1{
2 config,
3 self',
4 ...
5}:
6{
7 config = {
8 services.anubis.defaultOptions = {
9 enable = true;
10 extraFlags = [ "-metrics-bind \"\"" ];
11 settings = {
12 BIND_NETWORK = "tcp";
13 METRICS_BIND_NETWORK = "tcp";
14 SERVE_ROBOTS_TXT = true;
15 COOKIE_DOMAIN = ".pyrox.dev";
16 ED25519_PRIVATE_KEY_HEX_FILE = config.age.secrets.anubis-key.path;
17 OG_PASSTHROUGH = true;
18 OG_CACHE_CONSIDER_HOST = true;
19 POLICY_FNAME = "${self'.packages.anubis-files}/policies/default.yaml";
20 };
21 };
22 age.secrets.anubis-key = {
23 file = ./secrets/anubis-key.age;
24 owner = "anubis";
25 group = "anubis";
26 };
27 };
28}