102 lines
3 KiB
Nix
102 lines
3 KiB
Nix
{ pkgs, config, lib, ... }:
|
|
|
|
let
|
|
wallabag-password = builtins.readFile "/run/agenix/wallabag_password";
|
|
wallabag-secret = builtins.readFile "/run/agenix/wallabag_secret";
|
|
in
|
|
{
|
|
age.secrets.wallabag-password.file = "/run/agenix/wallabag_password";
|
|
age.secrets.wallabag-password.owner = "wallabag";
|
|
age.secrets.wallabag-secret.file = "/run/agenix/wallabag_secret";
|
|
age.secrets.wallabag-secret.owner = "wallabag";
|
|
|
|
services.postgresql = {
|
|
enable = true;
|
|
package = pkgs.postgresql_11;
|
|
|
|
# Ensure the database, user, and permissions always exist
|
|
ensureDatabases = [ "wallabag" ];
|
|
ensureUsers = [
|
|
{
|
|
name = "wallabag";
|
|
ensurePermissions."DATABASE wallabag" = "ALL PRIVILEGES";
|
|
}
|
|
];
|
|
};
|
|
|
|
services.wallabag = {
|
|
enable = true;
|
|
hostName = "read.mossnet.lan";
|
|
package = pkgs.wallabag;
|
|
conf = ''
|
|
# This file is a "template" of what your parameters.yml file should look like
|
|
parameters:
|
|
database_driver: pdo_pgsql
|
|
database_host: localhost
|
|
database_port: ~
|
|
database_name: wallabag
|
|
database_user: wallabag
|
|
# TODO agenix
|
|
database_password: ${wallabag-password}
|
|
# For SQLite, database_path should be "%kernel.project_dir%/data/db/wallabag.sqlite"
|
|
database_path: ~
|
|
database_table_prefix: wallabag_
|
|
database_socket: null
|
|
# with PostgreSQL and SQLite, you must set "utf8"
|
|
database_charset: utf8
|
|
|
|
domain_name: http://read.mossnet.lan
|
|
server_name: "mossnet wallabag instance"
|
|
|
|
mailer_transport: smtp
|
|
mailer_user: ~
|
|
mailer_password: ~
|
|
mailer_host: 127.0.0.1
|
|
mailer_port: false
|
|
mailer_encryption: ~
|
|
mailer_auth_mode: ~
|
|
|
|
locale: en
|
|
|
|
# A secret key that's used to generate certain security-related tokens
|
|
# TODO agenix
|
|
secret: ${wallabag-secret} SAFGOECRIlfal89oe6u0(*^dsaaih961
|
|
|
|
# two factor stuff
|
|
twofactor_auth: true
|
|
twofactor_sender: no-reply@wallabag.org
|
|
|
|
# fosuser stuff
|
|
fosuser_registration: true
|
|
fosuser_confirmation: true
|
|
|
|
# how long the access token should live in seconds for the API
|
|
fos_oauth_server_access_token_lifetime: 3600
|
|
# how long the refresh token should life in seconds for the API
|
|
fos_oauth_server_refresh_token_lifetime: 1209600
|
|
|
|
from_email: ops@sealight.xyz
|
|
|
|
rss_limit: 50
|
|
|
|
# RabbitMQ processing
|
|
rabbitmq_host: localhost
|
|
rabbitmq_port: 5672
|
|
rabbitmq_user: guest
|
|
rabbitmq_password: guest
|
|
rabbitmq_prefetch_count: 10
|
|
|
|
# Redis processing
|
|
redis_scheme: tcp
|
|
redis_host: localhost
|
|
redis_port: 6379
|
|
redis_path: null
|
|
redis_password: null
|
|
|
|
# sentry logging
|
|
sentry_dsn: ~
|
|
'';
|
|
};
|
|
# networking.firewall.allowedTCPPorts = [ 8080 ];
|
|
}
|