89 lines
2.5 KiB
Nix
89 lines
2.5 KiB
Nix
{ config, lib, pkgs, ... }:
|
|
with lib;
|
|
let cfg = config.void.server.fedi.akkoma;
|
|
in {
|
|
options.void.server.fedi.akkoma = { enable = mkEnableOption false; };
|
|
|
|
# :(
|
|
config = mkIf cfg.enable {
|
|
security.acme.certs = {
|
|
"social.sako.lol" = {
|
|
credentialsFile = "/srv/secrets/porkbun";
|
|
dnsProvider = "porkbun";
|
|
webroot = null;
|
|
};
|
|
"media.social.sako.lol" = {
|
|
credentialsFile = "/srv/secrets/porkbun";
|
|
dnsProvider = "porkbun";
|
|
webroot = null;
|
|
};
|
|
};
|
|
services = {
|
|
akkoma = {
|
|
enable = true;
|
|
package = pkgs.akkoma;
|
|
extraPackages =
|
|
builtins.attrValues { inherit (pkgs) ffmpeg exiftool imagemagick; };
|
|
frontends = {
|
|
primary = {
|
|
package = pkgs.akkoma-frontends.akkoma-fe;
|
|
name = "akkoma-fe";
|
|
ref = "stable";
|
|
};
|
|
admin = {
|
|
package = pkgs.akkoma-frontends.admin-fe;
|
|
name = "admin-fe";
|
|
ref = "stable";
|
|
};
|
|
};
|
|
|
|
nginx = {
|
|
enableACME = true;
|
|
forceSSL = true;
|
|
# recommendedTlsSettings = true;
|
|
# recommendedOptimisation = true;
|
|
# recommendedGzipSettings = true;
|
|
};
|
|
|
|
config = {
|
|
":pleroma" = {
|
|
":instance" = {
|
|
name = "v0id";
|
|
description = "Good ass fediverse instance";
|
|
email = "sako@sako.lol";
|
|
registration_open = false;
|
|
invites_enabled = true;
|
|
account_activation_required = false;
|
|
cleanup_attachments = true;
|
|
allow_relay = true;
|
|
};
|
|
":media_proxy" = {
|
|
enabled = false;
|
|
base_url = "media.social.sako.lol";
|
|
};
|
|
"Pleroma.Web.Endpoint" = { url.host = "social.sako.lol"; };
|
|
"Pleroma.Upload" = {
|
|
base_url = "https://media.social.sako.lol";
|
|
filters = map (pkgs.formats.elixirConf { }).lib.mkRaw [
|
|
"Pleroma.Upload.Filter.Exiftool.StripMetadata"
|
|
"Pleroma.Upload.Filter.Dedupe"
|
|
"Pleroma.Upload.Filter.AnonymizeFilename"
|
|
];
|
|
};
|
|
};
|
|
};
|
|
};
|
|
nginx.virtualHosts = {
|
|
"media.social.sako.lol" = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
locations."/" = {
|
|
proxyPass = "http://unix:/run/akkoma/socket";
|
|
};
|
|
};
|
|
};
|
|
;
|
|
};
|
|
};
|
|
}
|