1 { lib, pkgs, config, flakes, ... }:
3 scfg = config.myServices.websites.syden.peertube;
5 dataDir = "/var/lib/syden_peertube";
6 package = flakes.subflakes.private.peertube.packages.x86_64-linux.peertube_syden;
7 env = config.myEnv.tools.syden_peertube;
10 options.myServices.websites.syden.peertube.enable = lib.mkEnableOption "enable Syden's website";
12 config = lib.mkIf scfg.enable {
13 users.users.peertube = {
14 uid = config.ids.uids.peertube;
16 description = "Peertube user";
17 useDefaultShell = true;
18 extraGroups = [ "keys" ];
20 users.groups.peertube.gid = config.ids.gids.peertube;
22 secrets.keys."websites/syden/peertube" = {
29 port: ${toString env.listenPort}
32 hostname: 'record-links.immae.eu'
35 hostname: '${env.postgresql.socket}'
38 username: '${env.postgresql.user}'
39 password: '${env.postgresql.password}'
43 socket: '${env.redis.socket}'
48 sendmail: '/run/wrappers/bin/sendmail'
49 from_address: 'peertube@tools.immae.eu'
51 tmp: '${dataDir}/storage/tmp/'
52 avatars: '${dataDir}/storage/avatars/'
53 videos: '${dataDir}/storage/videos/'
54 streaming_playlists: '${dataDir}/storage/streaming-playlists/'
55 redundancy: '${dataDir}/storage/videos/'
56 logs: '${dataDir}/storage/logs/'
57 previews: '${dataDir}/storage/previews/'
58 thumbnails: '${dataDir}/storage/thumbnails/'
59 torrents: '${dataDir}/storage/torrents/'
60 captions: '${dataDir}/storage/captions/'
61 cache: '${dataDir}/storage/cache/'
62 plugins: '${dataDir}/storage/plugins/'
63 client_overrides: '${dataDir}/storage/client-overrides/'
67 services.filesWatcher.syden_peertube = {
69 paths = [ config.secrets.fullPaths."websites/syden/peertube" ];
72 systemd.services.syden_peertube = {
73 description = "Peertube";
74 wantedBy = [ "multi-user.target" ];
75 after = [ "network.target" "postgresql.service" ];
76 wants = [ "postgresql.service" ];
78 environment.NODE_CONFIG_DIR = "${dataDir}/config";
79 environment.NODE_ENV = "production";
80 environment.HOME = package;
82 path = [ pkgs.nodejs pkgs.bashInteractive pkgs.ffmpeg pkgs.openssl ];
85 install -m 0750 -d ${dataDir}/config
86 ln -sf ${config.secrets.fullPaths."websites/syden/peertube"} ${dataDir}/config/production.yaml
87 ln -sf ${package}/config/default.yaml ${dataDir}/config/default.yaml
94 WorkingDirectory = package;
95 StateDirectory = "syden_peertube";
96 StateDirectoryMode = 0750;
99 ProtectControlGroups = true;
105 unitConfig.RequiresMountsFor = dataDir;
108 services.websites.env.production.vhostConfs.syden_peertube = {
111 certMainHost = "record-links.immae.eu";
112 hosts = [ "record-links.immae.eu" ];
117 RewriteCond %{REQUEST_URI} ^/socket.io [NC]
118 RewriteCond %{QUERY_STRING} transport=websocket [NC]
119 RewriteRule /(.*) ws://localhost:${toString env.listenPort}/$1 [P,NE,QSA,L]
121 RewriteCond %{REQUEST_URI} ^/tracker/socket [NC]
122 RewriteRule /(.*) ws://localhost:${toString env.listenPort}/$1 [P,NE,QSA,L]
124 ProxyPass / http://localhost:${toString env.listenPort}/
125 ProxyPassReverse / http://localhost:${toString env.listenPort}/
128 RequestHeader set X-Real-IP %{REMOTE_ADDR}s