1 { lib, pkgs, config, ... }:
3 env = config.myEnv.tools.diaspora;
4 root = "/run/current-system/webapps/tools_diaspora";
5 cfg = config.myServices.websites.tools.diaspora;
6 dcfg = config.services.diaspora;
8 options.myServices.websites.tools.diaspora = {
9 enable = lib.mkEnableOption "enable diaspora's website";
12 config = lib.mkIf cfg.enable {
13 services.duplyBackup.profiles.diaspora = {
14 rootDir = dcfg.dataDir;
16 users.users.diaspora.extraGroups = [ "keys" ];
20 dest = "webapps/diaspora/diaspora.yml";
27 url: "https://diaspora.immae.eu/"
28 certificate_authorities: '${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt'
29 redis: 'redis://${env.redis.host}:${env.redis.port}/${env.redis.db}'
37 listen: '${dcfg.sockets.rails}'
38 rails_environment: 'production'
50 enable_registrations: false
69 sender_address: 'diaspora@tools.immae.eu'
73 location: '/run/wrappers/bin/sendmail'
76 podmin_email: 'diaspora@tools.immae.eu'
82 host: ${env.ldap.host}
86 skip_email_confirmation: true
88 bind_dn: "${env.ldap.dn}"
89 bind_pw: "${env.ldap.password}"
90 search_base: "${env.ldap.base}"
91 search_filter: "${env.ldap.filter}"
99 dest = "webapps/diaspora/database.yml";
102 permissions = "0400";
104 postgresql: &postgresql
106 host: "${env.postgresql.socket}"
107 port: "${env.postgresql.port}"
108 username: "${env.postgresql.user}"
109 password: "${env.postgresql.password}"
117 database: diaspora_development
120 database: ${env.postgresql.database}
123 database: "diaspora_test"
126 database: diaspora_integration1
129 database: diaspora_integration2
133 dest = "webapps/diaspora/secret_token.rb";
136 permissions = "0400";
138 Diaspora::Application.config.secret_key_base = '${env.secret_token}'
143 services.diaspora = {
145 package = pkgs.webapps.diaspora.override { ldap = true; };
146 dataDir = "/var/lib/diaspora_immae";
147 adminEmail = "diaspora@tools.immae.eu";
148 configDir = "/var/secrets/webapps/diaspora";
151 services.filesWatcher.diaspora = {
153 paths = [ dcfg.configDir ];
156 services.websites.env.tools.modules = [
157 "headers" "proxy" "proxy_http"
159 system.extraSystemBuilderCmds = ''
160 mkdir -p $out/webapps
161 ln -s ${dcfg.workdir}/public/ $out/webapps/tools_diaspora
163 services.websites.env.tools.vhostConfs.diaspora = {
164 certName = "eldiron";
166 hosts = [ "diaspora.immae.eu" ];
170 RewriteCond %{DOCUMENT_ROOT}/%{REQUEST_FILENAME} !-f
171 RewriteRule ^/(.*)$ unix://${dcfg.sockets.rails}|http://diaspora.immae.eu/%{REQUEST_URI} [P,NE,QSA,L]
176 RequestHeader set X_FORWARDED_PROTO https