This repository has no description
pad.lassul.is: fix image uploading, add session_key var
author
lassulus
date
(Mar 4, 2025, 2:10 AM -0800)
commit
e955b2ac
e955b2ac07460fb5d54d0c87552636643564b067
parent
4193865a
4193865a89ca6ee780d1a690c1027bfaabfdbb46
+32
-5
+3
-2
2configs/services/pad/default.nix
+3
-2
2configs/services/pad/default.nix
···
14
14
'';
15
15
};
16
16
# https://github.com/settings/applications/2352617
17
-
services.hedgedoc.environmentFile =
18
-
config.clan.core.facts.services.hedgedoc-github-auth.secret."hedgedoc.env".path;
17
+
systemd.services.hedgedoc.serviceConfig.EnvironmentFile = [
18
+
config.clan.core.facts.services.hedgedoc-github-auth.secret."hedgedoc.env".path
19
+
];
19
20
}
+29
-3
2configs/services/pad/module.nix
+29
-3
2configs/services/pad/module.nix
···
1
1
{
2
2
lib,
3
3
config,
4
+
pkgs,
4
5
...
5
6
}:
6
7
{
···
30
31
"localhost"
31
32
config.clan.hedgedoc.domain
32
33
];
33
-
useCDN = false;
34
+
useCDN = true;
34
35
port = 3091;
35
36
domain = config.clan.hedgedoc.domain;
36
37
allowFreeURL = true;
···
49
50
};
50
51
};
51
52
53
+
systemd.services.hedgedoc.serviceConfig.SystemCallFilter = [
54
+
"fchown"
55
+
];
56
+
57
+
systemd.services.hedgedoc.serviceConfig.EnvironmentFile = [
58
+
config.clan.core.vars.generators.hedgedoc.files."hedgedoc.env".path
59
+
];
60
+
clan.core.vars.generators.hedgedoc = {
61
+
files."hedgedoc.env" = {};
62
+
runtimeInputs = [ pkgs.pwgen ];
63
+
script = ''
64
+
pwgen -s 64 1 > session_secret
65
+
cat >> "$out/hedgedoc.env" <<EOF
66
+
CMD_SESSION_SECRET=$(cat session_secret)
67
+
EOF
68
+
'';
69
+
};
70
+
52
71
services.nginx.virtualHosts.${config.clan.hedgedoc.domain} = {
53
72
enableACME = true;
54
73
forceSSL = true;
55
74
locations."/" = {
56
-
proxyPass = "https://localhost:3091";
57
-
# proxyPass = "http://localhost:${toString config.services.hedgedoc.settings.port}";
75
+
# proxyPass = "https://localhost:3091";
76
+
proxyPass = "https://localhost:${toString config.services.hedgedoc.settings.port}";
77
+
recommendedProxySettings = true;
78
+
# proxyWebsockets = true;
79
+
};
80
+
locations."/socket.io/" = {
81
+
# proxyPass = "https://localhost:3091";
82
+
proxyPass = "https://localhost:${toString config.services.hedgedoc.settings.port}";
83
+
recommendedProxySettings = true;
58
84
proxyWebsockets = true;
59
85
};
60
86
};