commit 655ab77b16201a96e481daab6da45073ea8c42d2 · pyrox.dev/nixpkgs

+25 -3
nixos/modules/services/web-apps/peertube.nix
···

       67
       67
        
           node ~/dist/server/tools/peertube.js $@

     

       68
       68
        
         '';

     

       69
       69
        
       

     

       70
       70
       -
         nginxCommonHeaders = ''

     

       70
       70
       +
         nginxCommonHeaders = lib.optionalString cfg.enableWebHttps ''

     

       71
       71
       +
           add_header Strict-Transport-Security      'max-age=63072000; includeSubDomains';

     

       72
       72
       +
         '' + lib.optionalString config.services.nginx.virtualHosts.${cfg.localDomain}.http3 ''

     

       73
       73
       +
           add_header Alt-Svc                        'h3=":443"; ma=86400';

     

       74
       74
       +
         '' + ''

     

       71
       75
        
           add_header Access-Control-Allow-Origin    '*';

     

       72
       76
        
           add_header Access-Control-Allow-Methods   'GET, OPTIONS';

     

       73
       77
        
           add_header Access-Control-Allow-Headers   'Range,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';

     
···

       370
       374
        
           systemd.services.peertube-init-db = lib.mkIf cfg.database.createLocally {

     

       371
       375
        
             description = "Initialization database for PeerTube daemon";

     

       372
       376
        
             after = [ "network.target" "postgresql.service" ];

     

       373
       373
       -
             wantedBy = [ "multi-user.target" ];

     

       377
       377
       +
             requires = [ "postgresql.service" ];

     

       374
       378
        
       

     

       375
       379
        
             script = let

     

       376
       380
        
               psqlSetupCommands = pkgs.writeText "peertube-init.sql" ''

     
···

       399
       403
        
           systemd.services.peertube = {

     

       400
       404
        
             description = "PeerTube daemon";

     

       401
       405
        
             after = [ "network.target" ]

     

       402
       402
       -
               ++ lib.optionals cfg.redis.createLocally [ "redis.service" ]

     

       406
       406
       +
               ++ lib.optional cfg.redis.createLocally "redis-peertube.service"

     

       407
       407
       +
               ++ lib.optionals cfg.database.createLocally [ "postgresql.service" "peertube-init-db.service" ];

     

       408
       408
       +
             requires = lib.optional cfg.redis.createLocally "redis-peertube.service"

     

       403
       409
        
               ++ lib.optionals cfg.database.createLocally [ "postgresql.service" "peertube-init-db.service" ];

     

       404
       410
        
             wantedBy = [ "multi-user.target" ];

     

       405
       411
        
       

     
···

       487
       493
        
                 extraConfig = ''

     

       488
       494
        
                   client_max_body_size                        12G;

     

       489
       495
        
                   add_header X-File-Maximum-Size              8G always;

     

       496
       496
       +
                 '' + lib.optionalString cfg.enableWebHttps ''

     

       497
       497
       +
                   add_header Strict-Transport-Security        'max-age=63072000; includeSubDomains';

     

       498
       498
       +
                 '' + lib.optionalString config.services.nginx.virtualHosts.${cfg.localDomain}.http3 ''

     

       499
       499
       +
                   add_header Alt-Svc                          'h3=":443"; ma=86400';

     

       490
       500
        
                 '';

     

       491
       501
        
               };

     

       492
       502
        
       

     
···

       497
       507
        
                 extraConfig = ''

     

       498
       508
        
                   client_max_body_size                        6M;

     

       499
       509
        
                   add_header X-File-Maximum-Size              4M always;

     

       510
       510
       +
                 '' + lib.optionalString cfg.enableWebHttps ''

     

       511
       511
       +
                   add_header Strict-Transport-Security        'max-age=63072000; includeSubDomains';

     

       512
       512
       +
                 '' + lib.optionalString config.services.nginx.virtualHosts.${cfg.localDomain}.http3 ''

     

       513
       513
       +
                   add_header Alt-Svc                          'h3=":443"; ma=86400';

     

       500
       514
        
                 '';

     

       501
       515
        
               };

     

       502
       516
        
       

     
···

       560
       574
        
                 priority = 1320;

     

       561
       575
        
                 extraConfig = ''

     

       562
       576
        
                   add_header Cache-Control                    'public, max-age=604800, immutable';

     

       577
       577
       +
                 '' + lib.optionalString cfg.enableWebHttps ''

     

       578
       578
       +
                   add_header Strict-Transport-Security        'max-age=63072000; includeSubDomains';

     

       579
       579
       +
                 '' + lib.optionalString config.services.nginx.virtualHosts.${cfg.localDomain}.http3 ''

     

       580
       580
       +
                   add_header Alt-Svc                          'h3=":443"; ma=86400';

     

       563
       581
        
                 '';

     

       564
       582
        
               };

     

       565
       583
        
       

     
···

       718
       736
        
                   rewrite ^/static/webseed/(.*)$              /$1 break;

     

       719
       737
        
                 '';

     

       720
       738
        
               };

     

       739
       739
       +
       

     

       740
       740
       +
               extraConfig = lib.optionalString cfg.enableWebHttps ''

     

       741
       741
       +
                 add_header Strict-Transport-Security          'max-age=63072000; includeSubDomains';

     

       742
       742
       +
               '';

     

       721
       743
        
             };

     

       722
       744
        
           };

     

       723
       745