]>
Commit | Line | Data |
---|---|---|
ab8f306d | 1 | { lib, pkgs, config, ... }: |
f3a8fab5 | 2 | let |
ab8f306d | 3 | env = config.myEnv.tools.peertube; |
4288c2f2 | 4 | cfg = config.myServices.websites.tools.peertube; |
d42bbbe6 | 5 | pcfg = config.services.peertube; |
f3a8fab5 | 6 | in { |
4288c2f2 | 7 | options.myServices.websites.tools.peertube = { |
f3a8fab5 IB |
8 | enable = lib.mkEnableOption "enable Peertube's website"; |
9 | }; | |
10 | ||
11 | config = lib.mkIf cfg.enable { | |
d880826a IB |
12 | services.duplyBackup.profiles.peertube = { |
13 | rootDir = pcfg.dataDir; | |
14 | }; | |
d42bbbe6 IB |
15 | services.peertube = { |
16 | enable = true; | |
17 | configFile = "/var/secrets/webapps/tools-peertube"; | |
b639cc33 | 18 | package = pkgs.webapps.peertube.override { ldap = true; sendmail = true; light = "fr-FR"; }; |
f3a8fab5 | 19 | }; |
d42bbbe6 | 20 | users.users.peertube.extraGroups = [ "keys" ]; |
f3a8fab5 | 21 | |
1a718805 | 22 | secrets.keys = [{ |
f3a8fab5 IB |
23 | dest = "webapps/tools-peertube"; |
24 | user = "peertube"; | |
25 | group = "peertube"; | |
26 | permissions = "0640"; | |
27 | text = '' | |
28 | listen: | |
29 | hostname: 'localhost' | |
ab8f306d | 30 | port: ${toString config.myEnv.ports.peertube} |
f3a8fab5 IB |
31 | webserver: |
32 | https: true | |
33 | hostname: 'peertube.immae.eu' | |
34 | port: 443 | |
f3a8fab5 IB |
35 | database: |
36 | hostname: '${env.postgresql.socket}' | |
37 | port: 5432 | |
38 | suffix: '_prod' | |
39 | username: '${env.postgresql.user}' | |
40 | password: '${env.postgresql.password}' | |
41 | pool: | |
42 | max: 5 | |
43 | redis: | |
44 | socket: '${env.redis.socket}' | |
45 | auth: null | |
ab8f306d | 46 | db: ${env.redis.db} |
b639cc33 IB |
47 | auth: |
48 | local: | |
49 | enabled: true | |
50 | ldap: | |
51 | enabled: true | |
52 | ldap_only: false | |
53 | url: ldaps://${env.ldap.host}/${env.ldap.base} | |
54 | bind_dn: ${env.ldap.dn} | |
55 | bind_password: ${env.ldap.password} | |
56 | base: ${env.ldap.base} | |
57 | mail_entry: "mail" | |
58 | user_filter: "${env.ldap.filter}" | |
f3a8fab5 IB |
59 | smtp: |
60 | transport: sendmail | |
61 | sendmail: '/run/wrappers/bin/sendmail' | |
f3a8fab5 IB |
62 | from_address: 'peertube@tools.immae.eu' |
63 | storage: | |
d42bbbe6 IB |
64 | tmp: '${pcfg.dataDir}/storage/tmp/' |
65 | avatars: '${pcfg.dataDir}/storage/avatars/' | |
66 | videos: '${pcfg.dataDir}/storage/videos/' | |
b639cc33 | 67 | streaming_playlists: '${pcfg.dataDir}/storage/streaming-playlists/' |
d42bbbe6 IB |
68 | redundancy: '${pcfg.dataDir}/storage/videos/' |
69 | logs: '${pcfg.dataDir}/storage/logs/' | |
70 | previews: '${pcfg.dataDir}/storage/previews/' | |
71 | thumbnails: '${pcfg.dataDir}/storage/thumbnails/' | |
72 | torrents: '${pcfg.dataDir}/storage/torrents/' | |
73 | captions: '${pcfg.dataDir}/storage/captions/' | |
74 | cache: '${pcfg.dataDir}/storage/cache/' | |
b639cc33 | 75 | plugins: '${pcfg.dataDir}/storage/plugins/' |
f3a8fab5 IB |
76 | ''; |
77 | }]; | |
78 | ||
29f8cb85 | 79 | services.websites.env.tools.modules = [ |
f3a8fab5 IB |
80 | "headers" "proxy" "proxy_http" "proxy_wstunnel" |
81 | ]; | |
17f6eae9 IB |
82 | services.filesWatcher.peertube = { |
83 | restart = true; | |
84 | paths = [ pcfg.configFile ]; | |
85 | }; | |
86 | ||
29f8cb85 | 87 | services.websites.env.tools.vhostConfs.peertube = { |
f3a8fab5 | 88 | certName = "eldiron"; |
7df420c2 | 89 | addToCerts = true; |
f3a8fab5 IB |
90 | hosts = [ "peertube.immae.eu" ]; |
91 | root = null; | |
92 | extraConfig = [ '' | |
f826c67c IB |
93 | RewriteEngine On |
94 | ||
95 | RewriteCond %{REQUEST_URI} ^/socket.io [NC] | |
96 | RewriteCond %{QUERY_STRING} transport=websocket [NC] | |
ab8f306d | 97 | RewriteRule /(.*) ws://localhost:${toString env.listenPort}/$1 [P,NE,QSA,L] |
f826c67c IB |
98 | |
99 | RewriteCond %{REQUEST_URI} ^/tracker/socket [NC] | |
ab8f306d | 100 | RewriteRule /(.*) ws://localhost:${toString env.listenPort}/$1 [P,NE,QSA,L] |
f826c67c | 101 | |
ab8f306d IB |
102 | ProxyPass / http://localhost:${toString env.listenPort}/ |
103 | ProxyPassReverse / http://localhost:${toString env.listenPort}/ | |
f3a8fab5 IB |
104 | |
105 | ProxyPreserveHost On | |
106 | RequestHeader set X-Real-IP %{REMOTE_ADDR}s | |
f3a8fab5 IB |
107 | '' ]; |
108 | }; | |
109 | }; | |
110 | } |