chayleaf/dotfiles
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

Compare commits

base: chayleaf:4e840ce3b3f9d96744218fbe53ad856d215f16ea
Branches Tags
chayleaf:master
chayleaf:ci
...
compare: chayleaf:891fa83f014efe3d18c39d9e9a76fc2f3ae000cb
Branches Tags
chayleaf:master
chayleaf:ci

2 commits
4e840ce3b3 ... 891fa83f01

Author SHA1 Message Date
chayleaf 891fa83f01 certspotter: switch to using StateDirectory 2023-10-25 04:34:15 +07:00
chayleaf 8948db4dac server/gitea: enable federation, etc 2023-10-25 03:43:39 +07:00
2 changed files with 17 additions and 6 deletions
Show stats Expand all files Collapse all files

14
system/hosts/server/default.nix
View file

@ -228,14 +228,22 @@ in {
type = "postgres"; type = "postgres";
}; };
settings = { settings = {
federation.ENABLED = true;
"git.timeout" = {
DEFAULT = 6000;
MIGRATE = 6000;
MIRROR = 6000;
GC = 120;
};
mailer = { mailer = {
ENABLED = true; ENABLED = true;
FROM = "Forgejo <noreply@${cfg.domainName}>"; FROM = "Forgejo <noreply@${cfg.domainName}>";
MAILER_TYPE = "smtp"; PROTOCOL = "smtp";
HOST = "mail.${cfg.domainName}:587"; SMTP_ADDR = "mail.${cfg.domainName}";
SMTP_PORT = 587;
USER = "noreply@${cfg.domainName}"; USER = "noreply@${cfg.domainName}";
PASSWD = cfg.unhashedNoreplyPassword; PASSWD = cfg.unhashedNoreplyPassword;
SKIP_VERIFY = true; FORCE_TRUST_SERVER_CERT = true;
}; };
session = { session = {
COOKIE_SECURE = true; COOKIE_SECURE = true;

9
system/modules/certspotter.nix
View file

@ -100,13 +100,16 @@ in {
name = "hook${toString i}"; name = "hook${toString i}";
}) cfg.hooks); }) cfg.hooks);
}); });
environment.CERTSPOTTER_STATE_DIR = "/var/lib/certspotter";
serviceConfig = { serviceConfig = {
User = "certspotter"; User = "certspotter";
Group = "certspotter"; Group = "certspotter";
WorkingDirectory = "/var/lib/certspotter"; StateDirectory = "certspotter";
ExecStart = "${pkgs.certspotter}/bin/certspotter -sendmail ${cfg.sendmailPath} ${lib.escapeShellArgs cfg.extraFlags}";
}; };
script = ''
export CERTSPOTTER_STATE_DIR="$STATE_DIR"
cd "$CERTSPOTTER_STATE_DIR"
${pkgs.certspotter}/bin/certspotter -sendmail ${cfg.sendmailPath} ${lib.escapeShellArgs cfg.extraFlags}
'';
}; };
}; };
} }