1 { lib, pkgs, config, ... }:
3 env = config.myEnv.tools.diaspora;
4 root = "${dcfg.workdir}/public/";
5 cfg = config.myServices.websites.tools.diaspora;
6 dcfg = config.services.diaspora;
8 options.myServices.websites.tools.diaspora = {
9 enable = lib.mkEnableOption "enable diaspora's website";
12 config = lib.mkIf cfg.enable {
13 users.users.diaspora.extraGroups = [ "keys" ];
16 "webapps/diaspora" = {
22 "webapps/diaspora/diaspora.yml" = {
29 url: "https://diaspora.immae.eu/"
30 certificate_authorities: '${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt'
31 redis: 'redis://${env.redis.host}:${env.redis.port}/${env.redis.db}'
39 listen: '${dcfg.sockets.rails}'
40 rails_environment: 'production'
52 enable_registrations: false
71 sender_address: 'diaspora@tools.immae.eu'
75 location: '/run/wrappers/bin/sendmail'
78 podmin_email: 'diaspora@tools.immae.eu'
84 host: ${env.ldap.host}
88 skip_email_confirmation: true
90 bind_dn: "${env.ldap.dn}"
91 bind_pw: "${env.ldap.password}"
92 search_base: "${env.ldap.base}"
93 search_filter: "${env.ldap.filter}"
100 "webapps/diaspora/database.yml" = {
103 permissions = "0400";
105 postgresql: &postgresql
107 host: "${env.postgresql.socket}"
108 port: "${env.postgresql.port}"
109 username: "${env.postgresql.user}"
110 password: "${env.postgresql.password}"
118 database: diaspora_development
121 database: ${env.postgresql.database}
124 database: "diaspora_test"
127 database: diaspora_integration1
130 database: diaspora_integration2
133 "webapps/diaspora/secret_token.rb" = {
136 permissions = "0400";
138 Diaspora::Application.config.secret_key_base = '${env.secret_token}'
143 services.diaspora = {
145 package = pkgs.webapps.diaspora.override { ldap = true; };
146 dataDir = "/var/lib/diaspora_immae";
147 adminEmail = "diaspora@tools.immae.eu";
148 configDir = config.secrets.fullPaths."webapps/diaspora";
151 services.filesWatcher.diaspora = {
153 paths = [ dcfg.configDir ];
156 services.websites.env.tools.modules = [
157 "headers" "proxy" "proxy_http"
159 services.websites.env.tools.vhostConfs.diaspora = {
160 certName = "eldiron";
162 hosts = [ "diaspora.immae.eu" ];
166 RewriteCond %{DOCUMENT_ROOT}/%{REQUEST_FILENAME} !-f
167 RewriteRule ^/(.*)$ unix://${dcfg.sockets.rails}|http://diaspora.immae.eu/%{REQUEST_URI} [P,NE,QSA,L]
172 RequestHeader set X_FORWARDED_PROTO https