blob: 6d0f2ac61e3bd04ca47261660a55fa742ae6679f (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
|
# Sourcehut configuration
# Copyright (C) 2022 Nguyễn Gia Phong
#
# This file is part of loang configuration.
#
# Loang configuration is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License as published
# by the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# Loang configuration is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public License
# along with loang configuration. If not, see <https://www.gnu.org/licenses/>.
{ config, lib, ... }:
let
domain = config.networking.domain;
common = {
enable = true;
group = "srht";
};
in {
services = {
nginx.virtualHosts."hub.${domain}".serverAliases = lib.mkForce [ ];
postfix = {
enable = true;
domain = domain;
};
sourcehut = {
enable = true;
git = common // { port = 5200; }; # 5001 used by IPFS
hub = common;
lists = common;
man = common;
meta = common;
nginx = {
enable = true;
virtualHost.enableACME = true;
};
postgresql.enable = true;
postfix.enable = true;
redis.enable = true;
settings = {
"git.sr.ht" = {
oauth-client-id = "9be0f6dbb54f3e9f";
oauth-client-secret = "/etc/sr.ht/oauth-secrets/git";
};
"hub.sr.ht" = {
oauth-client-id = "0cb618265116af18";
oauth-client-secret = "/etc/sr.ht/oauth-secrets/hub";
};
"lists.sr.ht" = {
oauth-client-id = "963f211a96e2c160";
oauth-client-secret = "/etc/sr.ht/oauth-secrets/lists";
};
mail = {
pgp-key-id = "2D354398A720461F81C2A65A9B5A95C1B7B9CE8F";
pgp-privkey = "/etc/sr.ht/private.pgp";
pgp-pubkey = "/etc/sr.ht/public.pgp";
smtp-from = "sr.ht@${domain}";
};
"man.sr.ht" = {
oauth-client-id = "af85b2b56a729ac0";
oauth-client-secret = "/etc/sr.ht/oauth-secrets/man";
};
"sr.ht" = {
environment = "production";
global-domain = domain;
network-key = "/var/lib/sourcehut/network.key";
origin = "https://hub.${domain}";
owner-email = config.security.acme.defaults.email;
owner-name = "Nguyễn Gia Phong";
service-key = "/var/lib/sourcehut/service.key";
};
"todo.sr.ht" = {
oauth-client-id = "1bfa656ef3431360";
oauth-client-secret = "/etc/sr.ht/oauth-secrets/todo";
};
webhooks.private-key = "/var/lib/sourcehut/webhook.key";
};
todo = common;
};
};
}
|
