feat(ops/modules): set up public-inbox at inbox.tvl.su

Initial setup which does not yet include fetching mails at all, this
is for now only going to display a manually populated view of the
existing mailing list while the rest of this stuff is set up.

Change-Id: Ie1235bd257c9056fe37d0740dfca771ebdd880eb
Reviewed-on: https://cl.tvl.fyi/c/depot/+/7628
Reviewed-by: flokli <flokli@flokli.de>
Reviewed-by: sterni <sternenseemann@systemli.org>
Tested-by: BuildkiteCI
This commit is contained in:
Vincent Ambo 2022-12-25 01:58:21 +03:00 committed by tazjin
parent a25c60361e
commit d446143413
3 changed files with 79 additions and 0 deletions

View file

@ -15,11 +15,13 @@ in
{ {
imports = [ imports = [
(mod "cgit.nix") (mod "cgit.nix")
(mod "depot-inbox.nix")
(mod "depot-replica.nix") (mod "depot-replica.nix")
(mod "journaldriver.nix") (mod "journaldriver.nix")
(mod "known-hosts.nix") (mod "known-hosts.nix")
(mod "tvl-cache.nix") (mod "tvl-cache.nix")
(mod "tvl-users.nix") (mod "tvl-users.nix")
(mod "www/inbox.tvl.su.nix")
(mod "www/self-redirect.nix") (mod "www/self-redirect.nix")
]; ];
@ -87,6 +89,9 @@ in
repo = "/var/lib/depot"; repo = "/var/lib/depot";
}; };
# Serve public-inbox ...
services.depot.inbox.enable = true;
time.timeZone = "UTC"; time.timeZone = "UTC";
# GRUB does not actually need to be installed on disk; Bitfolk have # GRUB does not actually need to be installed on disk; Bitfolk have

View file

@ -0,0 +1,50 @@
# public-inbox configuration for depot@tvl.su
#
# The account itself is a Yandex 360 account in the tvl.su organisation, which
# is accessed via IMAP. Yandex takes care of spam filtering for us, so there is
# no particular SpamAssassin or other configuration.
{ config, lib, pkgs, ... }:
let
cfg = config.services.depot.inbox;
in
{
options.services.depot.inbox = with lib; {
enable = mkEnableOption "Enable public-inbox for depot@tvl.su";
depotPath = mkOption {
description = "path to local depot replica";
type = types.str;
default = "/var/lib/depot";
};
};
config = lib.mkIf cfg.enable {
services.public-inbox = {
enable = true;
http.enable = true;
http.port = 8053;
# imap.enable = true;
# nntp.enable = true;
inboxes.depot = rec {
address = [
"depot@tvl.su" # primary address
"depot@tazj.in" # legacy address
];
description = "TVL depot development";
coderepo = [ "depot" ];
url = "https://inbox.tvl.su/depot";
};
settings.coderepo.depot = {
dir = cfg.depotPath;
cgitUrl = "https://code.tvl.fyi";
};
settings.publicinbox.wwwlisting = "all";
};
};
}

View file

@ -0,0 +1,24 @@
{ config, ... }:
{
imports = [
./base.nix
];
config = {
services.nginx.virtualHosts."inbox.tvl.su" = {
enableACME = true;
forceSSL = true;
extraConfig = ''
location = / {
return 302 https://inbox.tvl.su/depot;
}
location / {
proxy_pass http://localhost:${toString config.services.public-inbox.http.port};
}
'';
};
};
}