❄️ Dotfiles for our NixOS system configuration.

chore(secrets): add bluesky-pds (test)

Chloe 01bf3a7a 0dc8e97c

Changed files
+62
secrets
services
bluesky-pds
+22
secrets/bluesky-pds.age
···
+
-----BEGIN AGE ENCRYPTED FILE-----
+
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IGN2U2dKQSBYVXZO
+
Vjh2bnFPUGFVRTFNY2cyNTZNU0doenlFM094SVppTkVZUXFKUGhZClBvZ0Z3SFpO
+
cDZyeWpLRWN2VmpnYndKMzVoY2Ztek9LQnk3MFJxc1YrMmcKLT4gc3NoLWVkMjU1
+
MTkgMUNUOTd3IGhRZzV1NkFTSC9XWWw2TG1XTjhEOEJCU1Y0RytpVXpDRWN0S2w1
+
MnBjRU0KdHBhcDkzOHBjRjhOb2QvakNQVTBuWG1NNnZZSjR2am9hZk9mT0RScjhq
+
ZwotPiBzc2gtZWQyNTUxOSBlUDNUdFEgWEpMbzdCcGV6TGVRV3RYMVMwOVpmczk1
+
NmpKOGlncVZhMkdBckdadFVqawpYVHJGMHlDZWIySi9RZUQvSDExVVdQeEpvU3dK
+
VDF0WVpMVlZSLzVXWE5ZCi0+IH00Ukh2aD8tZ3JlYXNlICcjeSBZVCBQZUlLb2RT
+
YApJWUcrK29TclN6U1QrUFNRaUtOZjhKVXhrWnRNN09KeWVTODhEaS9FcC9qanBG
+
U2l0cWRENE8zamE2L2NJUkhjCnlpNURpRWxTdkZYU01icTlPVll5MnlpMmUydzA4
+
clFsY2dLOEpTNzcrZwotLS0gMWR5a1J4NUQ3U2o5U3pyQ3lkNmw1dzhHOFdibGhN
+
QlVVbEJ3VlNiRU9DNArJqgUW22wRIRywJukNQO7+kHeotplrYzWFuuNIU4U/DjBL
+
toJbBhzoIR1T1GCAZMDtOlMmWl6kUkMJMbZiclul/Nf/5gmtZYCmDEBICVukVVr7
+
yvEItMXcc1GpD//XTI87cPJyrGmucpkUVhYb7aSLWvzxPgKnUAEIiXCSNEq1prMx
+
b5HbTH8uDnLx+0vHHye9NEoaeoj1GNC+Q7TwdLnGN3oQLCO0qAheIslA6f1nYw7g
+
pgf/ZNmrfVufPBlv3H2YBif1xsmrqX05S7jzAGS5PfCKsQhYtJykNR/nNoHlLEcH
+
kPkY7Foj3FZnegrxtZKKmMTgaRsOcScVKlm9obTzjHCyjDk3qGZ3WyglLmF4Vbjp
+
YCHHFgNuIZUGkgzBZSNcFaMPPWOY3VX/sAhYeO35h5rMIubhI/8W2lEOBM3XFzxS
+
nw0JuQvuHhQ0GXQMF91xOFTMdzvf4h44/0446W9DWCXjYEr93cqPe4cH2B0OVrvv
+
p2M=
+
-----END AGE ENCRYPTED FILE-----
+1
secrets/secrets.nix
···
];
in
{
+
"bluesky-pds.age".publicKeys = keys;
"caddy.age".publicKeys = keys;
"glance.age".publicKeys = keys;
}
+38
services/bluesky-pds/default.nix
···
+
{ config, ... }:
+
+
{
+
age.secrets.bluesky-pds = {
+
file = ../../secrets/bluesky-pds.age;
+
owner = "pds";
+
group = "pds";
+
mode = "600";
+
};
+
+
services.bluesky-pds = {
+
enable = true;
+
pdsadmin = true;
+
settings = {
+
PDS_HOSTNAME = "pds.sappho.systems";
+
PDS_PORT = 3333;
+
};
+
environmentFiles = [ config.age.secrets.bluesky-pds.path ];
+
};
+
+
services.caddy.virtualHosts."pds.sappho.systems" = {
+
listenAddresses = [ "::" ];
+
extraConfig = ''
+
import common
+
import tls_cloudflare
+
reverse_proxy http://127.0.0.1:3333
+
'';
+
};
+
+
services.caddy.virtualHosts."*.pds.sappho.systems" = {
+
listenAddresses = [ "::" ];
+
extraConfig = ''
+
import common
+
import tls_cloudflare
+
reverse_proxy http://127.0.0.1:3333
+
'';
+
};
+
}
+1
services/default.nix
···
imports = [
./caddy
./glance
+
./bluesky-pds
];
}