Tom Hubrecht
88d9b8c3e3
Some checks failed
Check meta / check_dns (pull_request) Successful in 19s
Check meta / check_meta (pull_request) Successful in 20s
Check workflows / check_workflows (pull_request) Successful in 24s
Build all the nodes / ap01 (pull_request) Successful in 1m15s
Build all the nodes / bridge01 (pull_request) Successful in 1m53s
Build all the nodes / geo01 (pull_request) Successful in 1m55s
Build all the nodes / geo02 (pull_request) Successful in 1m53s
Build all the nodes / compute01 (pull_request) Successful in 2m33s
Build all the nodes / rescue01 (pull_request) Successful in 2m13s
Build all the nodes / storage01 (pull_request) Successful in 1m57s
Run pre-commit on all files / check (pull_request) Successful in 30s
Build all the nodes / web02 (pull_request) Successful in 1m47s
Build all the nodes / vault01 (pull_request) Successful in 2m21s
Build all the nodes / web03 (pull_request) Successful in 1m40s
Build all the nodes / web01 (pull_request) Successful in 2m54s
Check meta / check_dns (push) Successful in 20s
Check meta / check_meta (push) Successful in 19s
Check workflows / check_workflows (push) Successful in 25s
Build all the nodes / ap01 (push) Successful in 1m16s
Build all the nodes / bridge01 (push) Successful in 1m41s
Build all the nodes / geo02 (push) Successful in 1m44s
Build all the nodes / geo01 (push) Successful in 1m53s
Build all the nodes / compute01 (push) Successful in 2m20s
Build all the nodes / rescue01 (push) Successful in 1m49s
Build all the nodes / storage01 (push) Successful in 1m46s
Build all the nodes / vault01 (push) Successful in 1m45s
Run pre-commit on all files / check (push) Successful in 30s
Build all the nodes / web02 (push) Has been cancelled
Build all the nodes / web01 (push) Has been cancelled
Build all the nodes / web03 (push) Has been cancelled
Signed-off-by: Tom Hubrecht <tom.hubrecht@dgnum.eu> Acked-by: Ryan Lahfa <ryan.lahfa@dgnum.eu> Acked-by: Maurice Debray <maurice.debray@dgnum.eu> Acked-by: Lubin Bailly <lubin.bailly@dgnum.eu> Acked-by: Jean-Marc Gailis <jean-marc.gailis@dgnum.eu> as the legal authority, at the time of writing, in DGNum. Acked-by: Elias Coppens <elias.coppens@dgnum.eu> as a member, at the time of writing, of the DGNum executive counsel.
54 lines
1.2 KiB
Nix
54 lines
1.2 KiB
Nix
# SPDX-FileCopyrightText: 2024 Tom Hubrecht <tom.hubrecht@dgnum.eu>
|
|
# SPDX-FileContributor: Maurice Debray <maurice.debray@dgnum.eu>
|
|
#
|
|
# SPDX-License-Identifier: EUPL-1.2
|
|
|
|
{ config, ... }:
|
|
|
|
let
|
|
host = "social.dgnum.eu";
|
|
in
|
|
{
|
|
services.mastodon = {
|
|
enable = true;
|
|
|
|
localDomain = host;
|
|
smtp = {
|
|
fromAddress = "noreply@infra.dgnum.eu";
|
|
host = "kurisu.lahfa.xyz";
|
|
port = 465;
|
|
user = "web-services@infra.dgnum.eu";
|
|
passwordFile = config.age.secrets.mastodon-smtp-password.path;
|
|
authenticate = true;
|
|
};
|
|
|
|
streamingProcesses = 4;
|
|
|
|
configureNginx = true;
|
|
|
|
extraConfig = {
|
|
# https://docs.codeberg.org/codeberg-pages/redirects/ is not yet active
|
|
# LOCAL_DOMAIN = "dgnum.eu";
|
|
WEB_DOMAIN = host;
|
|
|
|
SMTP_TLS = "true";
|
|
|
|
RAILS_LOG_LEVEL = "warn";
|
|
|
|
# ObjectStorage configuration
|
|
S3_ENABLED = "true";
|
|
S3_BUCKET = "mastodon-dgnum";
|
|
S3_REGION = "garage";
|
|
S3_HOSTNAME = "s3.dgnum.eu";
|
|
S3_ALIAS_HOST = "cdn.dgnum.eu";
|
|
|
|
# TODO: Setup SAML & OIDC
|
|
# OIDC_ENABLED = true;
|
|
# SAML_ENABLED = true;
|
|
};
|
|
|
|
extraEnvFiles = [ config.age.secrets."mastodon-extra_env_file".path ];
|
|
};
|
|
|
|
age-secrets.autoMatch = [ "mastodon" ];
|
|
}
|