feat(web01): Update web01 to 23.11

machines/web01/castopod-head-proxy.nix

@@ -0,0 +1,33 @@
+{ config, lib, ... }:
+let
+  cfg = config.services.castopod;
+  fpm = config.services.phpfpm.pools.castopod;
+in
+  {
+  services.nginx = {
+      resolver.addresses = [ "127.0.0.53" ];
+      virtualHosts."${cfg.localDomain}" = {
+
+        locations."@force_get" = {
+          extraConfig = lib.mkForce ''
+            recursive_error_pages on;
+            proxy_method GET;
+            proxy_pass https://podcasts.dgnum.eu/$request_uri;
+          '';
+        };
+
+        locations."~ \.php$" = {
+          extraConfig = lib.mkForce ''
+            error_page 550 = @force_get;
+            if ($request_method = HEAD) { return 550; }
+            fastcgi_intercept_errors on;
+            fastcgi_index index.php;
+            fastcgi_pass unix:${fpm.socket};
+            try_files $uri =404;
+            fastcgi_read_timeout 3600;
+            fastcgi_send_timeout 3600;
+          '';
+        };
+      };
+    };
+  }

machines/web01/castopod.nix

@@ -3,12 +3,14 @@ let
   host = "podcasts.dgnum.eu";
 in
 {
-  # Notes:
-  # le paramètre analytics.salt est créé par le service
+  imports = [
+    ./castopod-head-proxy.nix
+  ];
   services.castopod = {
     enable = true;
     localDomain = host;
     environmentFile = config.age.secrets.castopod-environment_file.path;
+    maxUploadSize = 512;
     settings = {
       "email.fromEmail"="noreply@infra.dgnum.eu";
       "email.SMTPHost"="kurisu.lahfa.xyz";

machines/web01/plausible.nix

@@ -30,8 +30,6 @@ in
       secretKeybaseFile = config.age.secrets."plausible_secret-key-base-file".path;
     };
 
-    releaseCookiePath = config.age.secrets."plausible_release-cookie-file".path;
-
     adminUser = {
       passwordFile = config.age.secrets."plausible_admin-user-password-file".path;
       email = "tom.hubrecht@dgnum.eu";