nixos-configuration/services/boardwise/default.nix

78 lines
2.2 KiB
Nix

{ system, pkgs, lib, ... }:
let
boardwise = (
builtins.getFlake "github:boardwise-gg/website/0d5a66c604ba8c553d391c7461ff012d8b9c5393"
).packages.${system}.app;
coach-scraper = builtins.getFlake
"github:boardwise-gg/coach-scraper/58815d3ae5a69cac12436a01e77019a5ac5d16a7";
in
{
services = {
nginx = {
recommendedGzipSettings = true;
recommendedOptimisation = true;
recommendedProxySettings = true;
recommendedTlsSettings = true;
virtualHosts."www.boardwise.gg" = {
forceSSL = true;
enableACME = true;
serverAliases = [ "boardwise.gg" ];
locations."/" = {
proxyPass = "http://127.0.0.1:4000";
};
};
};
postgresql = {
package = pkgs.postgresql_15;
ensureDatabases = [ "boardwise" ];
authentication = lib.mkOverride 10 ''
# TYPE DATABASE USER ADDRESS METHOD
local all all trust
host all all 127.0.0.1/32 trust
'';
};
};
systemd.services.boardwise = {
enable = true;
description = "BoardWise Server";
wantedBy = [ "multi-user.target" ];
after = [ "network.target" "postgresql.service" ];
requires = [ "network-online.target" "postgresql.service" ];
environment = {
DATABASE_URL = "ecto://postgres:postgres@localhost/boardwise";
};
serviceConfig = {
Type = "exec";
EnvironmentFile = "/run/secrets/BOARDWISE_SECRET_KEY_BASE";
ExecStartPre = "${boardwise}/bin/migrate";
ExecStart = "${boardwise}/bin/server start";
ExecStop = "${boardwise}/bin/server stop";
ExecReload = "${boardwise}/bin/server restart";
Restart = "on-failure";
};
};
# We use this to seed our database. Run as follows:
# ```bash
# $ coach-scraper \
# --host 127.0.0.1 \
# --user postgres \
# --dbname boardwise \
# --user-agent <email> \
# --site lichess \
# --site chesscom
# ```
environment.systemPackages = [
coach-scraper.packages.${system}.app
];
sops = {
secrets.BOARDWISE_SECRET_KEY_BASE = {
sopsFile = ./secrets.yaml;
};
};
}