feat(compute01): Deploy zammad on support.dgnum.eu

machines/compute01/_configuration.nix

@@ -20,6 +20,7 @@ let
     "nextcloud"
     "outline"
     "satosa"
+    "zammad"
   ];
 in
 

machines/compute01/secrets/secrets.nix

@@ -12,4 +12,5 @@ lib.setDefault { inherit publicKeys; } [
   "outline-smtp_password_file"
   "outline-storage_secret_key_file"
   "satosa-env_file"
+  "zammad-secret_key_base_file"
 ]

machines/compute01/secrets/zammad-secret_key_base_file

@@ -0,0 +1,25 @@
+age-encryption.org/v1
+-> ssh-ed25519 tDqJRg Or0mrhIqaAIwF/XmRaMiih1LE/HbEXeQ1qQOxbQuRjk
+E/OXPSPDDzco0duh8nFK/CvUkR7ioR+H5KELzhA0OIM
+-> ssh-ed25519 jIXfPA 3CXEUG3fOwAtbFRY2Y6Sio3OPoW2ZMbrsj4IhK6lTBU
+pFJkPT10zAjGOHcjSI+zaCC5+7iN9B3Kv3AVOGuHzP4
+-> ssh-ed25519 QlRB9Q vXOLgEZmDL520H6DJ6YJT35K3g38MQyQ/Q37dF6rHm4
+8OGw8zjxABTHhK3Krt1Ut1ZtOYTv+Vquztt7KbBfu5E
+-> ssh-ed25519 r+nK/Q kXCb4Vr9GP3MuccFL6KuFWc9ka92IsjWKZ8loefAZyU
+ZB+fJjHtLmxeNTE3/kE7wVyYEfYPgJZteCPPGuUQnwg
+-> ssh-rsa krWCLQ
+Lw17n86Jq9JAzXvbNBK1kxhdVsy24pVJw9t8X6tImcvroeT+NZ6TWLcF9CpqaUTI
+Fzrs495PSsqk5olsJ5inAiz3Zq9KMs/XXB3po67yGuU50XANdp6aTCNZS0ml+ggz
+ezPUmDmf/m33HTjzr09vltJxHEeLXhEJfeswmpRa1331C1FJKoj6pNXrVK+/wRvl
+sQQb099AD1rnPCRaBW8CCV6ZUso+HjxctIdoKk+GA9vjmmoF+3nmNlXNJvqNSGqx
+L2igVyd822TYl25wqSORW13SFBSBKhtX+Lt7dW65YPi3mhCQzZEJwxXOqIdSiFOT
++ibjMthYgIvZYEFVn3xEDA
+-> ssh-ed25519 /vwQcQ JJMXvRIpMy4xFJK/gOPyTsbYEyFYTTrDT6/MfJeFTxs
+KaKjsbYVHD6Oi+ItalcICsZiStAGnLsyqtK0jMl+hvE
+-> ssh-ed25519 0R97PA yj/QsFvoB7Cr+vOkbuiDcghD42bkLQSavPhB3kx7xQk
+3NRXzr/AyaNcZhUNPeRWxfxqYlzcWdfYG4JjpdIhYTc
+-> /g1|-R-grease '4R5VG( J`dDW io
+quE
+--- 8JHXRRriy7D5w8b6CAcgkEegK+24ZLR44oo0TArL0/Y
+¡×È_®údð‡„OksΩ—á<E28094>à,çLÝ>”ˆ¸"û,$‘Ô¬bò©jþ[Fº©ñ}3ƒVmˆX³zZÕsËIôbëJK¡C“<43>ràÑ–ÔiÚˆ/€Æ÷»¿ z8kŸQ¥µµátäuãdÆ—ýîÞæq©üœü7IZoÖùq|x-ýÛù~
+Ð’¬x>ª<5À5“qêÑ­D÷õÝMµE

machines/compute01/zammad.nix

@@ -0,0 +1,55 @@
+{ config, ... }:
+
+let
+  host = "support.dgnum.eu";
+
+  port = 3005;
+  websocketPort = 6902;
+in {
+  services.zammad = {
+    enable = true;
+
+    inherit port websocketPort;
+
+    host = "127.0.0.1";
+
+    secretKeyBaseFile = config.age.secrets."zammad-secret_key_base_file".path;
+  };
+
+  services.nginx = {
+    enable = true;
+
+    virtualHosts.${host} = {
+      enableACME = true;
+      forceSSL = true;
+
+      root = "/var/lib/zammad/public";
+
+      locations = {
+        "/".proxyPass = "http://127.0.0.1:${builtins.toString port}";
+
+        "/ws" = {
+          proxyPass = "http://127.0.0.1:${builtins.toString websocketPort}";
+          proxyWebsockets = true;
+        };
+
+        "/cable" = {
+          proxyPass = "http://127.0.0.1:${builtins.toString port}";
+          proxyWebsockets = true;
+        };
+
+        "~ ^/(assets/|robots.txt|humans.txt|favicon.ico|apple-touch-icon.png)".extraConfig =
+          ''
+            expires max;
+          '';
+      };
+
+      extraConfig = ''
+        server_tokens off;
+        client_max_body_size 50M;
+      '';
+    };
+  };
+
+  dgn-secrets.options = [{ zammad-secret_key_base_file.owner = "zammad"; }];
+}