feat(compute01): Deploy pretalx

machines/nixos/compute01/_configuration.nix

@@ -30,6 +30,7 @@ lib.extra.mkConfig {
     "outline"
     "plausible"
     "postgresql"
+    "pretalx"
     "pretix"
     "rstudio-server"
     # "satosa"

machines/nixos/compute01/pretalx.nix

@@ -0,0 +1,52 @@
+# SPDX-FileCopyrightText: 2024 Tom Hubrecht <tom.hubrecht@dgnum.eu>
+#
+# SPDX-License-Identifier: EUPL-1.2
+
+{ config, ... }:
+
+{
+  services.nginx.virtualHosts.${config.services.pretalx.nginx.domain} = {
+    enableACME = true;
+    forceSSL = true;
+  };
+
+  services.pretalx = {
+    enable = true;
+
+    plugins = with config.services.pretalx.package.plugins; [
+      pages
+      venueless
+    ];
+
+    nginx = {
+      enable = true;
+      domain = "pretalx.dgnum.eu";
+    };
+
+    environmentFile = config.age.secrets."pretalx-environment_file".path;
+
+    settings = {
+      files.upload_limit = 50;
+
+      mail = {
+        from = "pretalx@infra.dgnum.eu";
+        host = "kurisu.lahfa.xyz";
+        port = 465;
+        ssl = true;
+        user = "web-services@infra.dgnum.eu";
+      };
+
+      logging.email = "admins+pretalx@dgnum.eu";
+
+      locale = {
+        language_code = "fr";
+        time_zone = "Europe/Paris";
+      };
+    };
+  };
+
+  dgn-backups = {
+    postgresDatabases = [ "pretalx" ];
+    jobs.pretix.settings.paths = [ "/var/lib/pretalx" ];
+  };
+}

machines/nixos/compute01/secrets/pretalx-environment_file

@@ -0,0 +1,30 @@
+age-encryption.org/v1
+-> ssh-ed25519 jIXfPA nxmUrwL0YLjmyml8KcWZ6dWwV5O6w2Dlg7uqb+eSYBY
+BgVWB3Z3wJ9E68kmDbf4/NrmsZGR/goS2Kfx/nc49Vs
+-> ssh-ed25519 QlRB9Q VB75tVIpYDO9Ta0MRsfuP24TAjbyT6OWEN0SjVkGVnA
+oDn5Yal9NY2ce0p4jf0+ceBM14aF9+62J3Ich00bn60
+-> ssh-ed25519 r+nK/Q ejM5Jc8o01aaFO55KL8O2IBf6XSb84zvirAUWyWI0Ck
+UXPxGsxI+vZHPsSWirv9GTa/Etwh3GXlOxAHrBMiRZQ
+-> ssh-rsa krWCLQ
+noF/XAAr5oXO3yxHgoKlPuFSiexCG508JCHrvUK0Pkw71KASEcEAfEHb+rZTi6yA
+vtRIoU6MnAG4RaDkilp2Cz4LDfx8JvT3ucmy///0UhwUwC8keeR7r/EIGPdB3Fyc
+FyyhC0KflA0kmWsOR9EZi2YYAHRTPUMzXYdSdIGc/82WMVGEizTck8CH10GV2Bxl
+SyiaJFk//q4fZZwyYUyaSVFjMwrjU1bbAipmB24SLLCLp1J+Xxq/OX83Mctjqutl
+LlNC10GdvM1JoPFFxy9Chk63WHZXp745D5JppWKJ8FuUs89WpCspzYNgqRgyBoQA
+wNlUgSD1p815tuCDs1+wlg
+-> ssh-ed25519 /vwQcQ StDx98vbjAGhJu1o74uVBC6DhuqaZZjxIEPyyCS44Wo
+CxNrC8Pdi9HMF0atPNQutowQG60DSyWhXA3n/vOS+HA
+-> ssh-ed25519 0R97PA BfmW5ljTVp+tUs32lAMnSBz2q5jMSgwgza3pfS3L404
+GibEScHuYz0b7kt+EQRXhiY01IfZzBhmMMJ7JxstWNo
+-> ssh-ed25519 JGx7Ng hCbmKD+QH6SlFmFMM61Xv2Y8TjNZJyCYhhtFmjYQUEM
+J8CLfOvhJeSdN2W8NQsIbfA1li6V4IzZc43Rq+yNuHc
+-> ssh-ed25519 bUjjig jFfhHzfqTzuuN4IszblOGe7WFMxfFa5GvUbQ5TgWNmI
+FU6hJSW0AT5FG49oQzN7c0dDsmgbhOYLAEz4YeAus6o
+-> ssh-ed25519 tDqJRg 8DMYhpgIDvTQ+IshJCKvgFiY8J4qdVVA7nGRRc+clSA
+EfRYOKCE6zv6BqbDyN4p6QdfN5Y+2GPie2tLqISbsSQ
+-> {7;qZH-grease b'%
+/q1kVYwytu14uIpZOi643OuIU7M3xNYoe2IPCVeH7A7lsAfhEuCbUOSwVGb1yvvP
+Zuz3ZUD4ubs7a4By3LmbfYgTak2iHUMd7YCMOcWgwRJb
+--- GrGJW7DhRg2lMfi+2fs81QGOIwUVuJkLuCzynlGtvUc
+Ì©Û¼šÙô].r·@…ªÚ+ÔÅutb)ßÍÈõ^¿²É½*ñ‡;/†ˆÎçSôóš->dÚÆ™ô›šY§û¯‡ukÿ{‘œôñªsž<>±<EFBFBD>/» VÊŠ
+H¹o.

machines/nixos/compute01/secrets/secrets.nix

@@ -30,6 +30,7 @@
     "plausible-admin_user_password_file"
     "plausible-secret_key_base_file"
     "plausible-smtp_password_file"
+    "pretalx-environment_file"
     "pretix-environment_file"
     "satosa-env_file"
     "signal-irc-bridge-config"