commit b40caf8c8a7e30fa0befedd3e0139c59c3141af1 · pyrox.dev/nixpkgs

+143 -147

nixos/modules/services/web-apps/peertube.nix

···

       61
        
           eval -- "\$@"

     

       62
        
         '';

     

       63
        
       

     

       64
       -
         peertubeCli = pkgs.writeShellScriptBin "peertube" ''

     

       65
       -
           node ~/dist/server/tools/peertube.js $@

     

       0
        
       
     

       0
        
       
     

       66
        
         '';

     

       67
        
       

     

       68
       -
         nginxCommonHeaders = lib.optionalString cfg.enableWebHttps ''

     

       69
       -
           add_header Strict-Transport-Security      'max-age=63072000; includeSubDomains';

     

       70
       -
         '' + lib.optionalString config.services.nginx.virtualHosts.${cfg.localDomain}.http3 ''

     

       71
       -
           add_header Alt-Svc                        'h3=":443"; ma=86400';

     

       72
       -
         '' + ''

     

       73
       -
           add_header Access-Control-Allow-Origin    '*';

     

       74
       -
           add_header Access-Control-Allow-Methods   'GET, OPTIONS';

     

       75
       -
           add_header Access-Control-Allow-Headers   'Range,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';

     

       76
        
         '';

     

       77
        
       

     

       78
        
       in {

     
···

       330
        
             }

     

       331
        
           ];

     

       332
        
       

     

       0
        
       
     

       0
        
       
     

       333
        
           services.peertube.settings = lib.mkMerge [

     

       334
        
             {

     

       335
        
               listen = {

     
···

       355
        
                 tmp_persistent = lib.mkDefault "/var/lib/peertube/storage/tmp_persistent/";

     

       356
        
                 bin = lib.mkDefault "/var/lib/peertube/storage/bin/";

     

       357
        
                 avatars = lib.mkDefault "/var/lib/peertube/storage/avatars/";

     

       358
       -
                 videos = lib.mkDefault "/var/lib/peertube/storage/videos/";

     

       359
        
                 streaming_playlists = lib.mkDefault "/var/lib/peertube/storage/streaming-playlists/";

     

       360
        
                 redundancy = lib.mkDefault "/var/lib/peertube/storage/redundancy/";

     

       361
        
                 logs = lib.mkDefault "/var/lib/peertube/storage/logs/";

     

       362
        
                 previews = lib.mkDefault "/var/lib/peertube/storage/previews/";

     

       363
        
                 thumbnails = lib.mkDefault "/var/lib/peertube/storage/thumbnails/";

     

       0
        
       
     

       364
        
                 torrents = lib.mkDefault "/var/lib/peertube/storage/torrents/";

     

       365
        
                 captions = lib.mkDefault "/var/lib/peertube/storage/captions/";

     

       366
        
                 cache = lib.mkDefault "/var/lib/peertube/storage/cache/";

     
···

       428
        
       

     

       429
        
             environment = env;

     

       430
        
       

     

       431
       -
             path = with pkgs; [ bashInteractive ffmpeg nodejs_18 openssl yarn python3 ];

     

       432
        
       

     

       433
        
             script = ''

     

       434
        
               #!/bin/sh

     
···

       456
        
               ln -sf ${cfg.package}/config/default.yaml /var/lib/peertube/config/default.yaml

     

       457
        
               ln -sf ${cfg.package}/client/dist -T /var/lib/peertube/www/client

     

       458
        
               ln -sf ${cfg.settings.storage.client_overrides} -T /var/lib/peertube/www/client-overrides

     

       459
       -
               npm start

     

       460
        
             '';

     

       461
        
             serviceConfig = {

     

       462
        
               Type = "simple";

     
···

       488
        
       

     

       489
        
           services.nginx = lib.mkIf cfg.configureNginx {

     

       490
        
             enable = true;

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       491
        
             virtualHosts."${cfg.localDomain}" = {

     

       492
        
               root = "/var/lib/peertube/www";

     

       493
        
       

     
···

       497
        
                 priority = 1110;

     

       498
        
               };

     

       499
        
       

     

       500
       -
               locations."= /api/v1/videos/upload-resumable" = {

     

       501
        
                 tryFiles = "/dev/null @api";

     

       502
        
                 priority = 1120;

     

       503
        
       

     

       504
        
                 extraConfig = ''

     

       505
       -
                   client_max_body_size                        0;

     

       506
       -
                   proxy_request_buffering                     off;

     

       507
       -
                 '';

     

       508
        
               };

     

       509
        
       

     

       510
        
               locations."~ ^/api/v1/videos/(upload|([^/]+/studio/edit))$" = {

     
···

       513
        
                 priority = 1130;

     

       514
        
       

     

       515
        
                 extraConfig = ''

     

       516
       -
                   client_max_body_size                        12G;

     

       517
       -
                   add_header X-File-Maximum-Size              8G always;

     

       518
       -
                 '' + lib.optionalString cfg.enableWebHttps ''

     

       519
       -
                   add_header Strict-Transport-Security        'max-age=63072000; includeSubDomains';

     

       520
       -
                 '' + lib.optionalString config.services.nginx.virtualHosts.${cfg.localDomain}.http3 ''

     

       521
       -
                   add_header Alt-Svc                          'h3=":443"; ma=86400';

     

       522
       -
                 '';

     

       523
        
               };

     

       524
        
       

     

       525
        
               locations."~ ^/api/v1/runners/jobs/[^/]+/(update|success)$" = {

     
···

       528
        
                 priority = 1135;

     

       529
        
       

     

       530
        
                 extraConfig = ''

     

       531
       -
                   client_max_body_size                        12G;

     

       532
       -
                   add_header X-File-Maximum-Size              8G always;

     

       533
       -
                 '' + lib.optionalString cfg.enableWebHttps ''

     

       534
       -
                   add_header Strict-Transport-Security        'max-age=63072000; includeSubDomains';

     

       535
       -
                 '' + lib.optionalString config.services.nginx.virtualHosts.${cfg.localDomain}.http3 ''

     

       536
       -
                   add_header Alt-Svc                          'h3=":443"; ma=86400';

     

       537
       -
                 '';

     

       538
        
               };

     

       539
        
       

     

       540
        
               locations."~ ^/api/v1/(videos|video-playlists|video-channels|users/me)" = {

     
···

       542
        
                 priority = 1140;

     

       543
        
       

     

       544
        
                 extraConfig = ''

     

       545
       -
                   client_max_body_size                        6M;

     

       546
       -
                   add_header X-File-Maximum-Size              4M always;

     

       547
       -
                 '' + lib.optionalString cfg.enableWebHttps ''

     

       548
       -
                   add_header Strict-Transport-Security        'max-age=63072000; includeSubDomains';

     

       549
       -
                 '' + lib.optionalString config.services.nginx.virtualHosts.${cfg.localDomain}.http3 ''

     

       550
       -
                   add_header Alt-Svc                          'h3=":443"; ma=86400';

     

       551
       -
                 '';

     

       552
        
               };

     

       553
        
       

     

       554
        
               locations."@api" = {

     

       555
       -
                 proxyPass = "http://127.0.0.1:${toString cfg.listenHttp}";

     

       556
        
                 priority = 1150;

     

       557
        
       

     

       558
        
                 extraConfig = ''

     

       559
       -
                   proxy_set_header X-Forwarded-For            $proxy_add_x_forwarded_for;

     

       560
       -
                   proxy_set_header Host                       $host;

     

       561
       -
                   proxy_set_header X-Real-IP                  $remote_addr;

     

       562
        
       

     

       563
       -
                   proxy_connect_timeout                       10m;

     

       564
        
       

     

       565
       -
                   proxy_send_timeout                          10m;

     

       566
       -
                   proxy_read_timeout                          10m;

     

       567
        
       

     

       568
       -
                   client_max_body_size                        100k;

     

       569
       -
                   send_timeout                                10m;

     

       570
       -
                 '';

     

       571
        
               };

     

       572
        
       

     

       573
        
               # Websocket

     
···

       581
        
                 priority = 1220;

     

       582
        
       

     

       583
        
                 extraConfig = ''

     

       584
       -
                   proxy_read_timeout                          15m;

     

       585
        
                 '';

     

       586
        
               };

     

       587
        
       

     
···

       591
        
               };

     

       592
        
       

     

       593
        
               locations."@api_websocket" = {

     

       594
       -
                 proxyPass = "http://127.0.0.1:${toString cfg.listenHttp}";

     

       595
        
                 priority = 1240;

     

       596
        
       

     

       597
        
                 extraConfig = ''

     

       598
       -
                   proxy_set_header X-Forwarded-For            $proxy_add_x_forwarded_for;

     

       599
       -
                   proxy_set_header Host                       $host;

     

       600
       -
                   proxy_set_header X-Real-IP                  $remote_addr;

     

       601
       -
                   proxy_set_header Upgrade                    $http_upgrade;

     

       602
       -
                   proxy_set_header Connection                 'upgrade';

     

       0
        
       
     

       603
        
       

     

       604
       -
                   proxy_http_version                          1.1;

     

       605
       -
                 '';

     

       606
        
               };

     

       607
        
       

     

       608
        
               # Bypass PeerTube for performance reasons.

     

       609
        
               locations."~ ^/client/(assets/images/(icons/icon-36x36\.png|icons/icon-48x48\.png|icons/icon-72x72\.png|icons/icon-96x96\.png|icons/icon-144x144\.png|icons/icon-192x192\.png|icons/icon-512x512\.png|logo\.svg|favicon\.png|default-playlist\.jpg|default-avatar-account\.png|default-avatar-account-48x48\.png|default-avatar-video-channel\.png|default-avatar-video-channel-48x48\.png))$" = {

     

       610
        
                 tryFiles = "/client-overrides/$1 /client/$1 $1";

     

       611
        
                 priority = 1310;

     

       0
        
       
     

       0
        
       
     

       612
        
               };

     

       613
        
       

     

       614
        
               locations."~ ^/client/(.*\.(js|css|png|svg|woff2|otf|ttf|woff|eot))$" = {

     

       615
        
                 alias = "${cfg.package}/client/dist/$1";

     

       616
        
                 priority = 1320;

     

       617
        
                 extraConfig = ''

     

       618
       -
                   add_header Cache-Control                    'public, max-age=604800, immutable';

     

       619
       -
                 '' + lib.optionalString cfg.enableWebHttps ''

     

       620
       -
                   add_header Strict-Transport-Security        'max-age=63072000; includeSubDomains';

     

       621
       -
                 '' + lib.optionalString config.services.nginx.virtualHosts.${cfg.localDomain}.http3 ''

     

       622
       -
                   add_header Alt-Svc                          'h3=":443"; ma=86400';

     

       623
       -
                 '';

     

       624
        
               };

     

       625
        
       

     

       626
        
               locations."^~ /download/" = {

     

       627
       -
                 proxyPass = "http://127.0.0.1:${toString cfg.listenHttp}";

     

       628
        
                 priority = 1410;

     

       629
        
                 extraConfig = ''

     

       630
       -
                   proxy_set_header X-Forwarded-For            $proxy_add_x_forwarded_for;

     

       631
       -
                   proxy_set_header Host                       $host;

     

       632
       -
                   proxy_set_header X-Real-IP                  $remote_addr;

     

       633
        
       

     

       634
       -
                   proxy_limit_rate                            5M;

     

       635
       -
                 '';

     

       636
        
               };

     

       637
        
       

     

       638
       -
               locations."^~ /static/streaming-playlists/private/" = {

     

       639
       -
                 proxyPass = "http://127.0.0.1:${toString cfg.listenHttp}";

     

       640
        
                 priority = 1420;

     

       641
        
                 extraConfig = ''

     

       642
       -
                   proxy_set_header X-Forwarded-For            $proxy_add_x_forwarded_for;

     

       643
       -
                   proxy_set_header Host                       $host;

     

       644
       -
                   proxy_set_header X-Real-IP                  $remote_addr;

     

       645
        
       

     

       646
       -
                   proxy_limit_rate                            5M;

     

       647
       -
                 '';

     

       648
        
               };

     

       649
        
       

     

       650
        
               locations."^~ /static/web-videos/private/" = {

     

       651
       -
                 proxyPass = "http://127.0.0.1:${toString cfg.listenHttp}";

     

       652
        
                 priority = 1430;

     

       653
        
                 extraConfig = ''

     

       654
       -
                   proxy_set_header X-Forwarded-For            $proxy_add_x_forwarded_for;

     

       655
       -
                   proxy_set_header Host                       $host;

     

       656
       -
                   proxy_set_header X-Real-IP                  $remote_addr;

     

       657
        
       

     

       658
       -
                   proxy_limit_rate                            5M;

     

       659
       -
                 '';

     

       660
        
               };

     

       661
        
       

     

       662
        
               locations."^~ /static/webseed/private/" = {

     

       663
       -
                 proxyPass = "http://127.0.0.1:${toString cfg.listenHttp}";

     

       664
        
                 priority = 1440;

     

       665
        
                 extraConfig = ''

     

       666
       -
                   proxy_set_header X-Forwarded-For            $proxy_add_x_forwarded_for;

     

       667
       -
                   proxy_set_header Host                       $host;

     

       668
       -
                   proxy_set_header X-Real-IP                  $remote_addr;

     

       669
        
       

     

       670
       -
                   proxy_limit_rate                            5M;

     

       671
       -
                 '';

     

       672
        
               };

     

       673
        
       

     

       674
        
               locations."^~ /static/redundancy/" = {

     
···

       676
        
                 root = cfg.settings.storage.redundancy;

     

       677
        
                 priority = 1450;

     

       678
        
                 extraConfig = ''

     

       679
       -
                   set $peertube_limit_rate                    800k;

     

       680
        
       

     

       681
        
                   if ($request_uri ~ -fragmented.mp4$) {

     

       682
       -
                     set $peertube_limit_rate                  5M;

     

       683
        
                   }

     

       684
        
       

     

       685
        
                   if ($request_method = 'OPTIONS') {

     

       686
        
                     ${nginxCommonHeaders}

     

       687
       -
                     add_header Access-Control-Max-Age         1728000;

     

       688
       -
                     add_header Content-Type                   'text/plain charset=UTF-8';

     

       689
       -
                     add_header Content-Length                 0;

     

       690
       -
                     return                                    204;

     

       0
        
       
     

       691
        
                   }

     

       692
        
                   if ($request_method = 'GET') {

     

       693
        
                     ${nginxCommonHeaders}

     

       0
        
       
     

       694
        
       

     

       695
       -
                     access_log                                off;

     

       696
        
                   }

     

       697
        
       

     

       698
       -
                   aio                                         threads;

     

       699
       -
                   sendfile                                    on;

     

       700
       -
                   sendfile_max_chunk                          1M;

     

       701
        
       

     

       702
       -
                   limit_rate                                  $peertube_limit_rate;

     

       703
       -
                   limit_rate_after                            5M;

     

       704
        
       

     

       705
       -
                   rewrite ^/static/redundancy/(.*)$           /$1 break;

     

       706
        
                 '';

     

       707
        
               };

     

       708
        
       

     
···

       711
        
                 root = cfg.settings.storage.streaming_playlists;

     

       712
        
                 priority = 1460;

     

       713
        
                 extraConfig = ''

     

       714
       -
                   set $peertube_limit_rate                    800k;

     

       715
        
       

     

       716
        
                   if ($request_uri ~ -fragmented.mp4$) {

     

       717
       -
                     set $peertube_limit_rate                  5M;

     

       718
        
                   }

     

       719
        
       

     

       720
        
                   if ($request_method = 'OPTIONS') {

     

       721
        
                     ${nginxCommonHeaders}

     

       722
       -
                     add_header Access-Control-Max-Age         1728000;

     

       723
       -
                     add_header Content-Type                   'text/plain charset=UTF-8';

     

       724
       -
                     add_header Content-Length                 0;

     

       725
       -
                     return                                    204;

     

       0
        
       
     

       726
        
                   }

     

       727
        
                   if ($request_method = 'GET') {

     

       728
        
                     ${nginxCommonHeaders}

     

       0
        
       
     

       729
        
       

     

       730
       -
                     access_log                                off;

     

       731
        
                   }

     

       732
        
       

     

       733
       -
                   aio                                         threads;

     

       734
       -
                   sendfile                                    on;

     

       735
       -
                   sendfile_max_chunk                          1M;

     

       736
        
       

     

       737
       -
                   limit_rate                                  $peertube_limit_rate;

     

       738
       -
                   limit_rate_after                            5M;

     

       739
        
       

     

       740
       -
                   rewrite ^/static/streaming-playlists/(.*)$  /$1 break;

     

       741
        
                 '';

     

       742
        
               };

     

       743
        
       

     

       744
        
               locations."^~ /static/web-videos/" = {

     

       745
        
                 tryFiles = "$uri @api";

     

       746
       -
                 root = cfg.settings.storage.streaming_playlists;

     

       747
        
                 priority = 1470;

     

       748
        
                 extraConfig = ''

     

       749
       -
                   set $peertube_limit_rate                    800k;

     

       750
        
       

     

       751
        
                   if ($request_uri ~ -fragmented.mp4$) {

     

       752
       -
                     set $peertube_limit_rate                  5M;

     

       753
        
                   }

     

       754
        
       

     

       755
        
                   if ($request_method = 'OPTIONS') {

     

       756
        
                     ${nginxCommonHeaders}

     

       757
       -
                     add_header Access-Control-Max-Age         1728000;

     

       758
       -
                     add_header Content-Type                   'text/plain charset=UTF-8';

     

       759
       -
                     add_header Content-Length                 0;

     

       760
       -
                     return                                    204;

     

       0
        
       
     

       761
        
                   }

     

       762
        
                   if ($request_method = 'GET') {

     

       763
        
                     ${nginxCommonHeaders}

     

       0
        
       
     

       764
        
       

     

       765
       -
                     access_log                                off;

     

       766
        
                   }

     

       767
        
       

     

       768
       -
                   aio                                         threads;

     

       769
       -
                   sendfile                                    on;

     

       770
       -
                   sendfile_max_chunk                          1M;

     

       771
        
       

     

       772
       -
                   limit_rate                                  $peertube_limit_rate;

     

       773
       -
                   limit_rate_after                            5M;

     

       774
        
       

     

       775
       -
                   rewrite ^/static/streaming-playlists/(.*)$  /$1 break;

     

       776
        
                 '';

     

       777
        
               };

     

       778
        
       

     

       779
        
               locations."^~ /static/webseed/" = {

     

       780
        
                 tryFiles = "$uri @api";

     

       781
       -
                 root = cfg.settings.storage.videos;

     

       782
        
                 priority = 1480;

     

       783
        
                 extraConfig = ''

     

       784
       -
                   set $peertube_limit_rate                    800k;

     

       785
        
       

     

       786
        
                   if ($request_uri ~ -fragmented.mp4$) {

     

       787
       -
                     set $peertube_limit_rate                  5M;

     

       788
        
                   }

     

       789
        
       

     

       790
        
                   if ($request_method = 'OPTIONS') {

     

       791
        
                     ${nginxCommonHeaders}

     

       792
       -
                     add_header Access-Control-Max-Age         1728000;

     

       793
       -
                     add_header Content-Type                   'text/plain charset=UTF-8';

     

       794
       -
                     add_header Content-Length                 0;

     

       795
       -
                     return                                    204;

     

       0
        
       
     

       796
        
                   }

     

       797
        
                   if ($request_method = 'GET') {

     

       798
        
                     ${nginxCommonHeaders}

     

       0
        
       
     

       799
        
       

     

       800
       -
                     access_log                                off;

     

       801
        
                   }

     

       802
        
       

     

       803
       -
                   aio                                         threads;

     

       804
       -
                   sendfile                                    on;

     

       805
       -
                   sendfile_max_chunk                          1M;

     

       806
        
       

     

       807
       -
                   limit_rate                                  $peertube_limit_rate;

     

       808
       -
                   limit_rate_after                            5M;

     

       809
        
       

     

       810
       -
                   rewrite ^/static/webseed/(.*)$              /$1 break;

     

       811
        
                 '';

     

       812
        
               };

     

       813
       -
       

     

       814
       -
               extraConfig = lib.optionalString cfg.enableWebHttps ''

     

       815
       -
                 add_header Strict-Transport-Security          'max-age=63072000; includeSubDomains';

     

       816
       -
               '';

     

       817
        
             };

     

       818
        
           };

     

       819
        
       

     
···

       848
        
                 home = cfg.package;

     

       849
        
               };

     

       850
        
             })

     

       851
       -
             (lib.attrsets.setAttrByPath [ cfg.user "packages" ] [ cfg.package peertubeEnv peertubeCli pkgs.ffmpeg pkgs.nodejs_18 pkgs.yarn ])

     

       852
        
             (lib.mkIf cfg.redis.enableUnixSocket {${config.services.peertube.user}.extraGroups = [ "redis-peertube" ];})

     

       853
        
           ];

     

       854

···

       61
        
           eval -- "\$@"

     

       62
        
         '';

     

       63
        
       

     

       64
       +
         nginxCommonHeaders = lib.optionalString config.services.nginx.virtualHosts.${cfg.localDomain}.forceSSL ''

     

       65
       +
           add_header Strict-Transport-Security 'max-age=31536000';

     

       66
       +
         '' + lib.optionalString (config.services.nginx.virtualHosts.${cfg.localDomain}.quic && config.services.nginx.virtualHosts.${cfg.localDomain}.http3) ''

     

       67
       +
           add_header Alt-Svc 'h3=":$server_port"; ma=604800';

     

       68
        
         '';

     

       69
        
       

     

       70
       +
         nginxCommonHeadersExtra = ''

     

       71
       +
           add_header Access-Control-Allow-Origin '*';

     

       72
       +
           add_header Access-Control-Allow-Methods 'GET, OPTIONS';

     

       73
       +
           add_header Access-Control-Allow-Headers 'Range,DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type';

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       74
        
         '';

     

       75
        
       

     

       76
        
       in {

     
···

       328
        
             }

     

       329
        
           ];

     

       330
        
       

     

       331
       +
           environment.systemPackages = [ cfg.package.cli ];

     

       332
       +
       

     

       333
        
           services.peertube.settings = lib.mkMerge [

     

       334
        
             {

     

       335
        
               listen = {

     
···

       355
        
                 tmp_persistent = lib.mkDefault "/var/lib/peertube/storage/tmp_persistent/";

     

       356
        
                 bin = lib.mkDefault "/var/lib/peertube/storage/bin/";

     

       357
        
                 avatars = lib.mkDefault "/var/lib/peertube/storage/avatars/";

     

       358
       +
                 web_videos = lib.mkDefault "/var/lib/peertube/storage/web-videos/";

     

       359
        
                 streaming_playlists = lib.mkDefault "/var/lib/peertube/storage/streaming-playlists/";

     

       360
        
                 redundancy = lib.mkDefault "/var/lib/peertube/storage/redundancy/";

     

       361
        
                 logs = lib.mkDefault "/var/lib/peertube/storage/logs/";

     

       362
        
                 previews = lib.mkDefault "/var/lib/peertube/storage/previews/";

     

       363
        
                 thumbnails = lib.mkDefault "/var/lib/peertube/storage/thumbnails/";

     

       364
       +
                 storyboards = lib.mkDefault "/var/lib/peertube/storage/storyboards/";

     

       365
        
                 torrents = lib.mkDefault "/var/lib/peertube/storage/torrents/";

     

       366
        
                 captions = lib.mkDefault "/var/lib/peertube/storage/captions/";

     

       367
        
                 cache = lib.mkDefault "/var/lib/peertube/storage/cache/";

     
···

       429
        
       

     

       430
        
             environment = env;

     

       431
        
       

     

       432
       +
             path = with pkgs; [ nodejs_18 yarn ffmpeg-headless openssl ];

     

       433
        
       

     

       434
        
             script = ''

     

       435
        
               #!/bin/sh

     
···

       457
        
               ln -sf ${cfg.package}/config/default.yaml /var/lib/peertube/config/default.yaml

     

       458
        
               ln -sf ${cfg.package}/client/dist -T /var/lib/peertube/www/client

     

       459
        
               ln -sf ${cfg.settings.storage.client_overrides} -T /var/lib/peertube/www/client-overrides

     

       460
       +
               node dist/server

     

       461
        
             '';

     

       462
        
             serviceConfig = {

     

       463
        
               Type = "simple";

     
···

       489
        
       

     

       490
        
           services.nginx = lib.mkIf cfg.configureNginx {

     

       491
        
             enable = true;

     

       492
       +
             upstreams."peertube".servers = {

     

       493
       +
               "127.0.0.1:${toString cfg.listenHttp}".fail_timeout = "0";

     

       494
       +
             };

     

       495
        
             virtualHosts."${cfg.localDomain}" = {

     

       496
        
               root = "/var/lib/peertube/www";

     

       497
        
       

     
···

       501
        
                 priority = 1110;

     

       502
        
               };

     

       503
        
       

     

       504
       +
               locations."~ ^/api/v1/videos/(upload-resumable|([^/]+/source/replace-resumable))$" = {

     

       505
        
                 tryFiles = "/dev/null @api";

     

       506
        
                 priority = 1120;

     

       507
        
       

     

       508
        
                 extraConfig = ''

     

       509
       +
                   client_max_body_size 0;

     

       510
       +
                   proxy_request_buffering off;

     

       511
       +
                 '' + nginxCommonHeaders;

     

       512
        
               };

     

       513
        
       

     

       514
        
               locations."~ ^/api/v1/videos/(upload|([^/]+/studio/edit))$" = {

     
···

       517
        
                 priority = 1130;

     

       518
        
       

     

       519
        
                 extraConfig = ''

     

       520
       +
                   limit_except POST HEAD { deny all; }

     

       521
       +
       

     

       522
       +
                   client_max_body_size 12G;

     

       523
       +
                   add_header X-File-Maximum-Size 8G always;

     

       524
       +
                 '' + nginxCommonHeaders;

     

       0
        
       
     

       0
        
       
     

       525
        
               };

     

       526
        
       

     

       527
        
               locations."~ ^/api/v1/runners/jobs/[^/]+/(update|success)$" = {

     
···

       530
        
                 priority = 1135;

     

       531
        
       

     

       532
        
                 extraConfig = ''

     

       533
       +
                   client_max_body_size 12G;

     

       534
       +
                   add_header X-File-Maximum-Size 8G always;

     

       535
       +
                 '' + nginxCommonHeaders;

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       536
        
               };

     

       537
        
       

     

       538
        
               locations."~ ^/api/v1/(videos|video-playlists|video-channels|users/me)" = {

     
···

       540
        
                 priority = 1140;

     

       541
        
       

     

       542
        
                 extraConfig = ''

     

       543
       +
                   client_max_body_size 6M;

     

       544
       +
                   add_header X-File-Maximum-Size 4M always;

     

       545
       +
                 '' + nginxCommonHeaders;

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       546
        
               };

     

       547
        
       

     

       548
        
               locations."@api" = {

     

       549
       +
                 proxyPass = "http://peertube";

     

       550
        
                 priority = 1150;

     

       551
        
       

     

       552
        
                 extraConfig = ''

     

       553
       +
                   proxy_set_header Host $host;

     

       554
       +
                   proxy_set_header X-Real-IP $remote_addr;

     

       555
       +
                   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

     

       556
        
       

     

       557
       +
                   proxy_connect_timeout 10m;

     

       558
        
       

     

       559
       +
                   proxy_send_timeout 10m;

     

       560
       +
                   proxy_read_timeout 10m;

     

       561
        
       

     

       562
       +
                   client_max_body_size 100k;

     

       563
       +
                   send_timeout 10m;

     

       564
       +
                 ''+ nginxCommonHeaders;

     

       565
        
               };

     

       566
        
       

     

       567
        
               # Websocket

     
···

       575
        
                 priority = 1220;

     

       576
        
       

     

       577
        
                 extraConfig = ''

     

       578
       +
                   proxy_read_timeout 15m;

     

       579
        
                 '';

     

       580
        
               };

     

       581
        
       

     
···

       585
        
               };

     

       586
        
       

     

       587
        
               locations."@api_websocket" = {

     

       588
       +
                 proxyPass = "http://peertube";

     

       589
        
                 priority = 1240;

     

       590
        
       

     

       591
        
                 extraConfig = ''

     

       592
       +
                   proxy_http_version 1.1;

     

       593
       +
                   proxy_set_header Upgrade $http_upgrade;

     

       594
       +
                   proxy_set_header Connection 'upgrade';

     

       595
       +
                   proxy_set_header Host $host;

     

       596
       +
                   proxy_set_header X-Real-IP $remote_addr;

     

       597
       +
                   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

     

       598
        
       

     

       599
       +
                 '' + nginxCommonHeaders;

     

       0
        
       
     

       600
        
               };

     

       601
        
       

     

       602
        
               # Bypass PeerTube for performance reasons.

     

       603
        
               locations."~ ^/client/(assets/images/(icons/icon-36x36\.png|icons/icon-48x48\.png|icons/icon-72x72\.png|icons/icon-96x96\.png|icons/icon-144x144\.png|icons/icon-192x192\.png|icons/icon-512x512\.png|logo\.svg|favicon\.png|default-playlist\.jpg|default-avatar-account\.png|default-avatar-account-48x48\.png|default-avatar-video-channel\.png|default-avatar-video-channel-48x48\.png))$" = {

     

       604
        
                 tryFiles = "/client-overrides/$1 /client/$1 $1";

     

       605
        
                 priority = 1310;

     

       606
       +
       

     

       607
       +
                 extraConfig = nginxCommonHeaders;

     

       608
        
               };

     

       609
        
       

     

       610
        
               locations."~ ^/client/(.*\.(js|css|png|svg|woff2|otf|ttf|woff|eot))$" = {

     

       611
        
                 alias = "${cfg.package}/client/dist/$1";

     

       612
        
                 priority = 1320;

     

       613
        
                 extraConfig = ''

     

       614
       +
                   add_header Cache-Control 'public, max-age=604800, immutable';

     

       615
       +
                 '' + nginxCommonHeaders;

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       616
        
               };

     

       617
        
       

     

       618
        
               locations."^~ /download/" = {

     

       619
       +
                 proxyPass = "http://peertube";

     

       620
        
                 priority = 1410;

     

       621
        
                 extraConfig = ''

     

       622
       +
                   proxy_set_header Host $host;

     

       623
       +
                   proxy_set_header X-Real-IP $remote_addr;

     

       624
       +
                   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

     

       625
        
       

     

       626
       +
                   proxy_limit_rate 5M;

     

       627
       +
                 '' + nginxCommonHeaders;

     

       628
        
               };

     

       629
        
       

     

       630
       +
               locations."^~ /static/streaming-playlists/hls/private/" = {

     

       631
       +
                 proxyPass = "http://peertube";

     

       632
        
                 priority = 1420;

     

       633
        
                 extraConfig = ''

     

       634
       +
                   proxy_set_header Host $host;

     

       635
       +
                   proxy_set_header X-Real-IP $remote_addr;

     

       636
       +
                   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

     

       637
        
       

     

       638
       +
                   proxy_limit_rate 5M;

     

       639
       +
                 '' + nginxCommonHeaders;

     

       640
        
               };

     

       641
        
       

     

       642
        
               locations."^~ /static/web-videos/private/" = {

     

       643
       +
                 proxyPass = "http://peertube";

     

       644
        
                 priority = 1430;

     

       645
        
                 extraConfig = ''

     

       646
       +
                   proxy_set_header Host $host;

     

       647
       +
                   proxy_set_header X-Real-IP $remote_addr;

     

       648
       +
                   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

     

       649
        
       

     

       650
       +
                   proxy_limit_rate 5M;

     

       651
       +
                 '' + nginxCommonHeaders;

     

       652
        
               };

     

       653
        
       

     

       654
        
               locations."^~ /static/webseed/private/" = {

     

       655
       +
                 proxyPass = "http://peertube";

     

       656
        
                 priority = 1440;

     

       657
        
                 extraConfig = ''

     

       658
       +
                   proxy_set_header Host $host;

     

       659
       +
                   proxy_set_header X-Real-IP $remote_addr;

     

       660
       +
                   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

     

       661
        
       

     

       662
       +
                   proxy_limit_rate 5M;

     

       663
       +
                 '' + nginxCommonHeaders;

     

       664
        
               };

     

       665
        
       

     

       666
        
               locations."^~ /static/redundancy/" = {

     
···

       668
        
                 root = cfg.settings.storage.redundancy;

     

       669
        
                 priority = 1450;

     

       670
        
                 extraConfig = ''

     

       671
       +
                   set $peertube_limit_rate 800k;

     

       672
        
       

     

       673
        
                   if ($request_uri ~ -fragmented.mp4$) {

     

       674
       +
                     set $peertube_limit_rate 5M;

     

       675
        
                   }

     

       676
        
       

     

       677
        
                   if ($request_method = 'OPTIONS') {

     

       678
        
                     ${nginxCommonHeaders}

     

       679
       +
                     ${nginxCommonHeadersExtra}

     

       680
       +
                     add_header Access-Control-Max-Age 1728000;

     

       681
       +
                     add_header Content-Type 'text/plain charset=UTF-8';

     

       682
       +
                     add_header Content-Length 0;

     

       683
       +
                     return 204;

     

       684
        
                   }

     

       685
        
                   if ($request_method = 'GET') {

     

       686
        
                     ${nginxCommonHeaders}

     

       687
       +
                     ${nginxCommonHeadersExtra}

     

       688
        
       

     

       689
       +
                     access_log off;

     

       690
        
                   }

     

       691
        
       

     

       692
       +
                   aio threads;

     

       693
       +
                   sendfile on;

     

       694
       +
                   sendfile_max_chunk 1M;

     

       695
        
       

     

       696
       +
                   limit_rate $peertube_limit_rate;

     

       697
       +
                   limit_rate_after 5M;

     

       698
        
       

     

       699
       +
                   rewrite ^/static/redundancy/(.*)$ /$1 break;

     

       700
        
                 '';

     

       701
        
               };

     

       702
        
       

     
···

       705
        
                 root = cfg.settings.storage.streaming_playlists;

     

       706
        
                 priority = 1460;

     

       707
        
                 extraConfig = ''

     

       708
       +
                   set $peertube_limit_rate 800k;

     

       709
        
       

     

       710
        
                   if ($request_uri ~ -fragmented.mp4$) {

     

       711
       +
                     set $peertube_limit_rate 5M;

     

       712
        
                   }

     

       713
        
       

     

       714
        
                   if ($request_method = 'OPTIONS') {

     

       715
        
                     ${nginxCommonHeaders}

     

       716
       +
                     ${nginxCommonHeadersExtra}

     

       717
       +
                     add_header Access-Control-Max-Age 1728000;

     

       718
       +
                     add_header Content-Type 'text/plain charset=UTF-8';

     

       719
       +
                     add_header Content-Length 0;

     

       720
       +
                     return 204;

     

       721
        
                   }

     

       722
        
                   if ($request_method = 'GET') {

     

       723
        
                     ${nginxCommonHeaders}

     

       724
       +
                     ${nginxCommonHeadersExtra}

     

       725
        
       

     

       726
       +
                     access_log off;

     

       727
        
                   }

     

       728
        
       

     

       729
       +
                   aio threads;

     

       730
       +
                   sendfile on;

     

       731
       +
                   sendfile_max_chunk 1M;

     

       732
        
       

     

       733
       +
                   limit_rate $peertube_limit_rate;

     

       734
       +
                   limit_rate_after 5M;

     

       735
        
       

     

       736
       +
                   rewrite ^/static/streaming-playlists/(.*)$ /$1 break;

     

       737
        
                 '';

     

       738
        
               };

     

       739
        
       

     

       740
        
               locations."^~ /static/web-videos/" = {

     

       741
        
                 tryFiles = "$uri @api";

     

       742
       +
                 root = cfg.settings.storage.web_videos;

     

       743
        
                 priority = 1470;

     

       744
        
                 extraConfig = ''

     

       745
       +
                   set $peertube_limit_rate 800k;

     

       746
        
       

     

       747
        
                   if ($request_uri ~ -fragmented.mp4$) {

     

       748
       +
                     set $peertube_limit_rate 5M;

     

       749
        
                   }

     

       750
        
       

     

       751
        
                   if ($request_method = 'OPTIONS') {

     

       752
        
                     ${nginxCommonHeaders}

     

       753
       +
                     ${nginxCommonHeadersExtra}

     

       754
       +
                     add_header Access-Control-Max-Age 1728000;

     

       755
       +
                     add_header Content-Type 'text/plain charset=UTF-8';

     

       756
       +
                     add_header Content-Length 0;

     

       757
       +
                     return 204;

     

       758
        
                   }

     

       759
        
                   if ($request_method = 'GET') {

     

       760
        
                     ${nginxCommonHeaders}

     

       761
       +
                     ${nginxCommonHeadersExtra}

     

       762
        
       

     

       763
       +
                     access_log off;

     

       764
        
                   }

     

       765
        
       

     

       766
       +
                   aio threads;

     

       767
       +
                   sendfile on;

     

       768
       +
                   sendfile_max_chunk 1M;

     

       769
        
       

     

       770
       +
                   limit_rate $peertube_limit_rate;

     

       771
       +
                   limit_rate_after 5M;

     

       772
        
       

     

       773
       +
                   rewrite ^/static/web-videos/(.*)$ /$1 break;

     

       774
        
                 '';

     

       775
        
               };

     

       776
        
       

     

       777
        
               locations."^~ /static/webseed/" = {

     

       778
        
                 tryFiles = "$uri @api";

     

       779
       +
                 root = cfg.settings.storage.web_videos;

     

       780
        
                 priority = 1480;

     

       781
        
                 extraConfig = ''

     

       782
       +
                   set $peertube_limit_rate 800k;

     

       783
        
       

     

       784
        
                   if ($request_uri ~ -fragmented.mp4$) {

     

       785
       +
                     set $peertube_limit_rate 5M;

     

       786
        
                   }

     

       787
        
       

     

       788
        
                   if ($request_method = 'OPTIONS') {

     

       789
        
                     ${nginxCommonHeaders}

     

       790
       +
                     ${nginxCommonHeadersExtra}

     

       791
       +
                     add_header Access-Control-Max-Age 1728000;

     

       792
       +
                     add_header Content-Type 'text/plain charset=UTF-8';

     

       793
       +
                     add_header Content-Length 0;

     

       794
       +
                     return 204;

     

       795
        
                   }

     

       796
        
                   if ($request_method = 'GET') {

     

       797
        
                     ${nginxCommonHeaders}

     

       798
       +
                     ${nginxCommonHeadersExtra}

     

       799
        
       

     

       800
       +
                     access_log off;

     

       801
        
                   }

     

       802
        
       

     

       803
       +
                   aio threads;

     

       804
       +
                   sendfile on;

     

       805
       +
                   sendfile_max_chunk 1M;

     

       806
        
       

     

       807
       +
                   limit_rate $peertube_limit_rate;

     

       808
       +
                   limit_rate_after 5M;

     

       809
        
       

     

       810
       +
                   rewrite ^/static/webseed/(.*)$ /web-videos/$1 break;

     

       811
        
                 '';

     

       812
        
               };

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       813
        
             };

     

       814
        
           };

     

       815
        
       

     
···

       844
        
                 home = cfg.package;

     

       845
        
               };

     

       846
        
             })

     

       847
       +
             (lib.attrsets.setAttrByPath [ cfg.user "packages" ] [ peertubeEnv pkgs.nodejs_18 pkgs.yarn pkgs.ffmpeg-headless ])

     

       848
        
             (lib.mkIf cfg.redis.enableUnixSocket {${config.services.peertube.user}.extraGroups = [ "redis-peertube" ];})

     

       849
        
           ];

     

       850

+19 -9

nixos/tests/web-apps/peertube.nix

···

       17
        
             services.postgresql = {

     

       18
        
               enable = true;

     

       19
        
               enableTCPIP = true;

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       20
        
               authentication = ''

     

       21
       -
                 hostnossl peertube_local peertube_test 192.168.2.11/32 md5

     

       22
        
               '';

     

       23
        
               initialScript = pkgs.writeText "postgresql_init.sql" ''

     

       24
        
                 CREATE ROLE peertube_test LOGIN PASSWORD '0gUN0C1mgST6czvjZ8T9';

     

       25
       -
                 CREATE DATABASE peertube_local TEMPLATE template0 ENCODING UTF8;

     

       26
       -
                 GRANT ALL PRIVILEGES ON DATABASE peertube_local TO peertube_test;

     

       27
       -
                 \connect peertube_local

     

       28
       -
                 CREATE EXTENSION IF NOT EXISTS pg_trgm;

     

       29
       -
                 CREATE EXTENSION IF NOT EXISTS unaccent;

     

       30
        
               '';

     

       31
        
             };

     

       32
        
       

     
···

       41
        
           server = { pkgs, ... }: {

     

       42
        
             environment = {

     

       43
        
               etc = {

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       44
        
                 "peertube/secrets-peertube".text = ''

     

       45
        
                   063d9c60d519597acef26003d5ecc32729083965d09181ef3949200cbe5f09ee

     

       46
        
                 '';

     
···

       70
        
               localDomain = "peertube.local";

     

       71
        
               enableWebHttps = false;

     

       72
        
       

     

       0
        
       
     

       0
        
       
     

       73
        
               secrets = {

     

       74
        
                 secretsFile = "/etc/peertube/secrets-peertube";

     

       75
        
               };

     

       76
        
       

     

       77
        
               database = {

     

       78
        
                 host = "192.168.2.10";

     

       79
       -
                 name = "peertube_local";

     

       80
        
                 user = "peertube_test";

     

       81
        
                 passwordFile = "/etc/peertube/password-posgressql-db";

     

       82
        
               };

     
···

       99
        
           };

     

       100
        
       

     

       101
        
           client = {

     

       102
       -
             environment.systemPackages = [ pkgs.jq ];

     

       103
        
             networking = {

     

       104
        
              interfaces.eth1 = {

     

       105
        
                 ipv4.addresses = [

     
···

       130
        
           client.succeed("curl --fail http://peertube.local:9000/api/v1/config/about | jq -r '.instance.name' | grep 'PeerTube\ Test\ Server'")

     

       131
        
       

     

       132
        
           # Check PeerTube CLI version

     

       133
       -
           assert "${pkgs.peertube.version}" in server.succeed('su - peertube -s /bin/sh -c "peertube --version"')

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       134
        
       

     

       135
        
           client.shutdown()

     

       136
        
           server.shutdown()

···

       17
        
             services.postgresql = {

     

       18
        
               enable = true;

     

       19
        
               enableTCPIP = true;

     

       20
       +
               ensureDatabases = [ "peertube_test" ];

     

       21
       +
               ensureUsers = [

     

       22
       +
                 {

     

       23
       +
                   name = "peertube_test";

     

       24
       +
                   ensureDBOwnership = true;

     

       25
       +
                 }

     

       26
       +
               ];

     

       27
        
               authentication = ''

     

       28
       +
                 hostnossl peertube_test peertube_test 192.168.2.11/32 md5

     

       29
        
               '';

     

       30
        
               initialScript = pkgs.writeText "postgresql_init.sql" ''

     

       31
        
                 CREATE ROLE peertube_test LOGIN PASSWORD '0gUN0C1mgST6czvjZ8T9';

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       32
        
               '';

     

       33
        
             };

     

       34
        
       

     
···

       43
        
           server = { pkgs, ... }: {

     

       44
        
             environment = {

     

       45
        
               etc = {

     

       46
       +
                 "peertube/password-init-root".text = ''

     

       47
       +
                   PT_INITIAL_ROOT_PASSWORD=zw4SqYVdcsXUfRX8aaFX

     

       48
       +
                 '';

     

       49
        
                 "peertube/secrets-peertube".text = ''

     

       50
        
                   063d9c60d519597acef26003d5ecc32729083965d09181ef3949200cbe5f09ee

     

       51
        
                 '';

     
···

       75
        
               localDomain = "peertube.local";

     

       76
        
               enableWebHttps = false;

     

       77
        
       

     

       78
       +
               serviceEnvironmentFile = "/etc/peertube/password-init-root";

     

       79
       +
       

     

       80
        
               secrets = {

     

       81
        
                 secretsFile = "/etc/peertube/secrets-peertube";

     

       82
        
               };

     

       83
        
       

     

       84
        
               database = {

     

       85
        
                 host = "192.168.2.10";

     

       86
       +
                 name = "peertube_test";

     

       87
        
                 user = "peertube_test";

     

       88
        
                 passwordFile = "/etc/peertube/password-posgressql-db";

     

       89
        
               };

     
···

       106
        
           };

     

       107
        
       

     

       108
        
           client = {

     

       109
       +
             environment.systemPackages = [ pkgs.jq pkgs.peertube.cli ];

     

       110
        
             networking = {

     

       111
        
              interfaces.eth1 = {

     

       112
        
                 ipv4.addresses = [

     
···

       137
        
           client.succeed("curl --fail http://peertube.local:9000/api/v1/config/about | jq -r '.instance.name' | grep 'PeerTube\ Test\ Server'")

     

       138
        
       

     

       139
        
           # Check PeerTube CLI version

     

       140
       +
           client.succeed('peertube-cli auth add -u "http://peertube.local:9000" -U "root" --password "zw4SqYVdcsXUfRX8aaFX"')

     

       141
       +
           client.succeed('peertube-cli auth list | grep "http://peertube.local:9000"')

     

       142
       +
           client.succeed('peertube-cli auth del "http://peertube.local:9000"')

     

       143
       +
           client.fail('peertube-cli auth list | grep "http://peertube.local:9000"')

     

       144
        
       

     

       145
        
           client.shutdown()

     

       146
        
           server.shutdown()

+68 -34

pkgs/servers/peertube/default.nix

···

       17
        
           x86_64-linux = {

     

       18
        
             arch = "linux-x64";

     

       19
        
             libc = "glibc";

     

       20
       -
             hash = "sha256-I1ceMi7h6flvKBmMIU1qjAU1S6z5MzguHDul3g1zMKw=";

     

       21
        
           };

     

       22
        
           aarch64-linux = {

     

       23
        
             arch = "linux-arm64";

     

       24
        
             libc = "glibc";

     

       25
       -
             hash = "sha256-q8BR7kILYV8i8ozDkpcuKarf4s1TgRqOrUeLqjdWEQ0=";

     

       26
        
           };

     

       27
        
           x86_64-darwin = {

     

       28
        
             arch = "darwin-x64";

     

       29
        
             libc = "unknown";

     

       30
       -
             hash = "sha256-ONnXtRxcYFuFz+rmVTg+yEKe6J/vfKahX2i6k8dQStg=";

     

       31
        
           };

     

       32
        
           aarch64-darwin = {

     

       33
        
             arch = "darwin-arm64";

     

       34
        
             libc = "unknown";

     

       35
       -
             hash = "sha256-VesAcT/IF2cvJVncJoqZcAvFxw32SN70C60GLU2kmVI=";

     

       36
        
           };

     

       37
        
         };

     

       38
        
         bcryptAttrs = bcryptHostPlatformAttrs."${stdenv.hostPlatform.system}" or

     

       39
        
           (throw "Unsupported architecture: ${stdenv.hostPlatform.system}");

     

       40
       -
         bcryptVersion = "5.1.0";

     

       41
        
         bcryptLib = fetchurl {

     

       42
        
           url = "https://github.com/kelektiv/node.bcrypt.js/releases/download/v${bcryptVersion}/bcrypt_lib-v${bcryptVersion}-napi-v3-${bcryptAttrs.arch}-${bcryptAttrs.libc}.tar.gz";

     

       43
        
           inherit (bcryptAttrs) hash;

     
···

       45
        
       in

     

       46
        
       stdenv.mkDerivation rec {

     

       47
        
         pname = "peertube";

     

       48
       -
         version = "5.2.1";

     

       49
        
       

     

       50
        
         src = fetchFromGitHub {

     

       51
        
           owner = "Chocobozzz";

     

       52
        
           repo = "PeerTube";

     

       53
        
           rev = "v${version}";

     

       54
       -
           hash = "sha256-8JzU0JVb+JQCNiro8hPHBwkofNTUy90YkSCzTOoB+/A=";

     

       55
        
         };

     

       56
        
       

     

       57
        
         yarnOfflineCacheServer = fetchYarnDeps {

     

       58
        
           yarnLock = "${src}/yarn.lock";

     

       59
       -
           hash = "sha256-pzXH6hdDf8O6Kr12Xw0jRcnPRD2TrDGdiEfxVr3KmwY=";

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       60
        
         };

     

       61
        
       

     

       62
       -
         yarnOfflineCacheTools = fetchYarnDeps {

     

       63
       -
           yarnLock = "${src}/server/tools/yarn.lock";

     

       64
       -
           hash = "sha256-maPR8OCiuNlle0JQIkZSgAqW+BrSxPwVm6CkxIrIg5k=";

     

       65
        
         };

     

       66
        
       

     

       67
       -
         yarnOfflineCacheClient = fetchYarnDeps {

     

       68
       -
           yarnLock = "${src}/client/yarn.lock";

     

       69
       -
           hash = "sha256-Ejzk/VEx7YtJpsrkHcXAZnJ+yRx1VhBJGpqquHYULNU=";

     

       70
        
         };

     

       71
        
       

     

       72
       -
         nativeBuildInputs = [ brotli prefetch-yarn-deps jq nodejs which yarn ];

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       73
        
       

     

       74
        
         buildPhase = ''

     

       75
        
           # Build node modules

     

       76
        
           export HOME=$PWD

     

       77
        
           fixup-yarn-lock ~/yarn.lock

     

       78
       -
           fixup-yarn-lock ~/server/tools/yarn.lock

     

       79
        
           fixup-yarn-lock ~/client/yarn.lock

     

       0
        
       
     

       0
        
       
     

       80
        
           yarn config --offline set yarn-offline-mirror $yarnOfflineCacheServer

     

       81
       -
           yarn install --offline --frozen-lockfile --ignore-engines --ignore-scripts --no-progress

     

       82
       -
           cd ~/server/tools

     

       83
       -
           yarn config --offline set yarn-offline-mirror $yarnOfflineCacheTools

     

       84
        
           yarn install --offline --frozen-lockfile --ignore-engines --ignore-scripts --no-progress

     

       85
        
           cd ~/client

     

       86
        
           yarn config --offline set yarn-offline-mirror $yarnOfflineCacheClient

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       87
        
           yarn install --offline --frozen-lockfile --ignore-engines --ignore-scripts --no-progress

     

       88
        
       

     

       89
       -
           patchShebangs ~/node_modules

     

       90
       -
           patchShebangs ~/server/tools/node_modules

     

       91
       -
           patchShebangs ~/client/node_modules

     

       92
       -
           patchShebangs ~/scripts

     

       93
        
       

     

       94
        
           # Fix bcrypt node module

     

       95
        
           cd ~/node_modules/bcrypt

     
···

       103
        
           cd ~

     

       104
        
       

     

       105
        
           # Build PeerTube server

     

       106
       -
           npm run tsc -- --build ./tsconfig.json

     

       107
       -
           npm run resolve-tspaths:server

     

       108
       -
           cp -r "./server/static" "./server/assets" "./dist/server"

     

       109
       -
           cp -r "./server/lib/emails" "./dist/server/lib"

     

       110
       -
       

     

       111
       -
           # Build PeerTube tools

     

       112
       -
           cp -r "./server/tools/node_modules" "./dist/server/tools"

     

       113
       -
           npm run tsc -- --build ./server/tools/tsconfig.json

     

       114
       -
           npm run resolve-tspaths:server

     

       115
        
       

     

       116
        
           # Build PeerTube client

     

       117
        
           npm run build:client

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       118
        
         '';

     

       119
        
       

     

       120
        
         installPhase = ''

     

       121
        
           mkdir -p $out/dist

     

       122
        
           mv ~/dist $out

     

       123
        
           mv ~/node_modules $out/node_modules

     

       124
       -
           mv ~/server/tools/node_modules $out/dist/server/tools/node_modules

     

       125
        
           mkdir $out/client

     

       126
        
           mv ~/client/{dist,node_modules,package.json,yarn.lock} $out/client

     

       127
       -
           mv ~/{config,scripts,support,CREDITS.md,FAQ.md,LICENSE,README.md,package.json,tsconfig.json,yarn.lock} $out

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       128
        
       

     

       129
        
           # Create static gzip and brotli files

     

       130
        
           find $out/client/dist -type f -regextype posix-extended -iregex '.*\.(css|eot|html|js|json|svg|webmanifest|xlf)' | while read file; do

···

       17
        
           x86_64-linux = {

     

       18
        
             arch = "linux-x64";

     

       19
        
             libc = "glibc";

     

       20
       +
             hash = "sha256-C5N6VgFtXPLLjZt0ZdRTX095njRIT+12ONuUaBBj7fQ=";

     

       21
        
           };

     

       22
        
           aarch64-linux = {

     

       23
        
             arch = "linux-arm64";

     

       24
        
             libc = "glibc";

     

       25
       +
             hash = "sha256-TerDujO+IkSRnHYlSbAKSP9IS7AT7XnQJsZ8D8pCoGc=";

     

       26
        
           };

     

       27
        
           x86_64-darwin = {

     

       28
        
             arch = "darwin-x64";

     

       29
        
             libc = "unknown";

     

       30
       +
             hash = "sha256-gphOONWujbeCCr6dkmMRJP94Dhp1Jvp2yt+g7n1HTv0=";

     

       31
        
           };

     

       32
        
           aarch64-darwin = {

     

       33
        
             arch = "darwin-arm64";

     

       34
        
             libc = "unknown";

     

       35
       +
             hash = "sha256-JMnELVUxoU1C57Tzue3Sg6OfDFAjfCnzgDit0BWzmlo=";

     

       36
        
           };

     

       37
        
         };

     

       38
        
         bcryptAttrs = bcryptHostPlatformAttrs."${stdenv.hostPlatform.system}" or

     

       39
        
           (throw "Unsupported architecture: ${stdenv.hostPlatform.system}");

     

       40
       +
         bcryptVersion = "5.1.1";

     

       41
        
         bcryptLib = fetchurl {

     

       42
        
           url = "https://github.com/kelektiv/node.bcrypt.js/releases/download/v${bcryptVersion}/bcrypt_lib-v${bcryptVersion}-napi-v3-${bcryptAttrs.arch}-${bcryptAttrs.libc}.tar.gz";

     

       43
        
           inherit (bcryptAttrs) hash;

     
···

       45
        
       in

     

       46
        
       stdenv.mkDerivation rec {

     

       47
        
         pname = "peertube";

     

       48
       +
         version = "6.0.3";

     

       49
        
       

     

       50
        
         src = fetchFromGitHub {

     

       51
        
           owner = "Chocobozzz";

     

       52
        
           repo = "PeerTube";

     

       53
        
           rev = "v${version}";

     

       54
       +
           hash = "sha256-Pskxfi+qqVk75hu22niLNFsToCJks1k8w8mTnXjr6jg=";

     

       55
        
         };

     

       56
        
       

     

       57
        
         yarnOfflineCacheServer = fetchYarnDeps {

     

       58
        
           yarnLock = "${src}/yarn.lock";

     

       59
       +
           hash = "sha256-RJX92EgEIXWB1wNFRl8FvseOqBT+7m6gs+pMyoodruk=";

     

       60
       +
         };

     

       61
       +
       

     

       62
       +
         yarnOfflineCacheClient = fetchYarnDeps {

     

       63
       +
           yarnLock = "${src}/client/yarn.lock";

     

       64
       +
           hash = "sha256-vr9xn5NXwiUS59Kgl8olCtkMgxnI1TKQzibKbb8RNXA=";

     

       65
        
         };

     

       66
        
       

     

       67
       +
         yarnOfflineCacheAppsCli = fetchYarnDeps {

     

       68
       +
           yarnLock = "${src}/apps/peertube-cli/yarn.lock";

     

       69
       +
           hash = "sha256-xsB71bnaPn/9/f1KHyU3TTwx+Q+1dLjWmNK2aVJgoRY=";

     

       70
        
         };

     

       71
        
       

     

       72
       +
         yarnOfflineCacheAppsRunner = fetchYarnDeps {

     

       73
       +
           yarnLock = "${src}/apps/peertube-runner/yarn.lock";

     

       74
       +
           hash = "sha256-9w3aLuiLs7SU00YwuE0ixfiD77gCakXT4YeRpfsgGz0=";

     

       75
        
         };

     

       76
        
       

     

       77
       +
         outputs = [ "out" "cli" "runner" ];

     

       78
       +
       

     

       79
       +
         nativeBuildInputs = [ brotli prefetch-yarn-deps jq which yarn ];

     

       80
       +
       

     

       81
       +
         buildInputs = [ nodejs ];

     

       82
        
       

     

       83
        
         buildPhase = ''

     

       84
        
           # Build node modules

     

       85
        
           export HOME=$PWD

     

       86
        
           fixup-yarn-lock ~/yarn.lock

     

       0
        
       
     

       87
        
           fixup-yarn-lock ~/client/yarn.lock

     

       88
       +
           fixup-yarn-lock ~/apps/peertube-cli/yarn.lock

     

       89
       +
           fixup-yarn-lock ~/apps/peertube-runner/yarn.lock

     

       90
        
           yarn config --offline set yarn-offline-mirror $yarnOfflineCacheServer

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       91
        
           yarn install --offline --frozen-lockfile --ignore-engines --ignore-scripts --no-progress

     

       92
        
           cd ~/client

     

       93
        
           yarn config --offline set yarn-offline-mirror $yarnOfflineCacheClient

     

       94
       +
           yarn install --offline --frozen-lockfile --ignore-engines --ignore-scripts --no-progress

     

       95
       +
           cd ~/apps/peertube-cli

     

       96
       +
           yarn config --offline set yarn-offline-mirror $yarnOfflineCacheAppsCli

     

       97
       +
           yarn install --offline --frozen-lockfile --ignore-engines --ignore-scripts --no-progress

     

       98
       +
           cd ~/apps/peertube-runner

     

       99
       +
           yarn config --offline set yarn-offline-mirror $yarnOfflineCacheAppsRunner

     

       100
        
           yarn install --offline --frozen-lockfile --ignore-engines --ignore-scripts --no-progress

     

       101
        
       

     

       102
       +
           patchShebangs ~/{node_modules,client/node_modules,/apps/peertube-cli/node_modules,apps/peertube-runner/node_modules,scripts}

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       103
        
       

     

       104
        
           # Fix bcrypt node module

     

       105
        
           cd ~/node_modules/bcrypt

     
···

       113
        
           cd ~

     

       114
        
       

     

       115
        
           # Build PeerTube server

     

       116
       +
           npm run build:server

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       117
        
       

     

       118
        
           # Build PeerTube client

     

       119
        
           npm run build:client

     

       120
       +
       

     

       121
       +
           # Build PeerTube cli

     

       122
       +
           npm run build:peertube-cli

     

       123
       +
           patchShebangs ~/apps/peertube-cli/dist/peertube.js

     

       124
       +
       

     

       125
       +
           # Build PeerTube runner

     

       126
       +
           npm run build:peertube-runner

     

       127
       +
           patchShebangs ~/apps/peertube-runner/dist/peertube-runner.js

     

       128
       +
       

     

       129
       +
           # Clean up declaration files

     

       130
       +
           find ~/dist/ \

     

       131
       +
             ~/packages/core-utils/dist/ \

     

       132
       +
             ~/packages/ffmpeg/dist/ \

     

       133
       +
             ~/packages/models/dist/ \

     

       134
       +
             ~/packages/node-utils/dist/ \

     

       135
       +
             ~/packages/server-commands/dist/ \

     

       136
       +
             ~/packages/typescript-utils/dist/ \

     

       137
       +
             \( -name '*.d.ts' -o -name '*.d.ts.map' \) -type f -delete

     

       138
        
         '';

     

       139
        
       

     

       140
        
         installPhase = ''

     

       141
        
           mkdir -p $out/dist

     

       142
        
           mv ~/dist $out

     

       143
        
           mv ~/node_modules $out/node_modules

     

       0
        
       
     

       144
        
           mkdir $out/client

     

       145
        
           mv ~/client/{dist,node_modules,package.json,yarn.lock} $out/client

     

       146
       +
           mkdir -p $out/packages/{core-utils,ffmpeg,models,node-utils,server-commands,typescript-utils}

     

       147
       +
           mv ~/packages/core-utils/{dist,package.json} $out/packages/core-utils

     

       148
       +
           mv ~/packages/ffmpeg/{dist,package.json} $out/packages/ffmpeg

     

       149
       +
           mv ~/packages/models/{dist,package.json} $out/packages/models

     

       150
       +
           mv ~/packages/node-utils/{dist,package.json} $out/packages/node-utils

     

       151
       +
           mv ~/packages/server-commands/{dist,package.json} $out/packages/server-commands

     

       152
       +
           mv ~/packages/typescript-utils/{dist,package.json} $out/packages/typescript-utils

     

       153
       +
           mv ~/{config,support,CREDITS.md,FAQ.md,LICENSE,README.md,package.json,yarn.lock} $out

     

       154
       +
       

     

       155
       +
           mkdir -p $cli/bin

     

       156
       +
           mv ~/apps/peertube-cli/{dist,node_modules,package.json,yarn.lock} $cli

     

       157
       +
           ln -s $cli/dist/peertube.js $cli/bin/peertube-cli

     

       158
       +
       

     

       159
       +
           mkdir -p $runner/bin

     

       160
       +
           mv ~/apps/peertube-runner/{dist,node_modules,package.json,yarn.lock} $runner

     

       161
       +
           ln -s $runner/dist/peertube-runner.js $runner/bin/peertube-runner

     

       162
        
       

     

       163
        
           # Create static gzip and brotli files

     

       164
        
           find $out/client/dist -type f -regextype posix-extended -iregex '.*\.(css|eot|html|js|json|svg|webmanifest|xlf)' | while read file; do