machines/compute01/_configuration.nix

@@ -10,7 +10,6 @@ lib.extra.mkConfig {
   enabledServices = [
     # List of services to enable
     "ds-fr"
-    "hedgedoc"
     "kanidm"
     "mastodon"
     "nextcloud"

machines/compute01/hedgedoc.nix

@@ -1,51 +0,0 @@
-{ config, lib, ... }:
-
-let
-  host = "pads.dgnum.eu";
-  port = 3007;
-in {
-  services = {
-    hedgedoc = {
-      enable = true;
-
-      environmentFile = config.age.secrets."hedgedoc-environment_file".path;
-
-      settings = {
-        inherit port;
-
-        domain = host;
-        host = "127.0.0.1";
-        allowOrigin = [ host ];
-
-        db = {
-          dialect = "postgres";
-          host = "/run/postgresql";
-        };
-      };
-    };
-
-    nginx.virtualHosts.${host} = {
-      forceSSL = true;
-      enableACME = true;
-
-      locations."/" = {
-        proxyPass = "http://127.0.0.1:${builtins.toString port}";
-        proxyWebsockets = true;
-      };
-    };
-
-    postgresql = {
-      enable = true;
-
-      ensureDatabases = [ "hedgedoc" ];
-
-      ensureUsers = [{
-        name = "hedgedoc";
-        ensurePermissions = { "DATABASE hedgedoc" = "ALL PRIVILEGES"; };
-      }];
-    };
-  };
-
-  systemd.services.hedgedoc.serviceConfig.StateDirectory =
-    lib.mkForce [ "hedgedoc" "hedgedoc/uploads" ];
-}

machines/compute01/onlyoffice/default.nix

@@ -1,4 +1,4 @@
-{ config, ... }:
+{ config, pkgs, ... }:
 
 let hostname = "documentserver.dgnum.eu";
 in {
@@ -10,6 +10,9 @@ in {
     jwtSecretFile = config.age.secrets."onlyoffice-jwt_secret_file".path;
 
     port = 8015;
+
+    package = pkgs.onlyoffice-documentserver.overrideAttrs
+      (old: { patches = (old.patches or [ ]) ++ [ ./secrets.patch ]; });
   };
 
   services.nginx.virtualHosts.${hostname} = {

machines/compute01/secrets/secrets.nix

@@ -5,7 +5,6 @@ in
 
 lib.setDefault { inherit publicKeys; } [
   "ds_fr-secret_file"
-  "hedgedoc-environment_file"
   "mastodon-extra_env_file"
   "nextcloud-adminpass_file"
   "nextcloud-s3_secret_file"