Commit dfccbf4
Changed files (9)
modules
modules/hosts/pardofelis/default.nix
@@ -34,7 +34,6 @@
"freshrss"
"goatcounter"
"gokapi"
- "gotosocial"
"homepage"
"podman"
"restic"
modules/services/gotosocial/default.nix
@@ -1,78 +0,0 @@
-{lib, ...}: {
- flake.modules.nixos."services/gotosocial" = {config, ...}: {
- services.gotosocial = {
- enable = true;
- settings = {
- # Basic
- host = "trin.one";
- bind-address = "localhost";
- port = 9291;
- protocol = "https"; # Final used protocol, should be `https` even when utilizing a reverse proxy.
- # Storage
- db-type = "sqlite";
- db-address = "/var/lib/gotosocial/sqlite.db";
- storage-backend = "s3";
- storage-s3-bucket = "trin-one";
- storage-s3-redirect-url = "https://asset.trin.one";
- media-remote-cache-days = 0;
- # Instance
- landing-page-user = "hpcesia";
- instance-languages = ["zh-Hans" "en"];
- instance-expose-public-timeline = true;
- instance-inject-mastodon-version = true;
- # SMTP
- smtp-host = "glacier.mxrouting.net";
- smtp-port = 587;
- smtp-username = "no-reply@trin.one";
- smtp-from = "no-reply@trin.one";
- # OIDC
- oidc-enabled = true;
- oidc-idp-name = "Authelia";
- oidc-issuer = "https://auth.trin.one";
- oidc-client-id = "gts-trinnon";
- oidc-scopes = ["openid" "email" "profile" "groups"];
- oidc-allowed-groups = [];
- oidc-admin-groups = ["admin"];
- # Log
- log-level = "info";
- log-timestamp-format = "2006-01-02T15:04:05.000Z07:00";
- };
- environmentFile = config.vaultix.templates.gotosocial-env.path;
- };
-
- services.caddy.virtualHosts."trin.one".extraConfig =
- lib.mkIf config.services.caddy.enable
- (let
- localAddress = "http://localhost:${toString config.services.gotosocial.settings.port}";
- in ''
- encode zstd gzip
- reverse_proxy ${localAddress}
- '');
-
- services.restic.backups."${config.networking.hostName}-backup".paths =
- lib.mkIf
- (builtins.hasAttr "${config.networking.hostName}-backup" config.services.restic.backups)
- ["/var/lib/gotosocial"];
-
- vaultix.secrets.gotosocial-s3-endpoint.file = ./s3-endpoint.age;
- vaultix.secrets.gotosocial-s3-access-key.file = ./s3-access-key.age;
- vaultix.secrets.gotosocial-s3-secret-key.file = ./s3-secret-key.age;
- vaultix.secrets.gotosocial-oidc-secret.file = ./oidc-secret.age;
- vaultix.secrets.gotosocial-smtp-password.file = ./smtp-password.age;
-
- vaultix.templates.gotosocial-env = {
- content = let
- cfg = config.vaultix;
- in ''
- GTS_STORAGE_S3_ENDPOINT=${cfg.placeholder.gotosocial-s3-endpoint}
- GTS_STORAGE_S3_ACCESS_KEY=${cfg.placeholder.gotosocial-s3-access-key}
- GTS_STORAGE_S3_SECRET_KEY=${cfg.placeholder.gotosocial-s3-secret-key}
- GTS_OIDC_CLIENT_SECRET=${cfg.placeholder.gotosocial-oidc-secret}
- GTS_SMTP_PASSWORD=${cfg.placeholder.gotosocial-smtp-password}
- '';
- owner = "root";
- group = "gotosocial";
- mode = "0440";
- };
- };
-}
modules/services/gotosocial/metrics-password-hashed.age
@@ -1,7 +0,0 @@
-age-encryption.org/v1
--> X25519 k1Yv0btz+gv0KaC6HFJwNspZIb5YuDx6fkbBxgjAO1w
-NzqoQMY2dVWvhWt8JgWvy8mbySMe5FFl6DGe+lVCCQE
--> i-grease `TbPP? hYUAFZ | z
-rZaGGT0xgA
---- 4DvZoFuvzlp/QgADxTtK8rNvMMnGCC9BCdhasC/ZBN4
-\��{�ߟ�A�nZ�݄`2Bu}Z���-� ����h>Gdj��n�n�4f���_ y^��+�s�\�e[�e#�Oꏸ��4\�������a�g
\ No newline at end of file
modules/services/gotosocial/metrics-password.age
@@ -1,7 +0,0 @@
-age-encryption.org/v1
--> X25519 n5g4JOgtY9TIzQMFjo7yGgKJplyFc9j1r+UvKmCXPnw
-+Ysve21Lqfs0ujHSr5IqQtTBrszkybrf4hhhcs6SQok
--> VX36-grease
-ENdS/xn/WLeSS7k+fYsWiNFiTve9+e9UTnro+pMW3V1H0iaFHeZWhaY
---- Xu8s6dcKH6iJApGAc6shaY+L73QF53fJEqC9H+meJZU
-2��ѻҽp�I�C�a��W%�>t
&�@�����a��Q��F5Q���R��/���L�μt�=o�eU
\ No newline at end of file
modules/services/gotosocial/oidc-secret.age
@@ -1,8 +0,0 @@
-age-encryption.org/v1
--> X25519 2q+pi6GJSux+fYKEt63qxxVeZLJPpnyIW+JOCBTaChc
-W5LKe6eaM38Nwu2h1wzSbUxPUEwCOQW6v9DlDDuoO3w
--> /-grease tqH:W!zn t0n|u n_A3 1K)
-9gu0GPRqwE+QOtKPjZw1XhhfYNhiMBYPcBic7hQCx3dbgKiQVBDsnQFbGWIQqFJy
-vOeFYbhKzkflKJeaK5i7pzWDrxE2TCkdHFjTPPW5JbQKfyBzPWeljQeMehI
---- 6roCY+cCQJ7WTCh2S3TdXBSbwj3DiGoTLBab2yCBIlI
-�}��B���D��� ̡���~�!��@�� �L��S.���6B�Gw{���0���Ww&��V�V�]N�_�� 9�Ca�������#�<E����~����\��(�
\ No newline at end of file
modules/services/gotosocial/s3-access-key.age
@@ -1,7 +0,0 @@
-age-encryption.org/v1
--> X25519 LqUNP1BluYoTLe4uZeAEFEPjIIa3e9KookQT1n+t7Uc
-XxjcBzqoRjMXzHg32Glmd2Uu+pGwRbJSI5p/GLxiL84
--> !9nPI-grease ZYM;i
-ilW4jLNPaxrn
---- M+dKKtpC+TcQfKmWL3eSeMiiXP24QcPYGGpjDbFxIes
-�,�.� |������8q����L���Çص�a���YmLPuK|S���y )V[���DkoɋT�
\ No newline at end of file
modules/services/gotosocial/s3-endpoint.age
@@ -1,9 +0,0 @@
-age-encryption.org/v1
--> X25519 +Akxa82G8ODtjGTnSBG6bYXEvOXt4p5AFInfyQMMolk
-4SVwcy+9+XNn5b6pNZkykWrnSuXC4WJGHMg9VyKypwM
--> .xk9O-grease
-j64daUiW1kVPMtdbT16ANXmBg+sj5yVWeMqhyorR3Pc6CjL8XmsUi9sPwDDGyHbr
-ru40XmocyXzIaZ01Cy6BIIaprnsY8X70le9qIbM+VUg3oM4JL3l5gVN4TeblhJw+
-JA
---- FmAwrR46SnudnnMUkniQ0pnKH/oEFhNWp+LIutOB02M
-��_?���qT1�^>1���t��ua�c��n'4�Q<��ҫ&�/��h��%��an�Ƽny�W._G����:��&�V��9ݥ��pMw���
\ No newline at end of file
modules/services/gotosocial/s3-secret-key.age
Binary file
modules/services/gotosocial/smtp-password.age
@@ -1,8 +0,0 @@
-age-encryption.org/v1
--> X25519 2Y87GYnYPedumThjTyIufDSQnHBRf0VqBX66wsZdul8
-SlxUQqV6fi+9L5wl01tTGhDG6UOTPBef7Bzvp+Pcqlc
--> "hy[5-grease A2s$S% B0QLZ6
-KY9UOHPMqbGCYIcCoWvyUixdLhL0Eqe89luhYpzmVe+BL4pbEf3T3vvrPusLzjjk
-4DyTZtm7fNWJjqxJw2PpHJbs3xsEvDCzfXdz6mKy
---- 3TJXLTeoJ0mXyBhjk9/naefaQB6I1aY/d08Br7skE7Q
-���A�|��c r�J�7]^Տ���Nz��n~+y�:�y˓]��n����o26�cǔ����q�My
\ No newline at end of file