This repository has no description
2.6 kB
95 lines
1{ ... }:
2let
3 domain = "pad.lassul.us";
4in
5{
6
7 # redirect legacy domain to new one
8 # services.nginx.virtualHosts."codi.lassul.us" = {
9 # enableACME = true;
10 # addSSL = true;
11 # locations."/".return = "301 https://${domain}\$request_uri";
12 # };
13
14 services.nginx.virtualHosts.${domain} = {
15 enableACME = true;
16 forceSSL = true;
17 acmeFallbackHost = "neoprism.lassul.us";
18 locations."/" = {
19 # proxyPass = "https://localhost:3091";
20 proxyPass = "https://neoprism.lassul.us";
21 proxyWebsockets = true;
22 recommendedProxySettings = true;
23 };
24 };
25
26 # security.acme.certs.${domain}.group = "hedgecert";
27 # users.groups.hedgecert.members = [
28 # "hedgedoc"
29 # "nginx"
30 # ];
31
32 # security.dhparams = {
33 # enable = true;
34 # params.hedgedoc = { };
35 # };
36
37 # services.borgbackup.jobs.hetzner.paths = [
38 # "/var/backup"
39 # "/var/lib/hedgedoc"
40 # ];
41 # systemd.services.hedgedoc-backup = {
42 # startAt = "daily";
43 # serviceConfig = {
44 # ExecStart = pkgs.writers.writeDash "pad-backup" ''
45 # until ${pkgs.sqlite}/bin/sqlite3 /var/lib/hedgedoc/db.hedgedoc.sqlite ".backup /var/backup/hedgedoc/backup.sq3"; do
46 # sleep 1
47 # done
48 # '';
49 # Type = "oneshot";
50 # };
51 # };
52
53 # systemd.services.hedgedoc.environment = {
54 # CMD_COOKIE_POLICY = "none";
55 # CMD_CSP_ALLOW_FRAMING = "true";
56 # };
57
58 # services.hedgedoc = {
59 # enable = true;
60 # settings = {
61 # allowOrigin = [ domain ];
62 # db = {
63 # dialect = "sqlite";
64 # storage = "/var/lib/hedgedoc/db.hedgedoc.sqlite";
65 # };
66 # useCDN = false;
67 # port = 3091;
68 # domain = domain;
69 # allowFreeURL = true;
70 # defaultPermission = "freely";
71
72 # useSSL = true;
73 # protocolUseSSL = true;
74 # sslCAPath = [ "/etc/ssl/certs/ca-certificates.crt" ];
75 # sslCertPath = "/var/lib/acme/${domain}/cert.pem";
76 # sslKeyPath = "/var/lib/acme/${domain}/key.pem";
77 # dhParamPath = config.security.dhparams.params.hedgedoc.path;
78 # };
79
80 # # https://github.com/settings/applications/2352617
81 # environmentFile = config.clanCore.facts.secretUploadDirectory + "/hedgedoc.env";
82 # };
83
84 # clanCore.facts.services.hedgedoc-github-auth = {
85 # secret."hedgedoc.env" = { };
86 # generator.script = ''
87 # echo "$prompt_value" > "$secrets"/hedgedoc.env
88 # '';
89 # generator.prompt = ''
90 # goto https://github.com/settings/applications/2352617 and paste the data in the following format:
91 # GITHUB_CLIENT_ID=...
92 # GITHUB_CLIENT_SECRET=...
93 # '';
94 # };
95}