73 lines
1.5 KiB
Nix
73 lines
1.5 KiB
Nix
{ config, pkgs, ... }:
|
|
|
|
{
|
|
imports = [
|
|
./owncast-archiver.nix
|
|
];
|
|
|
|
c3d2 = {
|
|
deployment.server = "server10";
|
|
hq.statistics.enable = true;
|
|
};
|
|
|
|
# deployment = {
|
|
# vcpu = 8;
|
|
# mem = 2048;
|
|
# persistedShares = [ "/etc" "/home" "/var" ];
|
|
# };
|
|
|
|
networking.hostName = "owncast";
|
|
|
|
services = {
|
|
backup = {
|
|
enable = true;
|
|
paths = [ "/var/lib/owncast/" ];
|
|
};
|
|
|
|
nginx = {
|
|
enable = true;
|
|
additionalModules = [ pkgs.nginxModules.fancyindex ];
|
|
virtualHosts."owncast.c3d2.de" = {
|
|
default = true;
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
|
|
locations = {
|
|
"/" = {
|
|
proxyPass = "http://127.0.0.1:${toString config.services.owncast.port}";
|
|
proxyWebsockets = true;
|
|
};
|
|
"/archive".return = "307 /archive/";
|
|
"/archive/" = {
|
|
alias = "${config.services.owncast-archiver.targetDir}/";
|
|
extraConfig = ''
|
|
fancyindex on;
|
|
fancyindex_exact_size off;
|
|
'';
|
|
};
|
|
};
|
|
};
|
|
};
|
|
owncast = {
|
|
enable = true;
|
|
openFirewall = true;
|
|
};
|
|
};
|
|
|
|
sops = {
|
|
defaultSopsFile = ./secrets.yaml;
|
|
secrets = {
|
|
"restic/password".owner = "root";
|
|
"restic/repositories/server8".owner = "root";
|
|
};
|
|
};
|
|
|
|
systemd.services.nginx.serviceConfig.ReadWritePaths = [
|
|
config.services.owncast-archiver.targetDir
|
|
];
|
|
|
|
services.owncast-archiver.enable = true;
|
|
|
|
system.stateVersion = "23.05";
|
|
}
|