commit 1b7999667e8c6461817e4e8338b0ed3d82f4d451 · aylac.top/nixcfg-own-knot

+3 -3

flake.lock

···

       94
       94
        
               ]

     

       95
       95
        
             },

     

       96
       96
        
             "locked": {

     

       97
       97
       -
               "lastModified": 1760489844,

     

       98
       98
       -
               "narHash": "sha256-IhMAPF+woEzvjONjokZZhY05xEiwjyu3MxErQQ3O+rM=",

     

       97
       97
       +
               "lastModified": 1760550478,

     

       98
       98
       +
               "narHash": "sha256-o0Zhn/rj00rA8xOcN5Koq4TC86HRMvYQW0zB/3zGTdU=",

     

       99
       99
        
               "owner": "ayla6",

     

       100
       100
        
               "repo": "pkgs",

     

       101
       101
       -
               "rev": "efc8b7905f76323ecf4ccee0233f504205ff66bc",

     

       101
       101
       +
               "rev": "5ed6d3c22218187aadaad82530d0392a9d9fe607",

     

       102
       102
        
               "type": "github"

     

       103
       103
        
             },

     

       104
       104
        
             "original": {

+37 -9

modules/nixos/services/privatebin/default.nix

···

       9
       9
        
       

     

       10
       10
        
         network = config.mySnippets.aylac-top;

     

       11
       11
        
         service = network.networkMap.${name};

     

       12
       12
       +
       

     

       13
       13
       +
         package = pkgs.privatebin-ayla;

     

       12
       14
        
       in {

     

       13
       15
        
         options.myNixOS.services.${name} = {

     

       14
       16
        
           enable = lib.mkEnableOption "${name} server";

     
···

       26
       28
        
               "${service.vHost}" = "http://localhost:${toString service.port}";

     

       27
       29
        
             };

     

       28
       30
        
       

     

       29
       29
       -
             nginx.virtualHosts."${config.services.privatebin.virtualHost}".listen = [

     

       30
       30
       -
               {

     

       31
       31
       -
                 addr = "localhost";

     

       32
       32
       -
                 inherit (service) port;

     

       33
       33
       -
               }

     

       34
       34
       -
             ];

     

       31
       31
       +
             nginx = {

     

       32
       32
       +
               enable = true;

     

       33
       33
       +
               recommendedTlsSettings = lib.mkDefault true;

     

       34
       34
       +
               recommendedOptimisation = lib.mkDefault true;

     

       35
       35
       +
               recommendedGzipSettings = lib.mkDefault true;

     

       36
       36
       +
               virtualHosts."${config.services.privatebin.virtualHost}" = {

     

       37
       37
       +
                 root = "${package}";

     

       38
       38
       +
                 locations = {

     

       39
       39
       +
                   "/" = {

     

       40
       40
       +
                     tryFiles = "$uri $uri/ /index.php?$query_string";

     

       41
       41
       +
                     index = "index.php";

     

       42
       42
       +
                     extraConfig = ''

     

       43
       43
       +
                       sendfile off;

     

       44
       44
       +
                     '';

     

       45
       45
       +
                   };

     

       46
       46
       +
                   "~ \\.php$" = {

     

       47
       47
       +
                     extraConfig = ''

     

       48
       48
       +
                       include ${config.services.nginx.package}/conf/fastcgi_params ;

     

       49
       49
       +
                       fastcgi_param SCRIPT_FILENAME $request_filename;

     

       50
       50
       +
                       fastcgi_param modHeadersAvailable true; #Avoid sending the security headers twice

     

       51
       51
       +
                       fastcgi_pass unix:${config.services.phpfpm.pools.privatebin.socket};

     

       52
       52
       +
                     '';

     

       53
       53
       +
                   };

     

       54
       54
       +
                 };

     

       55
       55
       +
                 listen = [

     

       56
       56
       +
                   {

     

       57
       57
       +
                     addr = "localhost";

     

       58
       58
       +
                     inherit (service) port;

     

       59
       59
       +
                   }

     

       60
       60
       +
                 ];

     

       61
       61
       +
               };

     

       62
       62
       +
             };

     

       35
       63
        
       

     

       36
       64
        
             privatebin = {

     

       37
       37
       -
               package = pkgs.privatebin-ayla;

     

       65
       65
       +
               inherit package;

     

       38
       66
        
               enable = true;

     

       39
       39
       -
               enableNginx = true;

     

       67
       67
       +
               group = "nginx";

     

       40
       68
        
               settings = {

     

       41
       69
        
                 main = {

     

       42
       70
        
                   name = "ayla's trashbin";

     
···

       47
       75
        
                   password = true;

     

       48
       76
        
                   fileupload = true;

     

       49
       77
        
                   burnafterreadingselected = false;

     

       50
       50
       -
                   defaultformatter = "syntaxhighlighting";

     

       78
       78
       +
                   defaultformatter = "plaintext";

     

       51
       79
        
                   syntaxhighlightingtheme = "sons-of-obsidian";

     

       52
       80
        
                   qrcode = true;

     

       53
       81
        
                   template = "bootstrap-dark";