1 { lib, pkgs, config, ... }:
3 env = config.myEnv.tools.peertube;
4 cfg = config.myServices.websites.tools.peertube;
5 pcfg = config.services.peertube;
7 options.myServices.websites.tools.peertube = {
8 enable = lib.mkEnableOption "enable Peertube's website";
11 config = lib.mkIf cfg.enable {
12 services.duplyBackup.profiles.peertube = {
13 rootDir = pcfg.dataDir;
17 configFile = "/var/secrets/webapps/tools-peertube";
18 package = pkgs.webapps.peertube.override { ldap = true; sendmail = true; light = "fr-FR"; };
20 users.users.peertube.extraGroups = [ "keys" ];
23 dest = "webapps/tools-peertube";
30 port: ${toString config.myEnv.ports.peertube}
33 hostname: 'peertube.immae.eu'
36 hostname: '${env.postgresql.socket}'
39 username: '${env.postgresql.user}'
40 password: '${env.postgresql.password}'
44 socket: '${env.redis.socket}'
53 url: ldaps://${env.ldap.host}/${env.ldap.base}
54 bind_dn: ${env.ldap.dn}
55 bind_password: ${env.ldap.password}
56 base: ${env.ldap.base}
58 user_filter: "${env.ldap.filter}"
61 sendmail: '/run/wrappers/bin/sendmail'
62 from_address: 'peertube@tools.immae.eu'
64 tmp: '${pcfg.dataDir}/storage/tmp/'
65 avatars: '${pcfg.dataDir}/storage/avatars/'
66 videos: '${pcfg.dataDir}/storage/videos/'
67 streaming_playlists: '${pcfg.dataDir}/storage/streaming-playlists/'
68 redundancy: '${pcfg.dataDir}/storage/videos/'
69 logs: '${pcfg.dataDir}/storage/logs/'
70 previews: '${pcfg.dataDir}/storage/previews/'
71 thumbnails: '${pcfg.dataDir}/storage/thumbnails/'
72 torrents: '${pcfg.dataDir}/storage/torrents/'
73 captions: '${pcfg.dataDir}/storage/captions/'
74 cache: '${pcfg.dataDir}/storage/cache/'
75 plugins: '${pcfg.dataDir}/storage/plugins/'
79 services.websites.env.tools.modules = [
80 "headers" "proxy" "proxy_http" "proxy_wstunnel"
82 services.filesWatcher.peertube = {
84 paths = [ pcfg.configFile ];
87 services.websites.env.tools.vhostConfs.peertube = {
90 hosts = [ "peertube.immae.eu" ];
95 RewriteCond %{REQUEST_URI} ^/socket.io [NC]
96 RewriteCond %{QUERY_STRING} transport=websocket [NC]
97 RewriteRule /(.*) ws://localhost:${toString env.listenPort}/$1 [P,NE,QSA,L]
99 RewriteCond %{REQUEST_URI} ^/tracker/socket [NC]
100 RewriteRule /(.*) ws://localhost:${toString env.listenPort}/$1 [P,NE,QSA,L]
102 ProxyPass / http://localhost:${toString env.listenPort}/
103 ProxyPassReverse / http://localhost:${toString env.listenPort}/
106 RequestHeader set X-Real-IP %{REMOTE_ADDR}s