1 { lib, pkgs, config, ... }:
3 env = config.myEnv.tools.peertube;
4 cfg = config.myServices.websites.tools.peertube;
5 pcfg = config.services.peertube;
7 options.myServices.websites.tools.peertube = {
8 enable = lib.mkEnableOption "enable Peertube's website";
11 config = lib.mkIf cfg.enable {
12 services.duplyBackup.profiles.peertube = {
13 rootDir = pcfg.dataDir;
17 configFile = "/var/secrets/webapps/tools-peertube";
19 users.users.peertube.extraGroups = [ "keys" ];
22 dest = "webapps/tools-peertube";
29 port: ${toString config.myEnv.ports.peertube}
32 hostname: 'peertube.immae.eu'
35 hostname: '${env.postgresql.socket}'
38 username: '${env.postgresql.user}'
39 password: '${env.postgresql.password}'
43 socket: '${env.redis.socket}'
48 sendmail: '/run/wrappers/bin/sendmail'
49 from_address: 'peertube@tools.immae.eu'
51 tmp: '${pcfg.dataDir}/storage/tmp/'
52 avatars: '${pcfg.dataDir}/storage/avatars/'
53 videos: '${pcfg.dataDir}/storage/videos/'
54 streaming_playlists: '${pcfg.dataDir}/storage/streaming-playlists/'
55 redundancy: '${pcfg.dataDir}/storage/videos/'
56 logs: '${pcfg.dataDir}/storage/logs/'
57 previews: '${pcfg.dataDir}/storage/previews/'
58 thumbnails: '${pcfg.dataDir}/storage/thumbnails/'
59 torrents: '${pcfg.dataDir}/storage/torrents/'
60 captions: '${pcfg.dataDir}/storage/captions/'
61 cache: '${pcfg.dataDir}/storage/cache/'
62 plugins: '${pcfg.dataDir}/storage/plugins/'
63 client_overrides: '${pcfg.dataDir}/storage/client-overrides/'
67 services.websites.env.tools.modules = [
68 "headers" "proxy" "proxy_http" "proxy_wstunnel"
70 services.filesWatcher.peertube = {
72 paths = [ pcfg.configFile ];
75 services.websites.env.tools.vhostConfs.peertube = {
78 hosts = [ "peertube.immae.eu" ];
83 RewriteCond %{REQUEST_URI} ^/socket.io [NC]
84 RewriteCond %{QUERY_STRING} transport=websocket [NC]
85 RewriteRule /(.*) ws://localhost:${toString env.listenPort}/$1 [P,NE,QSA,L]
87 RewriteCond %{REQUEST_URI} ^/tracker/socket [NC]
88 RewriteRule /(.*) ws://localhost:${toString env.listenPort}/$1 [P,NE,QSA,L]
90 ProxyPass / http://localhost:${toString env.listenPort}/
91 ProxyPassReverse / http://localhost:${toString env.listenPort}/
94 RequestHeader set X-Real-IP %{REMOTE_ADDR}s