1 { lib, pkgs, config, myconfig, mylibs, ... }:
3 diaspora = pkgs.callPackage ./diaspora.nix {
4 inherit (mylibs) fetchedGithub;
5 env = myconfig.env.tools.diaspora;
8 root = "/run/current-system/webapps/tools_diaspora";
9 cfg = config.services.myWebsites.tools.diaspora;
11 options.services.myWebsites.tools.diaspora = {
12 enable = lib.mkEnableOption "enable diaspora's website";
15 config = lib.mkIf cfg.enable {
16 ids.uids.diaspora = myconfig.env.tools.diaspora.user.uid;
17 ids.gids.diaspora = myconfig.env.tools.diaspora.user.gid;
19 users.users.diaspora = {
21 uid = config.ids.uids.diaspora;
23 description = "Diaspora user";
24 home = diaspora.varDir;
25 useDefaultShell = true;
26 packages = [ diaspora.gems pkgs.nodejs diaspora.gems.ruby ];
27 extraGroups = [ "keys" ];
30 users.groups.diaspora.gid = config.ids.gids.diaspora;
32 deployment.keys = diaspora.keys;
33 systemd.services.diaspora = {
34 description = "Diaspora";
35 wantedBy = [ "multi-user.target" ];
37 "network.target" "redis.service" "postgresql.service"
38 "tools-diaspora-secret_token.service"
39 "tools-diaspora-config.service"
40 "tools-diaspora-database_config.service"
43 "redis.service" "postgresql.service"
44 "tools-diaspora-secret_token.service"
45 "tools-diaspora-config.service"
46 "tools-diaspora-database_config.service"
49 environment.RAILS_ENV = "production";
50 environment.BUNDLE_PATH = "${diaspora.gems}/${diaspora.gems.ruby.gemPath}";
51 environment.BUNDLE_GEMFILE = "${diaspora.gems.confFiles}/Gemfile";
52 environment.EYE_SOCK = "${diaspora.socketsDir}/eye.sock";
53 environment.EYE_PID = "${diaspora.socketsDir}/eye.pid";
55 path = [ diaspora.gems pkgs.nodejs diaspora.gems.ruby pkgs.curl pkgs.which pkgs.gawk ];
58 ./bin/bundle exec rails db:migrate
62 exec ${diaspora.railsRoot}/script/server
70 WorkingDirectory = diaspora.railsRoot;
71 StandardInput = "null";
72 KillMode = "control-group";
75 unitConfig.RequiresMountsFor = diaspora.varDir;
78 system.activationScripts.diaspora = {
81 install -m 0755 -o diaspora -g diaspora -d ${diaspora.socketsDir}
82 install -m 0755 -o diaspora -g diaspora -d ${diaspora.varDir} \
83 ${diaspora.varDir}/uploads ${diaspora.varDir}/tmp \
84 ${diaspora.varDir}/log
85 install -m 0700 -o diaspora -g diaspora -d ${diaspora.varDir}/tmp/pids
86 if [ ! -f ${diaspora.varDir}/schedule.yml ]; then
87 echo "{}" | $wrapperDir/sudo -u diaspora tee ${diaspora.varDir}/schedule.yml
92 services.myWebsites.tools.modules = [
93 "headers" "proxy" "proxy_http"
95 security.acme.certs."eldiron".extraDomains."diaspora.immae.eu" = null;
96 system.extraSystemBuilderCmds = ''
98 ln -s ${diaspora.railsRoot}/public/ $out/webapps/tools_diaspora
100 services.myWebsites.tools.vhostConfs.diaspora = {
101 certName = "eldiron";
102 hosts = [ "diaspora.immae.eu" ];
106 RewriteCond %{DOCUMENT_ROOT}/%{REQUEST_FILENAME} !-f
107 RewriteRule ^/(.*)$ unix://${diaspora.railsSocket}|http://diaspora.immae.eu/%{REQUEST_URI} [P,NE,QSA,L]
112 RequestHeader set X_FORWARDED_PROTO https