infrastructure/machines/nixos/web02/django-apps/kadenios.nix

# SPDX-FileCopyrightText: 2024 Tom Hubrecht <tom.hubrecht@dgnum.eu>
#
# SPDX-License-Identifier: EUPL-1.2

{ config, ... }:

{
  services.django-apps.sites.kadenios = {
    source = "https://git.dgnum.eu/DGNum/kadenios";
    branch = "production";
    domain = "vote.dgnum.eu";

    nginx = {
      enableACME = true;
      forceSSL = true;
    };

    webHookSecret = config.age.secrets."webhook-kadenios_token".path;

    overlays.nix-pkgs = [
      # Required packages
      "authens"
      "django-background-tasks"
      "django-bulma-forms"
      "django-translated-fields"
      "loadcredential"

      # Dependencies
      "python-cas"
    ];

    dependencies = ps: [
      ps.authens
      ps.django
      ps.django-background-tasks
      ps.django-bulma-forms
      ps.django-translated-fields
      ps.gunicorn
      ps.loadcredential
      ps.markdown
      ps.networkx
      ps.numpy
      ps.psycopg
    ];

    environment = {
      KADENIOS_EMAIL_HOST_USER = "web-services@infra.dgnum.eu";
      KADENIOS_EMAIL_USE_SSL = true;
      KADENIOS_FROM_EMAIL = "Kadenios <vote@infra.dgnum.eu>";
      KADENIOS_SERVER_EMAIL = "kadenios@infra.dgnum.eu";
    };

    credentials = {
      SECRET_KEY = config.age.secrets."dj_kadenios-secret_key_file".path;
      EMAIL_HOST_PASSWORD = config.age.secrets."dj_kadenios-email_password_file".path;
    };

    extraServices.tasks = {
      script = "python3 manage.py process_tasks";

      serviceConfig = {
        WorkingDirectory = "/var/lib/django-apps/kadenios/source";
      };
    };
  };
}