commit 1b7999667e8c6461817e4e8338b0ed3d82f4d451 · aylac.top/nixcfg-own-knot

+3 -3

flake.lock

···

       94
        
               ]

     

       95
        
             },

     

       96
        
             "locked": {

     

       97
       -
               "lastModified": 1760489844,

     

       98
       -
               "narHash": "sha256-IhMAPF+woEzvjONjokZZhY05xEiwjyu3MxErQQ3O+rM=",

     

       99
        
               "owner": "ayla6",

     

       100
        
               "repo": "pkgs",

     

       101
       -
               "rev": "efc8b7905f76323ecf4ccee0233f504205ff66bc",

     

       102
        
               "type": "github"

     

       103
        
             },

     

       104
        
             "original": {

···

       94
        
               ]

     

       95
        
             },

     

       96
        
             "locked": {

     

       97
       +
               "lastModified": 1760550478,

     

       98
       +
               "narHash": "sha256-o0Zhn/rj00rA8xOcN5Koq4TC86HRMvYQW0zB/3zGTdU=",

     

       99
        
               "owner": "ayla6",

     

       100
        
               "repo": "pkgs",

     

       101
       +
               "rev": "5ed6d3c22218187aadaad82530d0392a9d9fe607",

     

       102
        
               "type": "github"

     

       103
        
             },

     

       104
        
             "original": {

+37 -9

modules/nixos/services/privatebin/default.nix

···

       9
        
       

     

       10
        
         network = config.mySnippets.aylac-top;

     

       11
        
         service = network.networkMap.${name};

     

       0
        
       
     

       0
        
       
     

       12
        
       in {

     

       13
        
         options.myNixOS.services.${name} = {

     

       14
        
           enable = lib.mkEnableOption "${name} server";

     
···

       26
        
               "${service.vHost}" = "http://localhost:${toString service.port}";

     

       27
        
             };

     

       28
        
       

     

       29
       -
             nginx.virtualHosts."${config.services.privatebin.virtualHost}".listen = [

     

       30
       -
               {

     

       31
       -
                 addr = "localhost";

     

       32
       -
                 inherit (service) port;

     

       33
       -
               }

     

       34
       -
             ];

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       35
        
       

     

       36
        
             privatebin = {

     

       37
       -
               package = pkgs.privatebin-ayla;

     

       38
        
               enable = true;

     

       39
       -
               enableNginx = true;

     

       40
        
               settings = {

     

       41
        
                 main = {

     

       42
        
                   name = "ayla's trashbin";

     
···

       47
        
                   password = true;

     

       48
        
                   fileupload = true;

     

       49
        
                   burnafterreadingselected = false;

     

       50
       -
                   defaultformatter = "syntaxhighlighting";

     

       51
        
                   syntaxhighlightingtheme = "sons-of-obsidian";

     

       52
        
                   qrcode = true;

     

       53
        
                   template = "bootstrap-dark";

···

       9
        
       

     

       10
        
         network = config.mySnippets.aylac-top;

     

       11
        
         service = network.networkMap.${name};

     

       12
       +
       

     

       13
       +
         package = pkgs.privatebin-ayla;

     

       14
        
       in {

     

       15
        
         options.myNixOS.services.${name} = {

     

       16
        
           enable = lib.mkEnableOption "${name} server";

     
···

       28
        
               "${service.vHost}" = "http://localhost:${toString service.port}";

     

       29
        
             };

     

       30
        
       

     

       31
       +
             nginx = {

     

       32
       +
               enable = true;

     

       33
       +
               recommendedTlsSettings = lib.mkDefault true;

     

       34
       +
               recommendedOptimisation = lib.mkDefault true;

     

       35
       +
               recommendedGzipSettings = lib.mkDefault true;

     

       36
       +
               virtualHosts."${config.services.privatebin.virtualHost}" = {

     

       37
       +
                 root = "${package}";

     

       38
       +
                 locations = {

     

       39
       +
                   "/" = {

     

       40
       +
                     tryFiles = "$uri $uri/ /index.php?$query_string";

     

       41
       +
                     index = "index.php";

     

       42
       +
                     extraConfig = ''

     

       43
       +
                       sendfile off;

     

       44
       +
                     '';

     

       45
       +
                   };

     

       46
       +
                   "~ \\.php$" = {

     

       47
       +
                     extraConfig = ''

     

       48
       +
                       include ${config.services.nginx.package}/conf/fastcgi_params ;

     

       49
       +
                       fastcgi_param SCRIPT_FILENAME $request_filename;

     

       50
       +
                       fastcgi_param modHeadersAvailable true; #Avoid sending the security headers twice

     

       51
       +
                       fastcgi_pass unix:${config.services.phpfpm.pools.privatebin.socket};

     

       52
       +
                     '';

     

       53
       +
                   };

     

       54
       +
                 };

     

       55
       +
                 listen = [

     

       56
       +
                   {

     

       57
       +
                     addr = "localhost";

     

       58
       +
                     inherit (service) port;

     

       59
       +
                   }

     

       60
       +
                 ];

     

       61
       +
               };

     

       62
       +
             };

     

       63
        
       

     

       64
        
             privatebin = {

     

       65
       +
               inherit package;

     

       66
        
               enable = true;

     

       67
       +
               group = "nginx";

     

       68
        
               settings = {

     

       69
        
                 main = {

     

       70
        
                   name = "ayla's trashbin";

     
···

       75
        
                   password = true;

     

       76
        
                   fileupload = true;

     

       77
        
                   burnafterreadingselected = false;

     

       78
       +
                   defaultformatter = "plaintext";

     

       79
        
                   syntaxhighlightingtheme = "sons-of-obsidian";

     

       80
        
                   qrcode = true;

     

       81
        
                   template = "bootstrap-dark";