e70d0be931
All checks were successful
build configuration / push_to_cache_compute01 (push) Successful in 2m22s
build configuration / push_to_cache_web02 (push) Successful in 1m15s
build configuration / push_to_cache_rescue01 (push) Successful in 1m18s
build configuration / push_to_cache_bridge01 (push) Successful in 1m12s
build configuration / push_to_cache_web01 (push) Successful in 1m55s
build configuration / build_storage01 (push) Successful in 1m21s
build configuration / build_compute01 (push) Successful in 1m24s
build configuration / build_vault01 (push) Successful in 1m28s
build configuration / build_geo02 (push) Successful in 1m14s
build configuration / build_geo01 (push) Successful in 1m14s
build configuration / build_rescue01 (push) Successful in 1m23s
build configuration / build_web02 (push) Successful in 1m20s
build configuration / build_web01 (push) Successful in 1m37s
lint / check (push) Successful in 28s
build configuration / build_bridge01 (push) Successful in 1m23s
build configuration / push_to_cache_geo01 (push) Successful in 1m40s
build configuration / push_to_cache_geo02 (push) Successful in 1m31s
build configuration / push_to_cache_vault01 (push) Successful in 2m9s
build configuration / push_to_cache_storage01 (push) Successful in 2m13s
109 lines
2.3 KiB
Nix
109 lines
2.3 KiB
Nix
{ config, pkgs, ... }:
|
|
|
|
let
|
|
host = "s3.dgnum.eu";
|
|
webHost = "cdn.dgnum.eu";
|
|
|
|
data_dir = "/data/slow/garage/data";
|
|
metadata_dir = "/data/fast/garage/meta";
|
|
|
|
domains = [
|
|
"bandarretdurgence.ens.fr"
|
|
"boussole-sante.normalesup.eu"
|
|
"lanuit.ens.fr"
|
|
"simi.normalesup.eu"
|
|
];
|
|
|
|
buckets = [
|
|
"banda-website"
|
|
"castopod-dgnum"
|
|
"hackens-website"
|
|
"nuit-website"
|
|
"peertube-videos-dgnum"
|
|
] ++ domains;
|
|
|
|
mkHosted = host: builtins.map (b: "${b}.${host}");
|
|
in
|
|
{
|
|
services.garage = {
|
|
enable = true;
|
|
|
|
package = pkgs.garage_1_0_0;
|
|
|
|
settings = {
|
|
inherit data_dir metadata_dir;
|
|
|
|
db_engine = "lmdb";
|
|
|
|
replication_mode = "none"; # TODO: deprecated
|
|
compression_level = 7;
|
|
|
|
rpc_bind_addr = "[::]:3901";
|
|
rpc_public_addr = "127.0.0.1:3901";
|
|
|
|
s3_api = {
|
|
s3_region = "garage";
|
|
api_bind_addr = "127.0.0.1:3900";
|
|
root_domain = ".${host}";
|
|
};
|
|
|
|
s3_web = {
|
|
bind_addr = "127.0.0.1:3902";
|
|
root_domain = ".${webHost}";
|
|
index = "index.html";
|
|
};
|
|
|
|
k2v_api.api_bind_addr = "[::]:3904";
|
|
|
|
admin.api_bind_addr = "127.0.0.1:3903";
|
|
};
|
|
|
|
environmentFile = config.age.secrets."garage-environment_file".path;
|
|
};
|
|
|
|
systemd.services.garage.serviceConfig = {
|
|
User = "garage";
|
|
ReadWriteDirectories = [
|
|
data_dir
|
|
metadata_dir
|
|
];
|
|
TimeoutSec = 600;
|
|
};
|
|
|
|
users.users.garage = {
|
|
isSystemUser = true;
|
|
group = "garage";
|
|
};
|
|
users.groups.garage = { };
|
|
|
|
services.nginx.virtualHosts = {
|
|
${host} = {
|
|
enableACME = true;
|
|
forceSSL = true;
|
|
|
|
serverAliases = mkHosted host buckets;
|
|
|
|
locations."/".extraConfig = ''
|
|
proxy_pass http://127.0.0.1:3900;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header Host $host;
|
|
# Disable buffering to a temporary file.
|
|
proxy_max_temp_file_size 0;
|
|
client_max_body_size 5G;
|
|
'';
|
|
};
|
|
|
|
${webHost} = {
|
|
enableACME = true;
|
|
forceSSL = true;
|
|
|
|
serverAliases = domains ++ (mkHosted webHost buckets);
|
|
|
|
locations."/".extraConfig = ''
|
|
proxy_pass http://127.0.0.1:3902;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header Host $host;
|
|
'';
|
|
};
|
|
};
|
|
}
|