···

       
161
       
 
       
      description = lib.mdDoc "Configure nginx as a reverse proxy for peertube.";

     

       
162
       
 
       
    };

     

       
163
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
164
       
 
       
    database = {

     

       
165
       
 
       
      createLocally = lib.mkOption {

     

       
166
       
 
       
        type = lib.types.bool;

     
···

       
280
       
 
       
            <option>services.peertube.serviceEnvironmentFile</option> points to

     

       
281
       
 
       
            a file in the Nix store. You should use a quoted absolute path to

     

       
282
       
 
       
            prevent this.

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
283
       
 
       
          '';

     

       
284
       
 
       
      }

     

       
285
       
 
       
      { assertion = !(cfg.redis.enableUnixSocket && (cfg.redis.host != null || cfg.redis.port != null));

     
···

       
418
       
 
       
        #!/bin/sh

     

       
419
       
 
       
        umask 077

     

       
420
       
 
       
        cat > /var/lib/peertube/config/local.yaml <<EOF

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
421
       
 
       
        ${lib.optionalString ((!cfg.database.createLocally) && (cfg.database.passwordFile != null)) ''

     

       
422
       
 
       
        database:

     

       
423
       
 
       
          password: '$(cat ${cfg.database.passwordFile})'

     

···

       
161
       
 
       
      description = lib.mdDoc "Configure nginx as a reverse proxy for peertube.";

     

       
162
       
 
       
    };

     

       
163
       
 
       


     

       
164
       
+
       
    secrets = {

     

       
165
       
+
       
      secretsFile = lib.mkOption {

     

       
166
       
+
       
        type = lib.types.nullOr lib.types.path;

     

       
167
       
+
       
        default = null;

     

       
168
       
+
       
        example = "/run/secrets/peertube";

     

       
169
       
+
       
        description = lib.mdDoc ''

     

       
170
       
+
       
          Secrets to run PeerTube.

     

       
171
       
+
       
          Generate one using `openssl rand -hex 32`

     

       
172
       
+
       
        '';

     

       
173
       
+
       
      };

     

       
174
       
+
       
    };

     

       
175
       
+
       


     

       
176
       
 
       
    database = {

     

       
177
       
 
       
      createLocally = lib.mkOption {

     

       
178
       
 
       
        type = lib.types.bool;

     
···

       
292
       
 
       
            <option>services.peertube.serviceEnvironmentFile</option> points to

     

       
293
       
 
       
            a file in the Nix store. You should use a quoted absolute path to

     

       
294
       
 
       
            prevent this.

     

       
295
       
+
       
          '';

     

       
296
       
+
       
      }

     

       
297
       
+
       
      { assertion = cfg.secrets.secretsFile != null;

     

       
298
       
+
       
          message = ''

     

       
299
       
+
       
            <option>services.peertube.secrets.secretsFile</option> needs to be set.

     

       
300
       
 
       
          '';

     

       
301
       
 
       
      }

     

       
302
       
 
       
      { assertion = !(cfg.redis.enableUnixSocket && (cfg.redis.host != null || cfg.redis.port != null));

     
···

       
435
       
 
       
        #!/bin/sh

     

       
436
       
 
       
        umask 077

     

       
437
       
 
       
        cat > /var/lib/peertube/config/local.yaml <<EOF

     

       
438
       
+
       
        ${lib.optionalString (cfg.secrets.secretsFile != null) ''

     

       
439
       
+
       
        secrets:

     

       
440
       
+
       
          peertube: '$(cat ${cfg.secrets.secretsFile})'

     

       
441
       
+
       
        ''}

     

       
442
       
 
       
        ${lib.optionalString ((!cfg.database.createLocally) && (cfg.database.passwordFile != null)) ''

     

       
443
       
 
       
        database:

     

       
444
       
 
       
          password: '$(cat ${cfg.database.passwordFile})'

     

···

       
41
       
 
       
    server = { pkgs, ... }: {

     

       
42
       
 
       
      environment = {

     

       
43
       
 
       
        etc = {

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
44
       
 
       
          "peertube/password-posgressql-db".text = ''

     

       
45
       
 
       
            0gUN0C1mgST6czvjZ8T9

     

       
46
       
 
       
          '';

     
···

       
66
       
 
       
        enable = true;

     

       
67
       
 
       
        localDomain = "peertube.local";

     

       
68
       
 
       
        enableWebHttps = false;

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
69
       
 
       


     

       
70
       
 
       
        database = {

     

       
71
       
 
       
          host = "192.168.2.10";

     

···

       
41
       
 
       
    server = { pkgs, ... }: {

     

       
42
       
 
       
      environment = {

     

       
43
       
 
       
        etc = {

     

       
44
       
+
       
          "peertube/secrets-peertube".text = ''

     

       
45
       
+
       
            063d9c60d519597acef26003d5ecc32729083965d09181ef3949200cbe5f09ee

     

       
46
       
+
       
          '';

     

       
47
       
 
       
          "peertube/password-posgressql-db".text = ''

     

       
48
       
 
       
            0gUN0C1mgST6czvjZ8T9

     

       
49
       
 
       
          '';

     
···

       
69
       
 
       
        enable = true;

     

       
70
       
 
       
        localDomain = "peertube.local";

     

       
71
       
 
       
        enableWebHttps = false;

     

       
72
       
+
       


     

       
73
       
+
       
        secrets = {

     

       
74
       
+
       
          secretsFile = "/etc/peertube/secrets-peertube";

     

       
75
       
+
       
        };

     

       
76
       
 
       


     

       
77
       
 
       
        database = {

     

       
78
       
 
       
          host = "192.168.2.10";