1 { lib, pkgs, config, ... }:
3 env = config.myEnv.tools.diaspora;
4 root = "/run/current-system/webapps/tools_diaspora";
5 cfg = config.myServices.websites.tools.diaspora;
6 dcfg = config.services.diaspora;
8 options.myServices.websites.tools.diaspora = {
9 enable = lib.mkEnableOption "enable diaspora's website";
12 config = lib.mkIf cfg.enable {
13 services.duplyBackup.profiles.diaspora = {
14 rootDir = dcfg.dataDir;
15 remotes = [ "eriomem" "ovh" ];
17 users.users.diaspora.extraGroups = [ "keys" ];
20 "webapps/diaspora" = {
26 "webapps/diaspora/diaspora.yml" = {
33 url: "https://diaspora.immae.eu/"
34 certificate_authorities: '${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt'
35 redis: 'redis://${env.redis.host}:${env.redis.port}/${env.redis.db}'
43 listen: '${dcfg.sockets.rails}'
44 rails_environment: 'production'
56 enable_registrations: false
75 sender_address: 'diaspora@tools.immae.eu'
79 location: '/run/wrappers/bin/sendmail'
82 podmin_email: 'diaspora@tools.immae.eu'
88 host: ${env.ldap.host}
92 skip_email_confirmation: true
94 bind_dn: "${env.ldap.dn}"
95 bind_pw: "${env.ldap.password}"
96 search_base: "${env.ldap.base}"
97 search_filter: "${env.ldap.filter}"
104 "webapps/diaspora/database.yml" = {
107 permissions = "0400";
109 postgresql: &postgresql
111 host: "${env.postgresql.socket}"
112 port: "${env.postgresql.port}"
113 username: "${env.postgresql.user}"
114 password: "${env.postgresql.password}"
122 database: diaspora_development
125 database: ${env.postgresql.database}
128 database: "diaspora_test"
131 database: diaspora_integration1
134 database: diaspora_integration2
137 "webapps/diaspora/secret_token.rb" = {
140 permissions = "0400";
142 Diaspora::Application.config.secret_key_base = '${env.secret_token}'
147 services.diaspora = {
149 package = pkgs.webapps.diaspora.override { ldap = true; };
150 dataDir = "/var/lib/diaspora_immae";
151 adminEmail = "diaspora@tools.immae.eu";
152 configDir = config.secrets.fullPaths."webapps/diaspora";
155 services.filesWatcher.diaspora = {
157 paths = [ dcfg.configDir ];
160 services.websites.env.tools.modules = [
161 "headers" "proxy" "proxy_http"
163 system.extraSystemBuilderCmds = ''
164 mkdir -p $out/webapps
165 ln -s ${dcfg.workdir}/public/ $out/webapps/tools_diaspora
167 services.websites.env.tools.vhostConfs.diaspora = {
168 certName = "eldiron";
170 hosts = [ "diaspora.immae.eu" ];
174 RewriteCond %{DOCUMENT_ROOT}/%{REQUEST_FILENAME} !-f
175 RewriteRule ^/(.*)$ unix://${dcfg.sockets.rails}|http://diaspora.immae.eu/%{REQUEST_URI} [P,NE,QSA,L]
180 RequestHeader set X_FORWARDED_PROTO https