This repository has no description
1.6 kB
65 lines
1{ ... }:
2let
3 neoprismPeerID = "12D3KooWDccB4dVFt6uyfD5Yc3brwj4JLSztPeJpY3yg965iB5uT";
4 neoprismAddrs = [
5 "/ip6/42:0:ce16::99/tcp/4001/p2p/${neoprismPeerID}"
6 "/ip4/95.217.192.59/tcp/4001/p2p/${neoprismPeerID}"
7 ];
8in
9{
10 services.kubo = {
11 enable = true;
12 settings = {
13 Addresses = {
14 API = [
15 "/ip4/127.0.0.1/tcp/5001"
16 "/ip6/::1/tcp/5001"
17 ];
18 Gateway = [
19 "/ip4/127.0.0.1/tcp/8089"
20 "/ip6/::1/tcp/8089"
21 ];
22 # don't listen for incoming swarm connections
23 Swarm = [ ];
24 };
25
26 # only connect to neoprism, no public DHT
27 Bootstrap = neoprismAddrs;
28 Peering.Peers = [
29 {
30 ID = neoprismPeerID;
31 Addrs = [
32 "/ip6/42:0:ce16::99/tcp/4001"
33 "/ip4/95.217.192.59/tcp/4001"
34 ];
35 }
36 ];
37
38 # minimal connections
39 Swarm.ConnMgr = {
40 LowWater = 1;
41 HighWater = 5;
42 GracePeriod = "10s";
43 };
44 Swarm.Transports.Network.TCP = true;
45 Swarm.Transports.Network.QUIC = false;
46 Swarm.RelayClient.Enabled = false;
47 Swarm.RelayService.Enabled = false;
48 Swarm.ResourceMgr = {
49 Enabled = true;
50 MaxMemory = "128MB";
51 };
52
53 # don't route for others, don't announce to DHT
54 Routing.Type = "none";
55 AutoTLS.AutoWSS = false;
56
57 # don't provide/announce content to the network
58 Provide.Enabled = false;
59
60 Datastore.StorageMax = "10GB";
61 };
62 };
63
64 # no firewall ports needed — we don't accept incoming connections
65}