feat(matterbridge): Update settings

machines/compute01/nextcloud.nix

@@ -78,21 +78,22 @@ in {
   };
 
   systemd.services.nextcloud-preview = {
-    script = "nextcloud-occ preview:pre-generate -vvv";
+    script = "${config.services.nextcloud.occ} preview:pre-generate -vvv";
     startAt = "*-*-* 01:00:00 UTC";
   };
 
   services.nginx.virtualHosts.${host} = {
     enableACME = true;
     forceSSL = true;
+
+    extraConfig = ''
+      proxy_max_temp_file_size 4096m;
+    '';
   };
 
   environment.systemPackages = with pkgs; [
     ffmpeg_6-headless
-    jpegoptim
-    exif
-    perl
-    perlPackages.ImageExifTool
+    exiftool
   ];
 
   dgn-secrets.matches."^nextcloud-.*$" = { owner = "nextcloud"; };

machines/storage01/garage.nix

@@ -13,7 +13,15 @@ in {
   services.garage = {
     enable = true;
 
-    package = pkgs.garage_0_9;
+    package = pkgs.garage_0_9.overrideAttrs (old: {
+      patches = (old.patches or [ ]) ++ [
+        # Allow 0 as a part number marker
+        (pkgs.fetchpatch {
+          url = "https://git.deuxfleurs.fr/Deuxfleurs/garage/pulls/670.patch";
+          hash = "sha256-28ctLl1qscMRj2JEVnmhuLyK1Avub8QeyfQFxAK0y08=";
+        })
+      ];
+    });
 
     settings = {
       inherit data_dir metadata_dir;
@@ -70,7 +78,7 @@ in {
         proxy_set_header Host $host;
         # Disable buffering to a temporary file.
         proxy_max_temp_file_size 0;
-        client_max_body_size 200M;
+        client_max_body_size 5G;
       '';
     };
 

machines/storage01/peertube.nix

@@ -39,7 +39,7 @@ in {
 
       email.subject.prefix = "[videos.dgnum]";
 
-      webadmin.configuration.edition.allowed = false;
+      webadmin.configuration.edition.allowed = true;
 
       user.video_quota = "10GB";
     };

machines/web01/_configuration.nix

@@ -11,6 +11,7 @@ lib.extra.mkConfig {
     "castopod"
     "metis"
     "linkal"
+    "matterbridge"
     "ntfy-sh"
     "plausible"
     "wordpress"

machines/web01/matterbridge.nix

@@ -0,0 +1,10 @@
+{ config, ... }:
+
+{
+  services.matterbridge = {
+    enable = true;
+    configPath = config.age.secrets."matterbridge-config_file".path;
+  };
+
+  dgn-secrets.matches."^matterbridge-.*$" = { owner = "matterbridge"; };
+}

machines/web01/secrets/secrets.nix

@@ -3,6 +3,7 @@ let
   publicKeys = lib.getNodeKeys "web01";
 in lib.setDefault { inherit publicKeys; } [
   "acme-certs_secret"
+  "matterbridge-config_file"
   "named-bind_dnskeys_conf"
   "ntfy_sh-environment_file"
   "plausible_admin-user-password-file"

npins/sources.json

@@ -105,8 +105,8 @@
     "nixos-23.11": {
       "type": "Channel",
       "name": "nixos-23.11",
-      "url": "https://releases.nixos.org/nixos/23.11/nixos-23.11.750.7c4c20509c43/nixexprs.tar.xz",
-      "hash": "1gla4s4jmzyhxkp60d8vak5ia87ry89bc8s4mrirasd46lj8wqc6"
+      "url": "https://releases.nixos.org/nixos/23.11/nixos-23.11.1494.b4372c4924d9/nixexprs.tar.xz",
+      "hash": "0bisbm1081zyhicnc3hjmc04gq99lb60m1h4wpxb2jbmxmq1c3gz"
     },
     "nixos-python": {
       "type": "Git",

patches/default.nix

@@ -1,7 +1,5 @@
 {
   "nixos-23.11" = [
-    # [Backport release-23.11] zfs_2_1: init at 2.1.13
-    { id = 270117; hash = "sha256-In3sogw/8TGYQQFCeBvdljANR0ZLng4magQ/4uyVy1A="; }
     { id = 241542; revert = true; hash = "sha256-uiRokmJewTLURuQkPWRfb3jgxjaDwfkXntj8PWk6pi8="; }
 
     # castopod: 1.6.4 -> 1.7.0 + ajout du support de loadcredentials