helm/hosts/profiles/wallabag/default.nix

92 lines
2.7 KiB
Nix
Raw Normal View History

2022-12-19 21:51:11 -08:00
{ self, pkgs, config, lib, ... }:
2022-09-18 15:13:50 -07:00
{
2022-12-19 21:51:11 -08:00
# age.secrets.wallabag-password.file = "${self}/secrets/wallabag-password.age";
# age.secrets.wallabag-secret.file = "${self}/secrets/wallabag-secret.age";
# age.secrets.wallabag-password.owner = "wallabag";
# age.secrets.wallabag-secret.owner = "wallabag";
2022-09-18 15:13:50 -07:00
services.postgresql = {
enable = true;
2024-01-11 21:56:55 -08:00
package = pkgs.postgresql_15;
2022-09-18 15:13:50 -07:00
# Ensure the database, user, and permissions always exist
ensureDatabases = [ "wallabag" ];
ensureUsers = [
{
name = "wallabag";
2024-01-11 21:56:55 -08:00
# ensureDBOwnership = true;
2022-09-18 15:13:50 -07:00
}
];
2024-01-11 21:56:55 -08:00
authentication = ''
local wallabag all md5
'';
2022-09-18 15:13:50 -07:00
};
services.wallabag = {
enable = true;
hostName = "read.mossnet.lan";
2024-03-15 23:25:49 -07:00
package = pkgs.my-wallabag;
dataDir = "/var/lib/wallabag";
2022-09-18 15:13:50 -07:00
conf = ''
# This file is a "template" of what your parameters.yml file should look like
parameters:
database_driver: pdo_pgsql
database_host: localhost
database_port: ~
database_name: wallabag
database_user: wallabag
2022-12-19 21:51:11 -08:00
database_password: wallabag
2022-09-18 15:13:50 -07:00
# For SQLite, database_path should be "%kernel.project_dir%/data/db/wallabag.sqlite"
database_path: ~
database_table_prefix: wallabag_
database_socket: null
# with PostgreSQL and SQLite, you must set "utf8"
database_charset: utf8
2024-03-15 23:25:49 -07:00
domain_name: http://read.mossnet.lan
2022-09-18 15:13:50 -07:00
server_name: "mossnet wallabag instance"
2024-01-11 21:56:55 -08:00
mailer_dsn: null://
2022-09-18 15:13:50 -07:00
locale: en
# A secret key that's used to generate certain security-related tokens
2022-12-19 21:51:11 -08:00
secret: SAFGOECRIlfal89oe6u0(*^dsaaih961
2022-09-18 15:13:50 -07:00
# two factor stuff
2024-01-11 21:56:55 -08:00
twofactor_auth: false
2022-09-18 15:13:50 -07:00
twofactor_sender: no-reply@wallabag.org
# fosuser stuff
2024-01-11 21:56:55 -08:00
fosuser_registration: false
2022-09-18 15:13:50 -07:00
fosuser_confirmation: true
# how long the access token should live in seconds for the API
fos_oauth_server_access_token_lifetime: 3600
# how long the refresh token should life in seconds for the API
fos_oauth_server_refresh_token_lifetime: 1209600
2022-12-13 04:30:53 -08:00
from_email: ops@sealight.xyz
2022-09-18 15:13:50 -07:00
rss_limit: 50
# RabbitMQ processing
rabbitmq_host: localhost
rabbitmq_port: 5672
rabbitmq_user: guest
rabbitmq_password: guest
rabbitmq_prefetch_count: 10
# Redis processing
redis_scheme: tcp
redis_host: localhost
redis_port: 6379
redis_path: null
redis_password: null
# sentry logging
sentry_dsn: ~
'';
};
# networking.firewall.allowedTCPPorts = [ 8080 ];
}