forked from
lass.pds.lassul.us/superconfig
This repository has no description
machines.prism: remove legacy pad
author
lassulus
date
(Jun 3, 2025, 4:06 PM CEST)
commit
757e72a2
757e72a276569554caf7653cd2c1e4685222c932
parent
523e1892
523e189290c8371aefee012e2c382058f9052307
-96
-95
2configs/codimd.nix
-95
2configs/codimd.nix
···
1
-
{ ... }:
2
-
let
3
-
domain = "pad.lassul.us";
4
-
in
5
-
{
6
-
7
-
# redirect legacy domain to new one
8
-
# services.nginx.virtualHosts."codi.lassul.us" = {
9
-
# enableACME = true;
10
-
# addSSL = true;
11
-
# locations."/".return = "301 https://${domain}\$request_uri";
12
-
# };
13
-
14
-
services.nginx.virtualHosts.${domain} = {
15
-
enableACME = true;
16
-
forceSSL = true;
17
-
acmeFallbackHost = "neoprism.lassul.us";
18
-
locations."/" = {
19
-
# proxyPass = "https://localhost:3091";
20
-
proxyPass = "https://neoprism.lassul.us";
21
-
proxyWebsockets = true;
22
-
recommendedProxySettings = true;
23
-
};
24
-
};
25
-
26
-
# security.acme.certs.${domain}.group = "hedgecert";
27
-
# users.groups.hedgecert.members = [
28
-
# "hedgedoc"
29
-
# "nginx"
30
-
# ];
31
-
32
-
# security.dhparams = {
33
-
# enable = true;
34
-
# params.hedgedoc = { };
35
-
# };
36
-
37
-
# services.borgbackup.jobs.hetzner.paths = [
38
-
# "/var/backup"
39
-
# "/var/lib/hedgedoc"
40
-
# ];
41
-
# systemd.services.hedgedoc-backup = {
42
-
# startAt = "daily";
43
-
# serviceConfig = {
44
-
# ExecStart = pkgs.writers.writeDash "pad-backup" ''
45
-
# until ${pkgs.sqlite}/bin/sqlite3 /var/lib/hedgedoc/db.hedgedoc.sqlite ".backup /var/backup/hedgedoc/backup.sq3"; do
46
-
# sleep 1
47
-
# done
48
-
# '';
49
-
# Type = "oneshot";
50
-
# };
51
-
# };
52
-
53
-
# systemd.services.hedgedoc.environment = {
54
-
# CMD_COOKIE_POLICY = "none";
55
-
# CMD_CSP_ALLOW_FRAMING = "true";
56
-
# };
57
-
58
-
# services.hedgedoc = {
59
-
# enable = true;
60
-
# settings = {
61
-
# allowOrigin = [ domain ];
62
-
# db = {
63
-
# dialect = "sqlite";
64
-
# storage = "/var/lib/hedgedoc/db.hedgedoc.sqlite";
65
-
# };
66
-
# useCDN = false;
67
-
# port = 3091;
68
-
# domain = domain;
69
-
# allowFreeURL = true;
70
-
# defaultPermission = "freely";
71
-
72
-
# useSSL = true;
73
-
# protocolUseSSL = true;
74
-
# sslCAPath = [ "/etc/ssl/certs/ca-certificates.crt" ];
75
-
# sslCertPath = "/var/lib/acme/${domain}/cert.pem";
76
-
# sslKeyPath = "/var/lib/acme/${domain}/key.pem";
77
-
# dhParamPath = config.security.dhparams.params.hedgedoc.path;
78
-
# };
79
-
80
-
# # https://github.com/settings/applications/2352617
81
-
# environmentFile = config.clanCore.facts.secretUploadDirectory + "/hedgedoc.env";
82
-
# };
83
-
84
-
# clanCore.facts.services.hedgedoc-github-auth = {
85
-
# secret."hedgedoc.env" = { };
86
-
# generator.script = ''
87
-
# echo "$prompt_value" > "$secrets"/hedgedoc.env
88
-
# '';
89
-
# generator.prompt = ''
90
-
# goto https://github.com/settings/applications/2352617 and paste the data in the following format:
91
-
# GITHUB_CLIENT_ID=...
92
-
# GITHUB_CLIENT_SECRET=...
93
-
# '';
94
-
# };
95
-
}