This repository has no description
neoprism: add hedgedoc test instance
author
lassulus
date
(Jul 2, 2024, 4:00 PM CEST)
commit
6d7f7e51
6d7f7e51921223f78aa647798f69e567b61692db
parent
7cd328fc
7cd328fc83eef2a3b934ea1357a0e5e2ae6a85a4
+70
-1
+2
-1
2configs/dns/lassul.us.zone
+2
-1
2configs/dns/lassul.us.zone
···
1
-
@ 3600 IN SOA lassul.us. ns1.lassul.us. 2024070101 7200 3600 86400 3600
1
+
@ 3600 IN SOA lassul.us. ns1.lassul.us. 2024070201 7200 3600 86400 3600
2
2
3
3
;;@ 3600 IN NS ns1
4
4
@ 3600 IN NS ns1
···
35
35
cache IN CNAME prism
36
36
cgit IN CNAME prism
37
37
pad IN CNAME prism
38
+
pad2 IN CNAME neoprism
38
39
codi IN CNAME prism
39
40
go IN CNAME prism
40
41
lol IN CNAME prism
+2
machines/neoprism/config.nix
+2
machines/neoprism/config.nix
+4
2configs/services/pad/default.nix
+4
2configs/services/pad/default.nix
+62
2configs/services/pad/module.nix
+62
2configs/services/pad/module.nix
···
1
+
{ self, lib, config, ... }:
2
+
{
3
+
imports = [
4
+
self.inputs.clan-core.clanModules.postgresql
5
+
];
6
+
clan.postgresql.users.hedgedoc = {};
7
+
clan.postgresql.databases.hedgedoc = {};
8
+
options.clan.hedgedoc = {
9
+
domain = lib.mkOption {
10
+
type = lib.types.str;
11
+
description = "The domain of the hedgedoc instance.";
12
+
};
13
+
};
14
+
systemd.services.hedgedoc.environment = {
15
+
CMD_COOKIE_POLICY = "none";
16
+
CMD_CSP_ALLOW_FRAMING = "true";
17
+
};
18
+
19
+
services.hedgedoc = {
20
+
enable = true;
21
+
settings = {
22
+
allowOrigin = [ config.clan.hedgedoc.domain ];
23
+
db = {
24
+
dialect = "postgres";
25
+
host = "/run/postgresql";
26
+
database = "hedgedoc";
27
+
username = "hedgedoc";
28
+
};
29
+
# db = {
30
+
# dialect = "sqlite";
31
+
# storage = "/var/lib/hedgedoc/db.hedgedoc.sqlite";
32
+
# };
33
+
useCDN = false;
34
+
port = 3091;
35
+
domain = config.hedgedoc.domain;
36
+
allowFreeURL = true;
37
+
defaultPermission = "freely";
38
+
39
+
useSSL = true;
40
+
protocolUseSSL = true;
41
+
sslCAPath = [ "/etc/ssl/certs/ca-certificates.crt" ];
42
+
sslCertPath = "/var/lib/acme/${config.clan.hedgedoc.domain}/cert.pem";
43
+
sslKeyPath = "/var/lib/acme/${config.clan.hedgedoc.domain}/key.pem";
44
+
dhParamPath = config.security.dhparams.params.hedgedoc.path;
45
+
};
46
+
47
+
# https://github.com/settings/applications/2352617
48
+
environmentFile = config.clanCore.facts.secretUploadDirectory + "/hedgedoc.env";
49
+
};
50
+
51
+
clanCore.facts.services.hedgedoc-github-auth = {
52
+
secret."hedgedoc.env" = { };
53
+
generator.script = ''
54
+
cat > "$secrets"/hedgedoc.env
55
+
'';
56
+
generator.prompt = ''
57
+
goto https://github.com/settings/ap:qplications/2352617 and paste the data in the following format:
58
+
GITHUB_CLIENT_ID=...
59
+
GITHUB_CLIENT_SECRET=...
60
+
'';
61
+
};
62
+
}