35 lines
967 B
Nix
35 lines
967 B
Nix
{config, ...}: let
|
|
inherit (config.networking) domain;
|
|
virtualHostName = "bin.${domain}";
|
|
in {
|
|
age.secrets.microbin.file = ../../secrets/microbin.age;
|
|
|
|
services.microbin = {
|
|
enable = true;
|
|
passwordFile = config.age.secrets.microbin.path;
|
|
settings = {
|
|
MICROBIN_BIND = "127.0.0.1";
|
|
MICROBIN_PORT = 8020;
|
|
|
|
MICROBIN_PUBLIC_PATH = "https://${virtualHostName}/";
|
|
MICROBIN_QR = true;
|
|
|
|
MICROBIN_ETERNAL_PASTA = false;
|
|
|
|
MICROBIN_MAX_FILE_SIZE_ENCRYPTED_MB = 1024;
|
|
MICROBIN_MAX_FILE_SIZE_UNENCRYPTED_MB = 4096;
|
|
|
|
MICROBIN_DISABLE_UPDATE_CHECKING = false;
|
|
MICROBIN_DISABLE_TELEMETRY = true;
|
|
MICROBIN_LIST_SERVER = false;
|
|
};
|
|
};
|
|
|
|
services.nginx.virtualHosts.${virtualHostName} = {
|
|
enableACME = true;
|
|
forceSSL = true;
|
|
|
|
locations."/".proxyPass = "http://${config.services.microbin.settings.MICROBIN_BIND}:${builtins.toString config.services.microbin.settings.MICROBIN_PORT}";
|
|
};
|
|
}
|