feat(storage01): Deploy peertube on videos.dgnum.eu

machines/storage01/_configuration.nix

@@ -14,6 +14,7 @@ let
   enabledServices = [
     "forgejo"
     "garage"
+    "peertube"
   ];
 in
 

machines/storage01/peertube.nix

@@ -0,0 +1,54 @@
+{ config, lib, dgn-lib, ... }:
+
+let
+  inherit (dgn-lib) setDefault;
+
+  host = "videos.dgnum.eu";
+
+in {
+  services.peertube = {
+    enable = true;
+
+    settings = {
+      object_storage = {
+        enabled = true;
+
+        endpoint = "s3.dgnum.eu";
+        region = "garage";
+
+        videos = {
+          bucket_name = "peertube-videos-dgnum";
+          prefix = "web-videos";
+        };
+
+        streaming_playlists = {
+          bucket_name = "peertube-videos-dgnum";
+          prefix = "streaming-playlists";
+        };
+      };
+    };
+
+    localDomain = host;
+    configureNginx = true;
+    listenWeb = 443;
+    enableWebHttps = true;
+
+    redis.createLocally = true;
+    database.createLocally = true;
+
+    # smtp.passwordFile = "";
+    serviceEnvironmentFile =
+      config.age.secrets."peertube-service_environment_file".path;
+    secrets.secretsFile = config.age.secrets."peertube-secrets_file".path;
+  };
+
+  services.nginx.virtualHosts.${host} = {
+    enableACME = true;
+    forceSSL = true;
+  };
+
+  dgn-secrets.options = [
+    (setDefault { owner = "peertube"; }
+      (builtins.filter (lib.hasPrefix "peertube-") config.dgn-secrets.names))
+  ];
+}

machines/storage01/secrets/peertube-service_environment_file

@@ -0,0 +1,23 @@
+age-encryption.org/v1
+-> ssh-ed25519 rHotTw WmrGFW7qSFMAHK2A9EsQqVoyEydBBKIPOLco5Qz+FTM
+wTNVKVrELhjOCImcB5Aa6xQDM44Pgjg7c/peWowB5pE
+-> ssh-ed25519 jIXfPA i8WVVJhJhqbyKteoXh12iKXbh9kMoSYwNKOlc5R0ly4
+lDeP6wuEJ1CRn2eO8/xgzkFwQbDiAClet/E+ApCEpwc
+-> ssh-ed25519 QlRB9Q q2/WkbWx8jfguSWff3CRPzDqRkj9rdSSFiyx8XP43Wk
+JSXsS5vlOuZ4KLPV2BlYREWeJFLgmyFu4PkmERWRwQQ
+-> ssh-rsa krWCLQ
+IG+sRvnI27Y9WOFiwJFu/gVjWuHsC/UuIaztYFp3hcsQ5u5OkkColFTyYchexcr+
+wacFxSuh97rAaBNf3pVrHkadbE+xzabeqbAHwj82cwNa46//B9QNe55dQPI/brNP
+PscadzoSk4hO5hFYbO3yKsY3SGBDZ1HaKoGkqHTBp0yLwh9OS52uZn4a7qhfFYm2
+ANmZ9hsiUWuRlX6oB5qwAYw9fR3U4fMMfoq+ned9H3q6mgKOBHlTd60LnlPfZ3Rv
+w14Yd4kXkyhamzG4s9LMLmcOH5Ecd8K6p+zk4eeU+XlfCQtftCbUVHFowDvh4t9p
+BWDGnBrlDuFUKSO1rkms/w
+-> ssh-ed25519 /vwQcQ M3pYIIOBiiFMU+P5fTKb1Au883HHRp8Wg8W4BvUV7BE
+Abok9TA/fCZGWNBU8TOckLBWNrCe645jZyvXrXjeJ00
+-> ssh-ed25519 0R97PA uedNJfc0nIpRktsjJW1PDJVBJkFcbYZ8cafgIr38hVo
+vm4su6RqEU3ZnyFfxrzju9f1S2zjXkNbvCHN6WAkJdM
+-> z</3Q/n-grease
+G7X89Fq+iQ
+--- Pane0+w+58HUlwjyesklaor8t/zaIrRvofVn9lVTrV0
+á8œ	+-Òânòß`?x¨<78>ÎKíyL‘£« –Ó†ðÏeݹ!®ÀáÂP{XîPðÐÊ¢Yec˜rH ƒôªpDL#Uf7šU´=“†aÏ­a<C2AD>·¯7oQ½ú’Á¤Ç?õÙö™&ÅÄ…êþŒäimû#ûƒ8P+ÌÒ"Rþ¨/Öc9™ª›ÐSK¹=Úñ<>-ÛŽ¼ËüYØ×Êš<C38A>щǕyŸ®%lÏw’ÏÌ­Z‡w)†
+è×é°ï¿+œ,ÿi³›;à

machines/storage01/secrets/secrets.nix

@@ -5,4 +5,6 @@ in
 
 lib.setDefault { inherit publicKeys; } [
   "forgejo-database_password_file"
+  "peertube-secrets_file"
+  "peertube-service_environment_file"
 ]