1 { lib, pkgs, config, mylibs, ... }:
3 mediagoblin = pkgs.callPackage ./mediagoblin.nix {
4 inherit (mylibs) checkEnv fetchedGit fetchedGithub;
7 cfg = config.services.myWebsites.tools.mediagoblin;
9 options.services.myWebsites.tools.mediagoblin = {
10 enable = lib.mkEnableOption "enable mediagoblin's website";
13 config = lib.mkIf cfg.enable {
14 ids.uids.mediagoblin = 397;
15 ids.gids.mediagoblin = 397;
17 users.users.mediagoblin = {
19 uid = config.ids.uids.mediagoblin;
20 group = "mediagoblin";
21 description = "Mediagoblin user";
22 home = mediagoblin.varDir;
23 useDefaultShell = true;
26 users.groups.mediagoblin.gid = config.ids.gids.mediagoblin;
28 systemd.services.mediagoblin-web = {
29 description = "Mediagoblin service";
30 wantedBy = [ "multi-user.target" ];
31 after = [ "network.target" ];
33 environment.SCRIPT_NAME = "/mediagoblin/";
36 exec ./bin/paster serve \
37 ${mediagoblin.pythonRoot}/paste_local.ini \
38 --pid-file=${mediagoblin.socketsDir}/mediagoblin.pid
42 exec ./bin/paster serve \
43 --pid-file=${mediagoblin.socketsDir}/mediagoblin.pid \
44 ${mediagoblin.pythonRoot}/paste_local.ini stop
56 WorkingDirectory = mediagoblin.pythonRoot;
57 PIDFile = "${mediagoblin.socketsDir}/mediagoblin.pid";
60 unitConfig.RequiresMountsFor = mediagoblin.varDir;
63 systemd.services.mediagoblin-celeryd = {
64 description = "Mediagoblin service";
65 wantedBy = [ "multi-user.target" ];
66 after = [ "network.target" "mediagoblin-web.service" ];
68 environment.MEDIAGOBLIN_CONFIG = "${mediagoblin.pythonRoot}/mediagoblin_local.ini";
69 environment.CELERY_CONFIG_MODULE = "mediagoblin.init.celery.from_celery";
72 exec ./bin/celery worker \
73 --logfile=${mediagoblin.varDir}/celery.log \
83 WorkingDirectory = mediagoblin.pythonRoot;
84 PIDFile = "${mediagoblin.socketsDir}/mediagoblin-celeryd.pid";
87 unitConfig.RequiresMountsFor = mediagoblin.varDir;
90 system.activationScripts.mediagoblin = {
93 install -m 0755 -o mediagoblin -g mediagoblin -d ${mediagoblin.socketsDir}
94 install -m 0755 -o mediagoblin -g mediagoblin -d ${mediagoblin.varDir}
95 if [ -d ${mediagoblin.varDir}/plugin_static/ ]; then
96 rm ${mediagoblin.varDir}/plugin_static/coreplugin_basic_auth
97 ln -sf ${mediagoblin.pythonRoot}/mediagoblin/plugins/basic_auth/static ${mediagoblin.varDir}/plugin_static/coreplugin_basic_auth
102 services.myWebsites.tools.modules = [
103 "proxy" "proxy_http" "proxy_balancer"
104 "lbmethod_byrequests" "lbmethod_bytraffic" "lbmethod_bybusyness" "lbmethod_heartbeat"
106 users.users.wwwrun.extraGroups = [ "mediagoblin" ];
107 security.acme.certs."eldiron".extraDomains."mgoblin.immae.eu" = null;
108 services.myWebsites.tools.vhostConfs.mgoblin = {
109 certName = "eldiron";
110 hosts = ["mgoblin.immae.eu" ];
113 Alias /mgoblin_media ${mediagoblin.varDir}/media/public
114 <Directory ${mediagoblin.varDir}/media/public>
115 Options -Indexes +FollowSymLinks +MultiViews +Includes
119 Alias /theme_static ${mediagoblin.varDir}/theme_static
120 <Directory ${mediagoblin.varDir}/theme_static>
121 Options -Indexes +FollowSymLinks +MultiViews +Includes
125 Alias /plugin_static ${mediagoblin.varDir}/plugin_static
126 <Directory ${mediagoblin.varDir}/plugin_static>
127 Options -Indexes +FollowSymLinks +MultiViews +Includes
134 ProxyPass /mgoblin_media !
135 ProxyPass /theme_static !
136 ProxyPass /plugin_static !
137 ProxyPassMatch ^/.well-known/acme-challenge !
138 ProxyPass / balancer://paster_server/
139 ProxyPassReverse / balancer://paster_server
140 <Proxy balancer://paster_server>
141 BalancerMember unix://${mediagoblin.socketsDir}/mediagoblin.sock|http://