55 lines
1.6 KiB
Nix
55 lines
1.6 KiB
Nix
{ system, pkgs, lib, ... }:
|
|
let
|
|
reconn = (
|
|
builtins.getFlake "git+ssh://forgejo@git.jrpotter.com/r/reconn?rev=74cb0be878441c4eafcfd2b2c2c926fe87ea8a30"
|
|
).packages.${system}.app;
|
|
in
|
|
{
|
|
services = {
|
|
nginx.virtualHosts."www.hideandseek.live" = {
|
|
forceSSL = true;
|
|
enableACME = true;
|
|
serverAliases = [ "hideandseek.live" ];
|
|
locations."/" = {
|
|
recommendedProxySettings = true;
|
|
proxyPass = "http://127.0.0.1:4000";
|
|
};
|
|
};
|
|
postgresql = {
|
|
package = (pkgs.postgresql_15.withPackages (pkgs: [ pkgs.postgis ]));
|
|
ensureDatabases = [ "reconn" ];
|
|
authentication = lib.mkOverride 10 ''
|
|
# TYPE DATABASE USER ADDRESS METHOD
|
|
local all all trust
|
|
host all all 127.0.0.1/32 trust
|
|
'';
|
|
};
|
|
};
|
|
|
|
systemd.services.reconn = {
|
|
enable = true;
|
|
description = "Reconn Server";
|
|
wantedBy = [ "multi-user.target" ];
|
|
after = [ "network.target" "postgresql.service" ];
|
|
requires = [ "network-online.target" "postgresql.service" ];
|
|
environment = {
|
|
DATABASE_URL = "ecto://postgres:postgres@localhost/reconn";
|
|
};
|
|
serviceConfig = {
|
|
Type = "exec";
|
|
EnvironmentFile = "/run/secrets/RECONN_SECRET_KEY_BASE";
|
|
ExecStartPre = "${reconn}/bin/migrate";
|
|
ExecStart = "${reconn}/bin/server start";
|
|
ExecStop = "${reconn}/bin/server stop";
|
|
ExecReload = "${reconn}/bin/server restart";
|
|
Restart = "on-failure";
|
|
};
|
|
};
|
|
|
|
sops = {
|
|
secrets.RECONN_SECRET_KEY_BASE = {
|
|
sopsFile = ./secrets.yaml;
|
|
};
|
|
};
|
|
}
|