···

       
1
       
-
       
{ config, pkgs, ... }:

     

       
2
       
 
       


     

       
3
       
 
       
{

     

       
4
       
 
       
  age.secrets = {

     
···

       
50
       
 
       
    secretKeyFile = config.age.secrets.outlineSecretKey.path;

     

       
51
       
 
       
    utilsSecretFile = config.age.secrets.outlineUtilsSecret.path;

     

       
52
       
 
       


     

       
53
       
-
       
    databaseUrl = "postgres://outline:${builtins.readFile config.age.secrets.outlineSecretKey.path}@localhost/outline?sslmode=disable";

     

       
54
       
-
       
    redisUrl = "redis://127.0.0.1:6380";

     

       
0
       
 
       

     

       
0
       
 
       

     

       
55
       
 
       


     

       
56
       
 
       
    storage = {

     

       
57
       
 
       
      storageType = "s3";

     
···

       
61
       
 
       
      uploadBucketName = "outline";

     

       
62
       
 
       
      region = "us-east-1";

     

       
63
       
 
       
      uploadMaxSize = 104857600;

     

       
64
       
-
       
      importMaxSize = 104857600;

     

       
65
       
-
       
      workspaceImportMaxSize = 104857600;

     

       
66
       
 
       
      forcePathStyle = true;

     

       
67
       
 
       
      acl = "private";

     

       
68
       
 
       
    };

     
···

       
71
       
 
       
      host = "smtp.purelymail.com";

     

       
72
       
 
       
      port = 587;

     

       
73
       
 
       
      username = "noreply@sapphic.moe";

     

       
0
       
 
       

     

       
74
       
 
       
      passwordFile = config.age.secrets.outlineSMTPPassword.path;

     

       
75
       
 
       
      fromEmail = "noreply@sapphic.moe";

     

       
76
       
 
       
      secure = false;

     
···

       
85
       
 
       
      authUrl = "https://id.sappho.systems/authorize";

     

       
86
       
 
       
      tokenUrl = "https://id.sappho.systems/api/oidc/token";

     

       
87
       
 
       
      userinfoUrl = "https://id.sappho.systems/api/oidc/userinfo";

     

       
88
       
-
       
      logoutUrl = "https://id.sappho.systems/api/oidc/end-session";

     

       
89
       
 
       


     

       
90
       
 
       
      usernameClaim = "preferred_username";

     

       
91
       
 
       
      scopes = [

     
···

       
94
       
 
       
        "email"

     

       
95
       
 
       
        "groups"

     

       
96
       
 
       
      ];

     

       
97
       
-
       


     

       
98
       
-
       
      disableRedirect = true;

     

       
99
       
 
       
    };

     

       
100
       
 
       
  };

     

       
101
       
 
       


     

       
102
       
-
       
  services.postgresql = {

     

       
103
       
-
       
    enable = true;

     

       
104
       
-
       
    package = pkgs.postgresql_15;

     

       
105
       
-
       
    dataDir = "/var/lib/postgresql";

     

       
106
       
-
       
    enableTCPIP = true;

     

       
107
       
-
       
    ensureDatabases = [ "outline" ];

     

       
108
       
-
       
    ensureUsers = [

     

       
109
       
-
       
      {

     

       
110
       
-
       
        name = "outline";

     

       
111
       
-
       
        password = builtins.readFile config.age.secrets.outlineSecretKey.path;

     

       
112
       
-
       
      }

     

       
113
       
-
       
    ];

     

       
114
       
-
       
    authentication = pkgs.lib.mkOverride 10 ''

     

       
115
       
-
       
      #type database DBuser origin-address auth-method

     

       
116
       
-
       
      local all      all     trust

     

       
117
       
-
       
      host  all      all     127.0.0.1/32   scram-sha-256

     

       
118
       
-
       
      host  all      all     ::1/128        scram-sha-256

     

       
119
       
-
       
    '';

     

       
120
       
-
       
  };

     

       
121
       
-
       


     

       
122
       
-
       
  # Ensure Outline waits for Postgres

     

       
123
       
-
       
  systemd.services.outline.requires = [ "postgresql.service" ];

     

       
124
       
-
       
  services.redis.servers."outline" = {

     

       
125
       
-
       
    enable = true;

     

       
126
       
-
       
    port = 6380;

     

       
127
       
-
       
    bind = "127.0.0.1";

     

       
128
       
-
       
  };

     

       
129
       
-
       


     

       
130
       
 
       
  services.minio = {

     

       
131
       
 
       
    enable = true;

     

       
132
       
 
       
    rootCredentialsFile = config.age.secrets.minioCredentials.path;

     

       
133
       
-
       
    dataDir = "/var/lib/minio";

     

       
134
       
-
       
    listenAddress = [

     

       
135
       
-
       
      "0.0.0.0:9000"

     

       
136
       
-
       
      "0.0.0.0:9001"

     

       
137
       
-
       
    ];

     

       
138
       
 
       
  };

     

       
139
       
 
       


     

       
140
       
 
       
  services.caddy.virtualHosts."wiki.sappho.systems" = {

     
···

       
142
       
 
       
      import common

     

       
143
       
 
       
      import tls_cloudflare

     

       
144
       
 
       
      reverse_proxy http://localhost:3300

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
145
       
 
       
    '';

     

       
146
       
 
       
  };

     

       
147
       
 
       


     

···

       
1
       
+
       
{ config, ... }:

     

       
2
       
 
       


     

       
3
       
 
       
{

     

       
4
       
 
       
  age.secrets = {

     
···

       
50
       
 
       
    secretKeyFile = config.age.secrets.outlineSecretKey.path;

     

       
51
       
 
       
    utilsSecretFile = config.age.secrets.outlineUtilsSecret.path;

     

       
52
       
 
       


     

       
53
       
+
       
    databaseUrl = "local";

     

       
54
       
+
       
    redisUrl = "local";

     

       
55
       
+
       


     

       
56
       
+
       
    maximumImportSize = 104857600;

     

       
57
       
 
       


     

       
58
       
 
       
    storage = {

     

       
59
       
 
       
      storageType = "s3";

     
···

       
63
       
 
       
      uploadBucketName = "outline";

     

       
64
       
 
       
      region = "us-east-1";

     

       
65
       
 
       
      uploadMaxSize = 104857600;

     

       
0
       
 
       

     

       
0
       
 
       

     

       
66
       
 
       
      forcePathStyle = true;

     

       
67
       
 
       
      acl = "private";

     

       
68
       
 
       
    };

     
···

       
71
       
 
       
      host = "smtp.purelymail.com";

     

       
72
       
 
       
      port = 587;

     

       
73
       
 
       
      username = "noreply@sapphic.moe";

     

       
74
       
+
       
      replyEmail = "noreply@sapphic.moe";

     

       
75
       
 
       
      passwordFile = config.age.secrets.outlineSMTPPassword.path;

     

       
76
       
 
       
      fromEmail = "noreply@sapphic.moe";

     

       
77
       
 
       
      secure = false;

     
···

       
86
       
 
       
      authUrl = "https://id.sappho.systems/authorize";

     

       
87
       
 
       
      tokenUrl = "https://id.sappho.systems/api/oidc/token";

     

       
88
       
 
       
      userinfoUrl = "https://id.sappho.systems/api/oidc/userinfo";

     

       
0
       
 
       

     

       
89
       
 
       


     

       
90
       
 
       
      usernameClaim = "preferred_username";

     

       
91
       
 
       
      scopes = [

     
···

       
94
       
 
       
        "email"

     

       
95
       
 
       
        "groups"

     

       
96
       
 
       
      ];

     

       
0
       
 
       

     

       
0
       
 
       

     

       
97
       
 
       
    };

     

       
98
       
 
       
  };

     

       
99
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
100
       
 
       
  services.minio = {

     

       
101
       
 
       
    enable = true;

     

       
102
       
 
       
    rootCredentialsFile = config.age.secrets.minioCredentials.path;

     

       
103
       
+
       
    dataDir = [ "/var/lib/minio" ];

     

       
104
       
+
       
    listenAddress = "0.0.0.0:9000";

     

       
105
       
+
       
    consoleAddress = "0.0.0.0:9001";

     

       
0
       
 
       

     

       
0
       
 
       

     

       
106
       
 
       
  };

     

       
107
       
 
       


     

       
108
       
 
       
  services.caddy.virtualHosts."wiki.sappho.systems" = {

     
···

       
110
       
 
       
      import common

     

       
111
       
 
       
      import tls_cloudflare

     

       
112
       
 
       
      reverse_proxy http://localhost:3300

     

       
113
       
+
       
    '';

     

       
114
       
+
       
  };

     

       
115
       
+
       


     

       
116
       
+
       
  services.caddy.virtualHosts."minio.sappho.systems" = {

     

       
117
       
+
       
    extraConfig = ''

     

       
118
       
+
       
      import common

     

       
119
       
+
       
      import tls_cloudflare

     

       
120
       
+
       
      reverse_proxy http://localhost:9000

     

       
121
       
+
       
    '';

     

       
122
       
+
       
  };

     

       
123
       
+
       


     

       
124
       
+
       
  services.caddy.virtualHosts."minio-admin.sappho.systems" = {

     

       
125
       
+
       
    extraConfig = ''

     

       
126
       
+
       
      import common

     

       
127
       
+
       
      import tls_cloudflare

     

       
128
       
+
       
      reverse_proxy http://localhost:9001

     

       
129
       
 
       
    '';

     

       
130
       
 
       
  };

     

       
131