diff options
Diffstat (limited to 'hosts/vidhar/firefly-iii/default.nix')
-rw-r--r-- | hosts/vidhar/firefly-iii/default.nix | 64 |
1 files changed, 0 insertions, 64 deletions
diff --git a/hosts/vidhar/firefly-iii/default.nix b/hosts/vidhar/firefly-iii/default.nix deleted file mode 100644 index 026d4643..00000000 --- a/hosts/vidhar/firefly-iii/default.nix +++ /dev/null | |||
@@ -1,64 +0,0 @@ | |||
1 | { config, ... }: | ||
2 | { | ||
3 | config = { | ||
4 | services.postgresql = { | ||
5 | ensureDatabases = [ "firefly-iii" ]; | ||
6 | ensureUsers = [ | ||
7 | { name = "firefly-iii"; | ||
8 | ensureDBOwnership = true; | ||
9 | } | ||
10 | ]; | ||
11 | }; | ||
12 | |||
13 | services.firefly-iii = { | ||
14 | enable = true; | ||
15 | enableNginx = true; | ||
16 | group = "firefly-iii"; | ||
17 | virtualHost = "firefly.yggdrasil.li"; | ||
18 | settings = { | ||
19 | DB_CONNECTION = "pgsql"; | ||
20 | DB_DATABASE = "firefly-iii"; | ||
21 | APP_KEY_FILE = config.sops.secrets."firefly-iii_app_key".path; | ||
22 | APP_URL = "https://${config.services.firefly-iii.virtualHost}"; | ||
23 | }; | ||
24 | }; | ||
25 | |||
26 | services.nginx = { | ||
27 | commonHttpConfig = '' | ||
28 | map $http_x_forwarded_proto $fastcgi_param_https_variable { | ||
29 | default '''; | ||
30 | https 'on'; | ||
31 | } | ||
32 | ''; | ||
33 | virtualHosts.${config.services.firefly-iii.virtualHost} = { | ||
34 | listen = [ | ||
35 | { addr = "[2a03:4000:52:ada:4:1::]"; port = 9000; } | ||
36 | ]; | ||
37 | extraConfig = '' | ||
38 | set_real_ip_from 2a03:4000:52:ada:4::; | ||
39 | ''; | ||
40 | locations."~ \\.php$" = { | ||
41 | extraConfig = '' | ||
42 | fastcgi_param HTTPS $fastcgi_param_https_variable; | ||
43 | ''; | ||
44 | }; | ||
45 | }; | ||
46 | }; | ||
47 | |||
48 | sops.secrets."firefly-iii_app_key" = { | ||
49 | format = "binary"; | ||
50 | sopsFile = ./app_key; | ||
51 | group = config.services.firefly-iii.group; | ||
52 | mode = "0440"; | ||
53 | restartUnits = [ "firefly-iii-setup.service" "firefly-iii-cron.service" "phpfpm-firefly-iii.service" ]; | ||
54 | }; | ||
55 | |||
56 | users.groups.${config.services.firefly-iii.group} = {}; | ||
57 | |||
58 | systemd.services = { | ||
59 | nginx.serviceConfig.SupplementaryGroups = [ config.services.firefly-iii.group ]; | ||
60 | "firefly-iii-setup".serviceConfig.ReadWritePaths = [ "/run/postgresql" ]; | ||
61 | "firefly-iii-cron".serviceConfig.ReadWritePaths = [ "/run/postgresql" ]; | ||
62 | }; | ||
63 | }; | ||
64 | } | ||