1 { lib, pkgs, config, myconfig, mylibs, ... }:
3 mediagoblin = pkgs.callPackage ./mediagoblin.nix {
4 inherit (mylibs) fetchedGit fetchedGithub;
5 env = myconfig.env.tools.mediagoblin;
8 cfg = config.services.myWebsites.tools.mediagoblin;
10 options.services.myWebsites.tools.mediagoblin = {
11 enable = lib.mkEnableOption "enable mediagoblin's website";
14 config = lib.mkIf cfg.enable {
15 ids.uids.mediagoblin = myconfig.env.tools.mediagoblin.user.uid;
16 ids.gids.mediagoblin = myconfig.env.tools.mediagoblin.user.gid;
18 users.users.mediagoblin = {
20 uid = config.ids.uids.mediagoblin;
21 group = "mediagoblin";
22 description = "Mediagoblin user";
23 home = mediagoblin.varDir;
24 useDefaultShell = true;
27 users.groups.mediagoblin.gid = config.ids.gids.mediagoblin;
29 systemd.services.mediagoblin-web = {
30 description = "Mediagoblin service";
31 wantedBy = [ "multi-user.target" ];
32 after = [ "network.target" ];
34 environment.SCRIPT_NAME = "/mediagoblin/";
37 exec ./bin/paster serve \
38 ${mediagoblin.pythonRoot}/paste_local.ini \
39 --pid-file=${mediagoblin.socketsDir}/mediagoblin.pid
43 exec ./bin/paster serve \
44 --pid-file=${mediagoblin.socketsDir}/mediagoblin.pid \
45 ${mediagoblin.pythonRoot}/paste_local.ini stop
57 WorkingDirectory = mediagoblin.pythonRoot;
58 PIDFile = "${mediagoblin.socketsDir}/mediagoblin.pid";
61 unitConfig.RequiresMountsFor = mediagoblin.varDir;
64 systemd.services.mediagoblin-celeryd = {
65 description = "Mediagoblin service";
66 wantedBy = [ "multi-user.target" ];
67 after = [ "network.target" "mediagoblin-web.service" ];
69 environment.MEDIAGOBLIN_CONFIG = "${mediagoblin.pythonRoot}/mediagoblin_local.ini";
70 environment.CELERY_CONFIG_MODULE = "mediagoblin.init.celery.from_celery";
73 exec ./bin/celery worker \
74 --logfile=${mediagoblin.varDir}/celery.log \
84 WorkingDirectory = mediagoblin.pythonRoot;
85 PIDFile = "${mediagoblin.socketsDir}/mediagoblin-celeryd.pid";
88 unitConfig.RequiresMountsFor = mediagoblin.varDir;
91 system.activationScripts.mediagoblin = {
94 install -m 0755 -o mediagoblin -g mediagoblin -d ${mediagoblin.socketsDir}
95 install -m 0755 -o mediagoblin -g mediagoblin -d ${mediagoblin.varDir}
96 if [ -d ${mediagoblin.varDir}/plugin_static/ ]; then
97 rm ${mediagoblin.varDir}/plugin_static/coreplugin_basic_auth
98 ln -sf ${mediagoblin.pythonRoot}/mediagoblin/plugins/basic_auth/static ${mediagoblin.varDir}/plugin_static/coreplugin_basic_auth
103 services.myWebsites.tools.modules = [
106 users.users.wwwrun.extraGroups = [ "mediagoblin" ];
107 security.acme.certs."eldiron".extraDomains."mgoblin.immae.eu" = null;
108 services.myWebsites.tools.vhostConfs.mgoblin = {
109 certName = "eldiron";
110 hosts = ["mgoblin.immae.eu" ];
113 Alias /mgoblin_media ${mediagoblin.varDir}/media/public
114 <Directory ${mediagoblin.varDir}/media/public>
115 Options -Indexes +FollowSymLinks +MultiViews +Includes
119 Alias /theme_static ${mediagoblin.varDir}/theme_static
120 <Directory ${mediagoblin.varDir}/theme_static>
121 Options -Indexes +FollowSymLinks +MultiViews +Includes
125 Alias /plugin_static ${mediagoblin.varDir}/plugin_static
126 <Directory ${mediagoblin.varDir}/plugin_static>
127 Options -Indexes +FollowSymLinks +MultiViews +Includes
134 ProxyPass /mgoblin_media !
135 ProxyPass /theme_static !
136 ProxyPass /plugin_static !
137 ProxyPassMatch ^/.well-known/acme-challenge !
138 ProxyPass / unix://${mediagoblin.socketsDir}/mediagoblin.sock|http://mgoblin.immae.eu/
139 ProxyPassReverse / unix://${mediagoblin.socketsDir}/mediagoblin.sock|http://mgoblin.immae.eu/