forked from
lass.pds.lassul.us/superconfig
This repository has no description
configs.services.paint: add WBO whiteboard at paint.lassul.us
author
Hermes
committer
lassulus
date
(Oct 15, 2026, 12:15 AM CEST)
commit
1bf00668
1bf00668f8ebe132cdf2732fb40450e91f6dd927
parent
5f1661ec
5f1661ec9dfef777d327e8a0ba27a9dc19c93309
+43
+1
configs/dns/lassul.us.zone
+1
configs/dns/lassul.us.zone
+1
configs/monitoring/checks.nix
+1
configs/monitoring/checks.nix
···
49
49
(https "lassul.us" "https://lassul.us/")
50
50
(https "matrix" "https://matrix.lassul.us/_matrix/client/versions")
51
51
(https "pad" "https://pad.lassul.us/")
52
+
(https "paint" "https://paint.lassul.us/")
52
53
(https "cache" "https://cache.lassul.us/nix-cache-info")
53
54
(https "niks3" "https://niks3.lassul.us/health")
54
55
(soa "ns1" "95.217.192.59")
+3
machines/neoprism/backup.nix
+3
machines/neoprism/backup.nix
···
35
35
# identity.key also lives in clan vars; the SQLite databases are
36
36
# dumped consistently to /var/backup/parley by the preHook.
37
37
"/var/lib/parley"
38
+
# WBO boards (paint.lassul.us). DynamicUser + StateDirectory make
39
+
# /var/lib/whitebophir only a symlink, so back up the real directory.
40
+
"/var/lib/private/whitebophir"
38
41
];
39
42
exclude = [
40
43
"*.pyc"
+1
machines/neoprism/config.nix
+1
machines/neoprism/config.nix
+37
configs/services/paint/default.nix
+37
configs/services/paint/default.nix
···
1
+
{ pkgs, ... }:
2
+
let
3
+
domain = "paint.lassul.us";
4
+
port = 3092;
5
+
in
6
+
{
7
+
# WBO collaborative whiteboard. Public like the pad: anyone with the link to
8
+
# /boards/<name> can draw, boards are kept as JSON in the state dir.
9
+
systemd.services.whitebophir = {
10
+
description = "WBO collaborative whiteboard";
11
+
wantedBy = [ "multi-user.target" ];
12
+
after = [ "network.target" ];
13
+
environment = {
14
+
PORT = toString port;
15
+
HOST = "127.0.0.1";
16
+
WBO_HISTORY_DIR = "/var/lib/whitebophir";
17
+
};
18
+
serviceConfig = {
19
+
ExecStart = "${pkgs.whitebophir}/bin/whitebophir";
20
+
DynamicUser = true;
21
+
StateDirectory = "whitebophir";
22
+
Restart = "always";
23
+
MemoryMax = "1G";
24
+
};
25
+
};
26
+
27
+
services.nginx.virtualHosts.${domain} = {
28
+
enableACME = true;
29
+
forceSSL = true;
30
+
locations."/" = {
31
+
proxyPass = "http://127.0.0.1:${toString port}";
32
+
recommendedProxySettings = true;
33
+
# socket.io
34
+
proxyWebsockets = true;
35
+
};
36
+
};
37
+
}