};
config = lib.mkIf cfg.enable {
- services.duplyBackup.profiles.peertube = {
- rootDir = pcfg.dataDir;
- };
services.peertube = {
enable = true;
- configFile = "/var/secrets/webapps/tools-peertube";
+ configFile = config.secrets.fullPaths."webapps/tools-peertube";
};
users.users.peertube.extraGroups = [ "keys" ];
- secrets.keys = [{
- dest = "webapps/tools-peertube";
+ secrets.keys."webapps/tools-peertube" = {
user = "peertube";
group = "peertube";
permissions = "0640";
socket: '${env.redis.socket}'
auth: null
db: ${env.redis.db}
- auth:
- local:
- enabled: true
- ldap:
- enabled: true
- ldap_only: false
- url: ldaps://${env.ldap.host}/${env.ldap.base}
- bind_dn: ${env.ldap.dn}
- bind_password: ${env.ldap.password}
- base: ${env.ldap.base}
- mail_entry: "mail"
- user_filter: "${env.ldap.filter}"
smtp:
transport: sendmail
sendmail: '/run/wrappers/bin/sendmail'
plugins: '${pcfg.dataDir}/storage/plugins/'
client_overrides: '${pcfg.dataDir}/storage/client-overrides/'
'';
- }];
+ };
services.websites.env.tools.modules = [
"headers" "proxy" "proxy_http" "proxy_wstunnel"