44 lines
1 KiB
Nix
44 lines
1 KiB
Nix
{
|
|
config,
|
|
lib,
|
|
...
|
|
}: let
|
|
inherit (config.networking) domain;
|
|
virtualHostName = "bin.${domain}";
|
|
in {
|
|
age.secrets.microbin.file = ../../secrets/microbin.age;
|
|
|
|
services.microbin = {
|
|
enable = true;
|
|
passwordFile = config.age.secrets.microbin.path;
|
|
settings = {
|
|
MICROBIN_BIND = "localhost";
|
|
MICROBIN_PORT = 8020;
|
|
|
|
MICROBIN_READONLY = true;
|
|
|
|
MICROBIN_PUBLIC_PATH = "https://${virtualHostName}/";
|
|
MICROBIN_QR = true;
|
|
|
|
MICROBIN_ETERNAL_PASTA = false;
|
|
|
|
MICROBIN_MAX_FILE_SIZE_ENCRYPTED_MB = 1024;
|
|
MICROBIN_MAX_FILE_SIZE_UNENCRYPTED_MB = 4096;
|
|
|
|
MICROBIN_DISABLE_UPDATE_CHECKING = false;
|
|
MICROBIN_DISABLE_TELEMETRY = true;
|
|
MICROBIN_LIST_SERVER = false;
|
|
};
|
|
};
|
|
|
|
services.nginx.virtualHosts.${virtualHostName} = {
|
|
enableACME = true;
|
|
forceSSL = true;
|
|
|
|
locations."/".proxyPass = "http://${lib.formatHostPort {
|
|
host = config.services.microbin.settings.MICROBIN_BIND;
|
|
port = config.services.microbin.settings.MICROBIN_PORT;
|
|
}}";
|
|
};
|
|
}
|