diff --git a/flake.nix b/flake.nix index d62878a7..8c43cccd 100644 --- a/flake.nix +++ b/flake.nix @@ -667,6 +667,13 @@ system = "riscv64-linux"; }; + direkthilfe = nixosSystem' { + modules = [ + self.nixosModules.microvm + ./hosts/containers/direkthilfe + ]; + }; + }; nixosModule = self.nixosModules.c3d2; diff --git a/hosts/containers/direkthilfe/default.nix b/hosts/containers/direkthilfe/default.nix new file mode 100644 index 00000000..d1e827b3 --- /dev/null +++ b/hosts/containers/direkthilfe/default.nix @@ -0,0 +1,88 @@ +{ pkgs, ... }: +let + domain = "direkthilfe.c3d2.de"; +in { + networking.hostName = "direkthilfe"; + microvm.mem = 1024; + c3d2.deployment = { + server = "server10"; + mounts = [ "etc" "home" "var"]; + }; + + networking.firewall.allowedTCPPorts = [ 22 80 443 ]; + services.openssh.enable = true; + services.openssh.extraConfig = '' + Match Group sftponly + # ChrootDirectory /home/%u + ForceCommand internal-sftp + AllowTcpForwarding no + ''; + users.groups.sftponly = {}; + users.users.hilfe = { + isNormalUser = true; + group = "users"; + extraGroups = [ "sftponly" ]; + }; + environment.systemPackages = with pkgs; [ vim git ]; + + services.engelsystem = { + enable = true; + domain = domain; + createDatabase = true; + package = pkgs.engelsystem.override { php = pkgs.php74; }; + config = { + database = { + host = "localhost"; + database = "engelsystem"; + username = "engelsystem"; + }; + timezone = "Europe/Berlin"; + signup_requires_arrival = true; + autoarrive = true; + signup_advance_hours = 0; + last_unsubscribe = 24; + enable_dect = false; + enable_planned_arrival = false; + enable_tshirt_size = false; + enable_goody = false; + max_freeloadable_shifts = 20; + night_shifts.enabled = false; + default_locale = "de_DE"; + footer_items.Contact = "mailto:direkthilfe@notraces.net"; + footer_items.FAQ = "https://www.c3d2.de/kontakt.html"; + email = { + driver = "smtp"; + from.address = "mail@c3d2.de"; + from.name = "Engelsystem"; + host = "mail.c3d2.de"; + port = 587; + tls = true; + #sendmail = "${pkgs.ssmtp}/bin/sendmail -bs"; + }; + }; + }; + services.phpfpm.phpPackage = pkgs.php74; + services.nginx = { + enable = true; + recommendedProxySettings = true; + virtualHosts."${domain}" = { + default = true; + forceSSL = true; + enableACME = true; + }; + }; + + # services.ssmtp = { + # enable = true; + # root = "mail@c3d2.de"; + # useTLS = true; + # useSTARTTLS = true; + # hostName = "mail.c3d2.de:587"; + # domain = "direkthilfe.c3d2.de"; + # settings = { + # hostname = "direkthilfe.serv.zentralwerk.org"; + # }; + # }; + + system.stateVersion = "21.11"; +}