···

       
67
       
 
       
    node ~/dist/server/tools/peertube.js $@

     

       
68
       
 
       
  '';

     

       
69
       
 
       


     

       
70
       
-
       
  nginxCommonHeaders = ''

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
71
       
 
       
    add_header Access-Control-Allow-Origin    '*';

     

       
72
       
 
       
    add_header Access-Control-Allow-Methods   'GET, OPTIONS';

     

       
73
       
 
       
    add_header Access-Control-Allow-Headers   'Range,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';

     
···

       
370
       
 
       
    systemd.services.peertube-init-db = lib.mkIf cfg.database.createLocally {

     

       
371
       
 
       
      description = "Initialization database for PeerTube daemon";

     

       
372
       
 
       
      after = [ "network.target" "postgresql.service" ];

     

       
373
       
-
       
      wantedBy = [ "multi-user.target" ];

     

       
374
       
 
       


     

       
375
       
 
       
      script = let

     

       
376
       
 
       
        psqlSetupCommands = pkgs.writeText "peertube-init.sql" ''

     
···

       
399
       
 
       
    systemd.services.peertube = {

     

       
400
       
 
       
      description = "PeerTube daemon";

     

       
401
       
 
       
      after = [ "network.target" ]

     

       
402
       
-
       
        ++ lib.optionals cfg.redis.createLocally [ "redis.service" ]

     

       
0
       
 
       

     

       
0
       
 
       

     

       
403
       
 
       
        ++ lib.optionals cfg.database.createLocally [ "postgresql.service" "peertube-init-db.service" ];

     

       
404
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
405
       
 
       


     
···

       
487
       
 
       
          extraConfig = ''

     

       
488
       
 
       
            client_max_body_size                        12G;

     

       
489
       
 
       
            add_header X-File-Maximum-Size              8G always;

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
490
       
 
       
          '';

     

       
491
       
 
       
        };

     

       
492
       
 
       


     
···

       
497
       
 
       
          extraConfig = ''

     

       
498
       
 
       
            client_max_body_size                        6M;

     

       
499
       
 
       
            add_header X-File-Maximum-Size              4M always;

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
500
       
 
       
          '';

     

       
501
       
 
       
        };

     

       
502
       
 
       


     
···

       
560
       
 
       
          priority = 1320;

     

       
561
       
 
       
          extraConfig = ''

     

       
562
       
 
       
            add_header Cache-Control                    'public, max-age=604800, immutable';

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
563
       
 
       
          '';

     

       
564
       
 
       
        };

     

       
565
       
 
       


     
···

       
718
       
 
       
            rewrite ^/static/webseed/(.*)$              /$1 break;

     

       
719
       
 
       
          '';

     

       
720
       
 
       
        };

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
721
       
 
       
      };

     

       
722
       
 
       
    };

     

       
723
       
 
       


     

···

       
67
       
 
       
    node ~/dist/server/tools/peertube.js $@

     

       
68
       
 
       
  '';

     

       
69
       
 
       


     

       
70
       
+
       
  nginxCommonHeaders = lib.optionalString cfg.enableWebHttps ''

     

       
71
       
+
       
    add_header Strict-Transport-Security      'max-age=63072000; includeSubDomains';

     

       
72
       
+
       
  '' + lib.optionalString config.services.nginx.virtualHosts.${cfg.localDomain}.http3 ''

     

       
73
       
+
       
    add_header Alt-Svc                        'h3=":443"; ma=86400';

     

       
74
       
+
       
  '' + ''

     

       
75
       
 
       
    add_header Access-Control-Allow-Origin    '*';

     

       
76
       
 
       
    add_header Access-Control-Allow-Methods   'GET, OPTIONS';

     

       
77
       
 
       
    add_header Access-Control-Allow-Headers   'Range,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';

     
···

       
374
       
 
       
    systemd.services.peertube-init-db = lib.mkIf cfg.database.createLocally {

     

       
375
       
 
       
      description = "Initialization database for PeerTube daemon";

     

       
376
       
 
       
      after = [ "network.target" "postgresql.service" ];

     

       
377
       
+
       
      requires = [ "postgresql.service" ];

     

       
378
       
 
       


     

       
379
       
 
       
      script = let

     

       
380
       
 
       
        psqlSetupCommands = pkgs.writeText "peertube-init.sql" ''

     
···

       
403
       
 
       
    systemd.services.peertube = {

     

       
404
       
 
       
      description = "PeerTube daemon";

     

       
405
       
 
       
      after = [ "network.target" ]

     

       
406
       
+
       
        ++ lib.optional cfg.redis.createLocally "redis-peertube.service"

     

       
407
       
+
       
        ++ lib.optionals cfg.database.createLocally [ "postgresql.service" "peertube-init-db.service" ];

     

       
408
       
+
       
      requires = lib.optional cfg.redis.createLocally "redis-peertube.service"

     

       
409
       
 
       
        ++ lib.optionals cfg.database.createLocally [ "postgresql.service" "peertube-init-db.service" ];

     

       
410
       
 
       
      wantedBy = [ "multi-user.target" ];

     

       
411
       
 
       


     
···

       
493
       
 
       
          extraConfig = ''

     

       
494
       
 
       
            client_max_body_size                        12G;

     

       
495
       
 
       
            add_header X-File-Maximum-Size              8G always;

     

       
496
       
+
       
          '' + lib.optionalString cfg.enableWebHttps ''

     

       
497
       
+
       
            add_header Strict-Transport-Security        'max-age=63072000; includeSubDomains';

     

       
498
       
+
       
          '' + lib.optionalString config.services.nginx.virtualHosts.${cfg.localDomain}.http3 ''

     

       
499
       
+
       
            add_header Alt-Svc                          'h3=":443"; ma=86400';

     

       
500
       
 
       
          '';

     

       
501
       
 
       
        };

     

       
502
       
 
       


     
···

       
507
       
 
       
          extraConfig = ''

     

       
508
       
 
       
            client_max_body_size                        6M;

     

       
509
       
 
       
            add_header X-File-Maximum-Size              4M always;

     

       
510
       
+
       
          '' + lib.optionalString cfg.enableWebHttps ''

     

       
511
       
+
       
            add_header Strict-Transport-Security        'max-age=63072000; includeSubDomains';

     

       
512
       
+
       
          '' + lib.optionalString config.services.nginx.virtualHosts.${cfg.localDomain}.http3 ''

     

       
513
       
+
       
            add_header Alt-Svc                          'h3=":443"; ma=86400';

     

       
514
       
 
       
          '';

     

       
515
       
 
       
        };

     

       
516
       
 
       


     
···

       
574
       
 
       
          priority = 1320;

     

       
575
       
 
       
          extraConfig = ''

     

       
576
       
 
       
            add_header Cache-Control                    'public, max-age=604800, immutable';

     

       
577
       
+
       
          '' + lib.optionalString cfg.enableWebHttps ''

     

       
578
       
+
       
            add_header Strict-Transport-Security        'max-age=63072000; includeSubDomains';

     

       
579
       
+
       
          '' + lib.optionalString config.services.nginx.virtualHosts.${cfg.localDomain}.http3 ''

     

       
580
       
+
       
            add_header Alt-Svc                          'h3=":443"; ma=86400';

     

       
581
       
 
       
          '';

     

       
582
       
 
       
        };

     

       
583
       
 
       


     
···

       
736
       
 
       
            rewrite ^/static/webseed/(.*)$              /$1 break;

     

       
737
       
 
       
          '';

     

       
738
       
 
       
        };

     

       
739
       
+
       


     

       
740
       
+
       
        extraConfig = lib.optionalString cfg.enableWebHttps ''

     

       
741
       
+
       
          add_header Strict-Transport-Security          'max-age=63072000; includeSubDomains';

     

       
742
       
+
       
        '';

     

       
743
       
 
       
      };

     

       
744
       
 
       
    };

     

       
745