chayleaf
0cc3ec10b3
email and manual activation cant coexist (plus i didnt configure email activation)
78 lines
2.3 KiB
Nix
78 lines
2.3 KiB
Nix
{ config
|
|
, pkgs
|
|
, ... }:
|
|
|
|
let
|
|
cfg = config.server;
|
|
in {
|
|
# TODO: remove this in 2024
|
|
services.nginx.virtualHosts."pleroma.${cfg.domainName}" = {
|
|
quic = true;
|
|
enableACME = true;
|
|
addSSL = true;
|
|
serverAliases = [ "akkoma.${cfg.domainName}" ];
|
|
locations."/".return = "301 https://fedi.${cfg.domainName}$request_uri";
|
|
};
|
|
|
|
services.postgresql.extraPlugins = with config.services.postgresql.package.pkgs; [ tsja ];
|
|
|
|
services.akkoma = {
|
|
enable = true;
|
|
dist.extraFlags = [
|
|
"+sbwt" "none"
|
|
"+sbwtdcpu" "none"
|
|
"+sbwtdio" "none"
|
|
];
|
|
config.":pleroma"."Pleroma.Web.Endpoint" = {
|
|
url = {
|
|
scheme = "https";
|
|
host = "fedi.${cfg.domainName}";
|
|
port = 443;
|
|
};
|
|
secret_key_base._secret = "/secrets/akkoma/secret_key_base";
|
|
signing_salt._secret = "/secrets/akkoma/signing_salt";
|
|
live_view.signing_salt._secret = "/secrets/akkoma/live_view_signing_salt";
|
|
};
|
|
initDb = {
|
|
enable = false;
|
|
username = "akkoma";
|
|
password._secret = "/secrets/akkoma/postgres_password";
|
|
};
|
|
config.":pleroma".":instance" = {
|
|
name = cfg.domainName;
|
|
description = "Insert instance description here";
|
|
email = "webmaster-akkoma@${cfg.domainName}";
|
|
notify_email = "noreply@${cfg.domainName}";
|
|
limit = 5000;
|
|
registrations_open = true;
|
|
account_approval_required = true;
|
|
};
|
|
config.":pleroma"."Pleroma.Repo" = {
|
|
adapter = (pkgs.formats.elixirConf { }).lib.mkRaw "Ecto.Adapters.Postgres";
|
|
username = "akkoma";
|
|
password._secret = "/secrets/akkoma/postgres_password";
|
|
database = "akkoma";
|
|
hostname = "localhost";
|
|
};
|
|
config.":web_push_encryption".":vapid_details" = {
|
|
subject = "mailto:webmaster-akkoma@${cfg.domainName}";
|
|
public_key._secret = "/secrets/akkoma/push_public_key";
|
|
private_key._secret = "/secrets/akkoma/push_private_key";
|
|
};
|
|
config.":joken".":default_signer"._secret = "/secrets/akkoma/joken_signer";
|
|
nginx = {
|
|
quic = true;
|
|
enableACME = true;
|
|
forceSSL = true;
|
|
};
|
|
};
|
|
systemd.services.akkoma = {
|
|
path = [ pkgs.exiftool pkgs.gawk ];
|
|
serviceConfig.Restart = "on-failure";
|
|
unitConfig = {
|
|
StartLimitIntervalSec = 60;
|
|
StartLimitBurst = 3;
|
|
};
|
|
};
|
|
}
|