-{ lib, pkgs, config, myconfig, ... }:
+{ lib, pkgs, config, ... }:
let
- env = myconfig.env.tools.mastodon;
+ env = config.myEnv.tools.mastodon;
root = "/run/current-system/webapps/tools_mastodon";
cfg = config.myServices.websites.tools.mastodon;
mcfg = config.services.mastodon;
};
config = lib.mkIf cfg.enable {
+ services.duplyBackup.profiles.mastodon = {
+ rootDir = mcfg.dataDir;
+ };
secrets.keys = [{
dest = "webapps/tools-mastodon";
user = "mastodon";
# LDAP authentication (optional)
LDAP_ENABLED=true
- LDAP_HOST=ldap.immae.eu
+ LDAP_HOST=${env.ldap.host}
LDAP_PORT=636
LDAP_METHOD=simple_tls
- LDAP_BASE="dc=immae,dc=eu"
- LDAP_BIND_DN="cn=mastodon,ou=services,dc=immae,dc=eu"
+ LDAP_BASE="${env.ldap.base}"
+ LDAP_BIND_DN="${env.ldap.dn}"
LDAP_PASSWORD="${env.ldap.password}"
LDAP_UID="uid"
- LDAP_SEARCH_FILTER="(&(%{uid}=%{email})(memberOf=cn=users,cn=mastodon,ou=services,dc=immae,dc=eu))"
+ LDAP_SEARCH_FILTER="${env.ldap.filter}"
'';
}];
services.mastodon = {
enable = true;
- configFile = "/var/secrets/webapps/tools-mastodon";
+ configFile = config.secrets.fullPaths."webapps/tools-mastodon";
socketsPrefix = "live_immae";
dataDir = "/var/lib/mastodon_immae";
};
+ services.filesWatcher.mastodon-streaming = {
+ restart = true;
+ paths = [ mcfg.configFile ];
+ };
+ services.filesWatcher.mastodon-web = {
+ restart = true;
+ paths = [ mcfg.configFile ];
+ };
+ services.filesWatcher.mastodon-sidekiq = {
+ restart = true;
+ paths = [ mcfg.configFile ];
+ };
+
- services.websites.tools.modules = [
+ services.websites.env.tools.modules = [
"headers" "proxy" "proxy_wstunnel" "proxy_http"
];
system.extraSystemBuilderCmds = ''
mkdir -p $out/webapps
ln -s ${mcfg.workdir}/public/ $out/webapps/tools_mastodon
'';
- services.websites.tools.vhostConfs.mastodon = {
+ services.websites.env.tools.vhostConfs.mastodon = {
certName = "eldiron";
addToCerts = true;
hosts = ["mastodon.immae.eu" ];