1 { env, ruby_2_5, bundlerEnv, defaultGemConfig, fetchedGithub, stdenv, writeText, pkgs, cacert }:
3 varDir = "/var/lib/mastodon_immae";
4 socketsDir = "/run/mastodon";
9 gemdir = (fetchedGithub ./mastodon.json).src;
10 groups = [ "default" "production" "test" "development" ];
11 gemConfig = defaultGemConfig // {
13 buildInputs = with pkgs; [ protobuf protobufc pkgconfig ];
16 buildInputs = with pkgs; [ libidn ];
19 buildInputs = with pkgs; [ pam ];
23 mastodon = stdenv.mkDerivation (fetchedGithub ./mastodon.json // rec {
26 yarn install --pure-lockfile
27 patchShebangs node_modules
32 propagatedBuildInputs = [ gems pkgs.yarn pkgs.python2 pkgs.nodejs ];
34 config = writeText "mastodon_environment" ''
38 DB_HOST=/run/postgresql
41 DB_PASS=${env.postgresql.password}
44 LOCAL_DOMAIN=mastodon.immae.eu
46 ALTERNATE_DOMAINS=immae.eu
48 PAPERCLIP_SECRET=${env.paperclip_secret}
49 SECRET_KEY_BASE=${env.secret_key_base}
50 OTP_SECRET=${env.otp_secret}
52 VAPID_PRIVATE_KEY=${env.vapid.private}
53 VAPID_PUBLIC_KEY=${env.vapid.public}
55 SMTP_SERVER=mail.immae.eu
57 SMTP_FROM_ADDRESS=notifications@mastodon.immae.eu
58 SMTP_DELIVERY_METHOD=smtp
59 PAPERCLIP_ROOT_PATH=${varDir}
61 STREAMING_CLUSTER_NUM=1
63 # LDAP authentication (optional)
65 LDAP_HOST=ldap.immae.eu
67 LDAP_METHOD=simple_tls
68 LDAP_BASE="dc=immae,dc=eu"
69 LDAP_BIND_DN="cn=mastodon,ou=services,dc=immae,dc=eu"
70 LDAP_PASSWORD="${env.ldap.password}"
72 LDAP_SEARCH_FILTER="(&(%{uid}=%{email})(memberOf=cn=users,cn=mastodon,ou=services,dc=immae,dc=eu))"
75 railsRoot = stdenv.mkDerivation {
76 name = "mastodon_immae";
77 inherit config mastodon;
78 builder = writeText "build_mastodon_immae" ''
85 chmod u+rwX . node_modules public
86 RAILS_ENV=production ${gems}/bin/rails assets:precompile
88 ln -sf ../../../../../../../${varDir}/tmp/cache tmp
90 buildInputs = [ gems pkgs.nodejs pkgs.yarn ];
94 inherit railsRoot config varDir socketsDir gems;
95 nodeSocket = "${socketsDir}/live_immae_node.sock";
96 railsSocket = "${socketsDir}/live_immae_puma.sock";