···

       
83
       
83
       
 
       
host = "marvin"

     

       
84
       
84
       
 
       
tsHost = "yt"

     

       
85
       
85
       
 
       


     

       
86
       
86
       
+
       
[pingvin-share]

     

       
87
       
87
       
+
       
port = 6933

     

       
88
       
88
       
+
       
host = "marvin"

     

       
89
       
89
       
+
       
extUrl = "share.pyrox.dev"

     

       
90
       
90
       
+
       
anubis = 8410

     

       
91
       
91
       
+
       
be-port = 30104

     

       
92
       
92
       
+
       
be-anubis = 30105

     

       
93
       
93
       
+
       


     

       
86
       
94
       
 
       
[planka]

     

       
87
       
95
       
 
       
port = 6929

     

       
88
       
96
       
 
       
host = "marvin"

     

···

       
1
       
1
       
+
       
bots:

     

       
2
       
2
       
+
       
  - import: (data)/bots/ai-robots-txt.yaml

     

       
3
       
3
       
+
       
  - import: CUSTOM/block/alibaba-cloud.yaml

     

       
4
       
4
       
+
       
  - import: (data)/common/keep-internet-working.yaml

     

       
5
       
5
       
+
       
  - import: CUSTOM/challenge/generic-browser.yaml

     

       
6
       
6
       
+
       


     

       
7
       
7
       
+
       
dnsbl: false

     

···

       
1
       
1
       
+
       
{

     

       
2
       
2
       
+
       
  pkgs,

     

       
3
       
3
       
+
       
  stdenv,

     

       
4
       
4
       
+
       
  settings ? { },

     

       
5
       
5
       
+
       
  ...

     

       
6
       
6
       
+
       
}:

     

       
7
       
7
       
+
       
let

     

       
8
       
8
       
+
       
  format = pkgs.formats.yaml { };

     

       
9
       
9
       
+
       
  file = format.generate "config.yaml" settings;

     

       
10
       
10
       
+
       
in

     

       
11
       
11
       
+
       
stdenv.mkDerivation {

     

       
12
       
12
       
+
       
  pname = "pingvin-share-config";

     

       
13
       
13
       
+
       
  version = "1.0.0";

     

       
14
       
14
       
+
       


     

       
15
       
15
       
+
       
  installPhase = ''

     

       
16
       
16
       
+
       
    mkdir $out

     

       
17
       
17
       
+
       
    cp ${file} $out/config.yaml

     

       
18
       
18
       
+
       
  '';

     

       
19
       
19
       
+
       
}

     

···

       
23
       
23
       
 
       
    ./services/nginx.nix

     

       
24
       
24
       
 
       
    ./services/nextcloud

     

       
25
       
25
       
 
       
    ./services/pinchflat.nix

     

       
26
       
26
       
+
       
    ./services/pingvin-share.nix

     

       
26
       
27
       
 
       
    ./services/planka.nix

     

       
27
       
28
       
 
       
    ./services/pocket-id.nix

     

       
28
       
29
       
 
       
    ./services/podman.nix

     

···

       
1
       
1
       
+
       
{

     

       
2
       
2
       
+
       
  lib,

     

       
3
       
3
       
+
       
  config,

     

       
4
       
4
       
+
       
  pkgs,

     

       
5
       
5
       
+
       
  ...

     

       
6
       
6
       
+
       
}:

     

       
7
       
7
       
+
       
let

     

       
8
       
8
       
+
       
  d = lib.py.data.services.pingvin-share;

     

       
9
       
9
       
+
       
  cfg = config.services.pingvin-share;

     

       
10
       
10
       
+
       
  configFile = pkgs.py.pingvin-share-config.overrideAttrs {

     

       
11
       
11
       
+
       
    settings = {

     

       
12
       
12
       
+
       
      general = {

     

       
13
       
13
       
+
       
        appName = "dishNet Files";

     

       
14
       
14
       
+
       
        secureCookies = "true";

     

       
15
       
15
       
+
       
      };

     

       
16
       
16
       
+
       
      share = {

     

       
17
       
17
       
+
       
        allowRegistration = "false";

     

       
18
       
18
       
+
       
        allowUnauthenticatedShares = "false";

     

       
19
       
19
       
+
       
      };

     

       
20
       
20
       
+
       
      email.enableShareEmailRecipients = "true";

     

       
21
       
21
       
+
       
      smtp = {

     

       
22
       
22
       
+
       
        enabled = "true";

     

       
23
       
23
       
+
       
        host = "mail.pyrox.dev";

     

       
24
       
24
       
+
       
        port = "465";

     

       
25
       
25
       
+
       
        email = "share@pyrox.dev";

     

       
26
       
26
       
+
       
        username = "share@pyrox.dev";

     

       
27
       
27
       
+
       
        password = "SMTP_PASSWORD";

     

       
28
       
28
       
+
       
      };

     

       
29
       
29
       
+
       
      ldap.enabled = "false";

     

       
30
       
30
       
+
       
      legal.enabled = "false";

     

       
31
       
31
       
+
       
      s3.enabled = "false";

     

       
32
       
32
       
+
       
      initUser = {

     

       
33
       
33
       
+
       
        enabled = true;

     

       
34
       
34
       
+
       
        username = "dish";

     

       
35
       
35
       
+
       
        email = "pyrox@pyrox.dev";

     

       
36
       
36
       
+
       
        password = "ADMIN_PASSWORD";

     

       
37
       
37
       
+
       
        isAdmin = true;

     

       
38
       
38
       
+
       
      };

     

       
39
       
39
       
+
       
    };

     

       
40
       
40
       
+
       
  };

     

       
41
       
41
       
+
       
in

     

       
42
       
42
       
+
       
{

     

       
43
       
43
       
+
       
  services = {

     

       
44
       
44
       
+
       
    pingvin-share = {

     

       
45
       
45
       
+
       
      enable = true;

     

       
46
       
46
       
+
       
      backend.port = d.be-port;

     

       
47
       
47
       
+
       
      frontend.port = d.port;

     

       
48
       
48
       
+
       
      hostname = "share.pyrox.dev";

     

       
49
       
49
       
+
       
      https = true;

     

       
50
       
50
       
+
       
    };

     

       
51
       
51
       
+
       
    anubis.instances = lib.mkIf cfg.enable {

     

       
52
       
52
       
+
       
      pingvin-share-be = {

     

       
53
       
53
       
+
       
        settings = {

     

       
54
       
54
       
+
       
          BIND = ":${toString d.be-anubis}";

     

       
55
       
55
       
+
       
          POLICY_FNAME = "${pkgs.py.anubis-files}/policies/pingvin-share.yaml";

     

       
56
       
56
       
+
       
          TARGET = "http://localhost:${toString d.be-port}";

     

       
57
       
57
       
+
       
        };

     

       
58
       
58
       
+
       
      };

     

       
59
       
59
       
+
       
      pingvin-share-fe = {

     

       
60
       
60
       
+
       
        settings = {

     

       
61
       
61
       
+
       
          BIND = ":${toString d.anubis}";

     

       
62
       
62
       
+
       
          POLICY_FNAME = "${pkgs.py.anubis-files}/policies/pingvin-share.yaml";

     

       
63
       
63
       
+
       
          TARGET = "http://localhost:${toString d.port}";

     

       
64
       
64
       
+
       
        };

     

       
65
       
65
       
+
       
      };

     

       
66
       
66
       
+
       
    };

     

       
67
       
67
       
+
       
  };

     

       
68
       
68
       
+
       
  systemd.services.init-pingvin-config = {

     

       
69
       
69
       
+
       
    enable = cfg.enable;

     

       
70
       
70
       
+
       
    description = "Pingvin Share configuration setup";

     

       
71
       
71
       
+
       
    wantedBy = [ "multi-user.target" ];

     

       
72
       
72
       
+
       
    before = [ "pingvin-share.service" ];

     

       
73
       
73
       
+
       
    path = [ pkgs.gnused ];

     

       
74
       
74
       
+
       
    script = ''

     

       
75
       
75
       
+
       
      rm ${cfg.dataDir}/config.yaml

     

       
76
       
76
       
+
       
      chmod o-rwx ${cfg.dataDir}/config.yaml

     

       
77
       
77
       
+
       
      chmod ug-x ${cfg.dataDir}/config.yaml

     

       
78
       
78
       
+
       
      cp ${configFile}/config.yaml ${cfg.dataDir}/config.yaml

     

       
79
       
79
       
+
       
      sed -i "s/SMTP_PASSWORD/$SMTP_PASSWORD/" ${cfg.dataDir}/config.yaml

     

       
80
       
80
       
+
       
      sed -i "s/ADMIN_PASSWORD/$ADMIN_PASSWORD/" ${cfg.dataDir}/config.yaml

     

       
81
       
81
       
+
       
    '';

     

       
82
       
82
       
+
       
    serviceConfig = {

     

       
83
       
83
       
+
       
      EnvironmentFile = config.age.secrets.pingvin-secrets.path;

     

       
84
       
84
       
+
       
      User = cfg.user;

     

       
85
       
85
       
+
       
      Group = cfg.group;

     

       
86
       
86
       
+
       
      ReadWritePaths = [ "${cfg.dataDir}/config.yaml" ];

     

       
87
       
87
       
+
       
    };

     

       
88
       
88
       
+
       
  };

     

       
89
       
89
       
+
       
}

     

This is a binary file and will not be displayed.

···

       
35
       
35
       
 
       
  "../nextcloud/nextcloud-admin-pw.age".publicKeys = marvinDefault;

     

       
36
       
36
       
 
       
  "nix-serve-priv.age".publicKeys = marvinDefault;

     

       
37
       
37
       
 
       
  "pinchflat-secrets.age".publicKeys = marvinDefault;

     

       
38
       
38
       
+
       
  "pingvin-secrets.age".publicKeys = marvinDefault;

     

       
38
       
39
       
 
       
  "planka-env.age".publicKeys = marvinDefault;

     

       
39
       
40
       
 
       
  "pocket-id-secrets.age".publicKeys = marvinDefault;

     

       
40
       
41
       
 
       
  "vaultwarden-vars.age".publicKeys = marvinDefault;

     

···

       
33
       
33
       
 
       
      hashedPassword = "$2b$05$uZoLVdCo48rLVBFdG0.UXua8a.84w1PzmLYOpJ1qTNo25KCdQlflm";

     

       
34
       
34
       
 
       
      sendOnly = true;

     

       
35
       
35
       
 
       
    };

     

       
36
       
36
       
+
       
    "share@pyrox.dev" = {

     

       
37
       
37
       
+
       
      hashedPassword = "$2b$05$GTK7WRECM2FKlpqUWhsE1e9QaXX5fQ41id.W/PV2TZnOwNtrKJZHe";

     

       
38
       
38
       
+
       
      sendOnly = true;

     

       
39
       
39
       
+
       
    };

     

       
36
       
40
       
 
       
  };

     

       
37
       
41
       
 
       
}