
|
};
|
|
|
|
hostConfigs = {
|
|
"piped-fi" = {
|
|
baseDomain = "piped-fi.owo.monster";
|
|
ports = defaultPorts;
|
|
};
|
|
"piped-uk" = {
|
|
baseDomain = "piped-uk.owo.monster";
|
|
ports = defaultPorts;
|
|
};
|
|
};
|
|
|
|
hostConfig =
|
|
if elem hostName (attrNames hostConfigs)
|
|
then hostConfigs.${hostName}
|
|
else throw "host isn't configured for piped node";
|
|
|
|
inherit (hostConfig) baseDomain ports;
|
|
in {
|
|
imports = with tree; [
|
|
profiles.nginx
|
|
];
|
|
|
|
services.piped = {
|
|
enable = true;
|
|
|
|
frontend = {
|
|
domain = "${baseDomain}";
|
|
|
|
nginx = {
|
|
forceSSL = false;
|
|
enableACME = false;
|
|
};
|
|
};
|
|
|
|
backend = {
|
|
domain = "backend.${baseDomain}";
|
|
internalPort = ports.internalPipedBackend;
|
|
|
|
nginx = {
|
|
forceSSL = false;
|
|
enableACME = false;
|
|
};
|
|
|
|
settings = {
|
|
disableRegistrations = true;
|
|
};
|
|
|
|
database = {
|
|
disablePostgresDB = true;
|
|
name = "piped";
|
|
username = "piped";
|
|
usePassword = false;
|
|
host = hetznerARMContainerAddresses.containers.postgresql;
|
|
};
|
|
};
|
|
|
|
proxy = {
|
|
domain = "proxy.${baseDomain}";
|
|
internalPort = ports.internalPipedProxy;
|
|
package = pkgs.piped-proxy-minimal-openssl;
|
|
nginx = {
|
|
forceSSL = false;
|
|
enableACME = false;
|
|
};
|
|
};
|
|
};
|
|
|
|
systemd.tmpfiles.rules = [
|
|
"d /var/sockets - nginx nginx"
|
|
];
|
|
|
|
systemd.services.nginx = {
|
|
serviceConfig.ReadWritePaths = [
|
|
"/var/sockets"
|
|
];
|
|
};
|
|
|
|
services.nginx.virtualHosts = let
|
|
componentPath = component: "/var/sockets/piped-${component}.sock";
|
|
listen = [
|
|
{
|
|
addr = "127.0.0.1";
|
|
port = ports.internalNginxPort;
|
|
}
|
|
];
|
|
in {
|
|
"${baseDomain}" = {
|
|
inherit listen;
|
|
extraConfig = "listen unix:${componentPath "frontend"};";
|
|
};
|
|
|
|
"backend.${baseDomain}" = {
|
|
inherit listen;
|
|
extraConfig = "listen unix:${componentPath "backend"};";
|
|
};
|
|
|
|
"proxy.${baseDomain}" = {
|
|
inherit listen;
|
|
extraConfig = "listen unix:${componentPath "proxy"};";
|
|
};
|
|
};
|
|
}
|