1 { lib, pkgs, config, ... }:
3 env = config.myEnv.tools.diaspora;
4 root = "/run/current-system/webapps/tools_diaspora";
5 cfg = config.myServices.websites.tools.diaspora;
6 dcfg = config.services.diaspora;
8 options.myServices.websites.tools.diaspora = {
9 enable = lib.mkEnableOption "enable diaspora's website";
12 config = lib.mkIf cfg.enable {
13 services.duplyBackup.profiles.diaspora = {
14 rootDir = dcfg.dataDir;
15 remotes = [ "eriomem" "ovh" ];
17 users.users.diaspora.extraGroups = [ "keys" ];
21 dest = "webapps/diaspora/diaspora.yml";
28 url: "https://diaspora.immae.eu/"
29 certificate_authorities: '${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt'
30 redis: 'redis://${env.redis.host}:${env.redis.port}/${env.redis.db}'
38 listen: '${dcfg.sockets.rails}'
39 rails_environment: 'production'
51 enable_registrations: false
70 sender_address: 'diaspora@tools.immae.eu'
74 location: '/run/wrappers/bin/sendmail'
77 podmin_email: 'diaspora@tools.immae.eu'
83 host: ${env.ldap.host}
87 skip_email_confirmation: true
89 bind_dn: "${env.ldap.dn}"
90 bind_pw: "${env.ldap.password}"
91 search_base: "${env.ldap.base}"
92 search_filter: "${env.ldap.filter}"
100 dest = "webapps/diaspora/database.yml";
103 permissions = "0400";
105 postgresql: &postgresql
107 host: "${env.postgresql.socket}"
108 port: "${env.postgresql.port}"
109 username: "${env.postgresql.user}"
110 password: "${env.postgresql.password}"
118 database: diaspora_development
121 database: ${env.postgresql.database}
124 database: "diaspora_test"
127 database: diaspora_integration1
130 database: diaspora_integration2
134 dest = "webapps/diaspora/secret_token.rb";
137 permissions = "0400";
139 Diaspora::Application.config.secret_key_base = '${env.secret_token}'
144 services.diaspora = {
146 package = pkgs.webapps.diaspora.override { ldap = true; };
147 dataDir = "/var/lib/diaspora_immae";
148 adminEmail = "diaspora@tools.immae.eu";
149 configDir = "/var/secrets/webapps/diaspora";
152 services.filesWatcher.diaspora = {
154 paths = [ dcfg.configDir ];
157 services.websites.env.tools.modules = [
158 "headers" "proxy" "proxy_http"
160 system.extraSystemBuilderCmds = ''
161 mkdir -p $out/webapps
162 ln -s ${dcfg.workdir}/public/ $out/webapps/tools_diaspora
164 services.websites.env.tools.vhostConfs.diaspora = {
165 certName = "eldiron";
167 hosts = [ "diaspora.immae.eu" ];
171 RewriteCond %{DOCUMENT_ROOT}/%{REQUEST_FILENAME} !-f
172 RewriteRule ^/(.*)$ unix://${dcfg.sockets.rails}|http://diaspora.immae.eu/%{REQUEST_URI} [P,NE,QSA,L]
177 RequestHeader set X_FORWARDED_PROTO https