Migrate gemini capsule to user config

[perso/Immae/Config/Nix.git] / systems / eldiron / gemini / default.nix

diff --git a/systems/eldiron/gemini/default.nix b/systems/eldiron/gemini/default.nix
index 600afbc9cab5342f0bd80a97dedba72c471ada2a..fc214130a941e99cbb9e117b67da20fa16b605d6 100644 (file)
--- a/systems/eldiron/gemini/default.nix
+++ b/systems/eldiron/gemini/default.nix
@@ -1,22 +1,7 @@
 { lib, config, pkgs, ... }:
-let
-  configFile = pkgs.writeText "config.yaml" ''
-    listen: ":1965"
-    hosts:
-      immae.eu:
-        cert: /var/lib/acme/immae/full.pem
-        key: /var/lib/acme/immae/key.pem
-        paths:
-          - path: /
-            root: ${./public}
-  '';
-in
 {
   options.myServices.gemini.enable = lib.mkEnableOption "enable Gemini capsule";
   config = lib.mkIf config.myServices.gemini.enable {
-    security.acme.certs.immae.postRun = ''
-      systemctl restart gemini.service
-    '';
     myServices.chatonsProperties.hostings.gemini = {
       file.datetime = "2022-08-27T18:00:00";
       hosting = {
@@ -30,21 +15,34 @@ in
         install.type = "PACKAGE";
       };
       software = {
-        name = "twins";
-        website = "https://code.rocketnine.space/tslocum/twins";
-        license.url = "https://code.rocketnine.space/tslocum/twins/src/branch/master/LICENSE";
-        license.name = "MIT License";
-        version = pkgs.twins.version;
-        source.url = "https://code.rocketnine.space/tslocum/twins";
+        name = "stargazer";
+        website = "https://git.sr.ht/~zethra/stargazer/";
+        license.url = "https://git.sr.ht/~zethra/stargazer/tree/main/LICENSE";
+        license.name = "GNU AFFERO GENERAL PUBLIC LICENSE Version 3";
+        version = pkgs.stargazer.version;
+        source.url = "https://git.sr.ht/~zethra/stargazer/";
       };
     };
     networking.firewall.allowedTCPPorts = [ 1965 ];
-    systemd.services.gemini = {
-      description = "Gemini capsule server";
-      wantedBy = [ "multi-user.target" ];
-      after = [ "network.target" ];
-      serviceConfig.ExecStart = "${pkgs.twins}/bin/twins -config ${configFile}";
-      serviceConfig.Type = "simple";
+    security.acme.certs = {
+      "gemini" = {
+        group = "stargazer";
+        domain = "immae.eu";
+        keyType = "rsa4096";
+        postRun = ''
+          cp -a key.pem key_pkcs8.pem
+          sed -i -e "s/ RSA PRIVATE KEY/ PRIVATE KEY/" key_pkcs8.pem
+          systemctl restart stargazer.service
+        '';
+        extraDomainNames = [];
+      };
+    };
+    services.stargazer = {
+      enable = true;
+      ipLog = true;
+      requestTimeout = 0;
+      genCerts = false;
+      regenCerts = false;
     };
   };
 }