diff options
Diffstat (limited to 'nixops/modules/websites/tools/mediagoblin/mediagoblin.nix')
-rw-r--r-- | nixops/modules/websites/tools/mediagoblin/mediagoblin.nix | 98 |
1 files changed, 52 insertions, 46 deletions
diff --git a/nixops/modules/websites/tools/mediagoblin/mediagoblin.nix b/nixops/modules/websites/tools/mediagoblin/mediagoblin.nix index e1876ae..23ee24d 100644 --- a/nixops/modules/websites/tools/mediagoblin/mediagoblin.nix +++ b/nixops/modules/websites/tools/mediagoblin/mediagoblin.nix | |||
@@ -190,61 +190,67 @@ in | |||
190 | url_scheme = https | 190 | url_scheme = https |
191 | ''; | 191 | ''; |
192 | 192 | ||
193 | mediagoblin_local = writeText "mediagoblin_local.ini" '' | 193 | keys.tools-mediagoblin = { |
194 | [DEFAULT] | 194 | destDir = "/run/keys/webapps"; |
195 | data_basedir = "${varDir}" | 195 | user = "mediagoblin"; |
196 | group = "mediagoblin"; | ||
197 | permissions = "0400"; | ||
198 | text = '' | ||
199 | [DEFAULT] | ||
200 | data_basedir = "${varDir}" | ||
196 | 201 | ||
197 | [mediagoblin] | 202 | [mediagoblin] |
198 | direct_remote_path = /mgoblin_static/ | 203 | direct_remote_path = /mgoblin_static/ |
199 | email_sender_address = "mediagoblin@tools.immae.eu" | 204 | email_sender_address = "mediagoblin@tools.immae.eu" |
200 | 205 | ||
201 | #sql_engine = sqlite:///%(data_basedir)s/mediagoblin.db | 206 | #sql_engine = sqlite:///%(data_basedir)s/mediagoblin.db |
202 | sql_engine = ${env.psql_url} | 207 | sql_engine = ${env.psql_url} |
203 | 208 | ||
204 | email_debug_mode = false | 209 | email_debug_mode = false |
205 | allow_registration = false | 210 | allow_registration = false |
206 | allow_reporting = true | 211 | allow_reporting = true |
207 | 212 | ||
208 | theme = airymodified | 213 | theme = airymodified |
209 | 214 | ||
210 | user_privilege_scheme = "uploader,commenter,reporter" | 215 | user_privilege_scheme = "uploader,commenter,reporter" |
211 | 216 | ||
212 | # We need to redefine them here since we override data_basedir | 217 | # We need to redefine them here since we override data_basedir |
213 | # cf /usr/share/webapps/mediagoblin/mediagoblin/config_spec.ini | 218 | # cf /usr/share/webapps/mediagoblin/mediagoblin/config_spec.ini |
214 | workbench_path = %(data_basedir)s/media/workbench | 219 | workbench_path = %(data_basedir)s/media/workbench |
215 | crypto_path = %(data_basedir)s/crypto | 220 | crypto_path = %(data_basedir)s/crypto |
216 | theme_install_dir = %(data_basedir)s/themes/ | 221 | theme_install_dir = %(data_basedir)s/themes/ |
217 | theme_linked_assets_dir = %(data_basedir)s/theme_static/ | 222 | theme_linked_assets_dir = %(data_basedir)s/theme_static/ |
218 | plugin_linked_assets_dir = %(data_basedir)s/plugin_static/ | 223 | plugin_linked_assets_dir = %(data_basedir)s/plugin_static/ |
219 | 224 | ||
220 | [storage:queuestore] | 225 | [storage:queuestore] |
221 | base_dir = %(data_basedir)s/media/queue | 226 | base_dir = %(data_basedir)s/media/queue |
222 | 227 | ||
223 | [storage:publicstore] | 228 | [storage:publicstore] |
224 | base_dir = %(data_basedir)s/media/public | 229 | base_dir = %(data_basedir)s/media/public |
225 | base_url = /mgoblin_media/ | 230 | base_url = /mgoblin_media/ |
226 | 231 | ||
227 | [celery] | 232 | [celery] |
228 | CELERY_RESULT_DBURI = ${env.redis_url} | 233 | CELERY_RESULT_DBURI = ${env.redis_url} |
229 | BROKER_URL = ${env.redis_url} | 234 | BROKER_URL = ${env.redis_url} |
230 | CELERYD_CONCURRENCY = 1 | 235 | CELERYD_CONCURRENCY = 1 |
231 | 236 | ||
232 | [plugins] | 237 | [plugins] |
233 | [[mediagoblin.plugins.geolocation]] | 238 | [[mediagoblin.plugins.geolocation]] |
234 | [[mediagoblin.plugins.ldap]] | 239 | [[mediagoblin.plugins.ldap]] |
235 | [[[immae.eu]]] | 240 | [[[immae.eu]]] |
236 | LDAP_SERVER_URI = 'ldaps://ldap.immae.eu:636' | 241 | LDAP_SERVER_URI = 'ldaps://ldap.immae.eu:636' |
237 | LDAP_SEARCH_BASE = 'dc=immae,dc=eu' | 242 | LDAP_SEARCH_BASE = 'dc=immae,dc=eu' |
238 | LDAP_BIND_DN = 'cn=mediagoblin,ou=services,dc=immae,dc=eu' | 243 | LDAP_BIND_DN = 'cn=mediagoblin,ou=services,dc=immae,dc=eu' |
239 | LDAP_BIND_PW = '${env.ldap.password}' | 244 | LDAP_BIND_PW = '${env.ldap.password}' |
240 | LDAP_SEARCH_FILTER = '(&(memberOf=cn=users,cn=mediagoblin,ou=services,dc=immae,dc=eu)(uid={username}))' | 245 | LDAP_SEARCH_FILTER = '(&(memberOf=cn=users,cn=mediagoblin,ou=services,dc=immae,dc=eu)(uid={username}))' |
241 | EMAIL_SEARCH_FIELD = 'mail' | 246 | EMAIL_SEARCH_FIELD = 'mail' |
242 | [[mediagoblin.plugins.basicsearch]] | 247 | [[mediagoblin.plugins.basicsearch]] |
243 | [[mediagoblin.plugins.piwigo]] | 248 | [[mediagoblin.plugins.piwigo]] |
244 | [[mediagoblin.plugins.processing_info]] | 249 | [[mediagoblin.plugins.processing_info]] |
245 | [[mediagoblin.media_types.image]] | 250 | [[mediagoblin.media_types.image]] |
246 | [[mediagoblin.media_types.video]] | 251 | [[mediagoblin.media_types.video]] |
247 | ''; | 252 | ''; |
253 | }; | ||
248 | pythonRoot = | 254 | pythonRoot = |
249 | with pkgs.gst_all_1; | 255 | with pkgs.gst_all_1; |
250 | stdenv.mkDerivation { | 256 | stdenv.mkDerivation { |
@@ -281,7 +287,7 @@ in | |||
281 | --prefix GI_TYPELIB_PATH : ${typelib_paths} | 287 | --prefix GI_TYPELIB_PATH : ${typelib_paths} |
282 | find . -type f -exec sed -i "s|$mediagoblin|$out|g" {} \; | 288 | find . -type f -exec sed -i "s|$mediagoblin|$out|g" {} \; |
283 | ln -s ${paste_local} ./paste_local.ini | 289 | ln -s ${paste_local} ./paste_local.ini |
284 | ln -s ${mediagoblin_local} ./mediagoblin_local.ini | 290 | ln -s /run/keys/webapps/tools-mediagoblin ./mediagoblin_local.ini |
285 | ln -sf ${varDir} ./user_dev | 291 | ln -sf ${varDir} ./user_dev |
286 | ''; | 292 | ''; |
287 | }; | 293 | }; |