···

       
1
       
1
       
 
       
# see /docs/utils.md for a usage guide

     

       
2
       
2
       
 
       
{

     

       
3
       
3
       
-
       
  # inputs,

     

       
3
       
3
       
+
       
  inputs,

     

       
4
       
4
       
 
       
  # system,

     

       
5
       
5
       
 
       
  ...

     

       
6
       
6
       
-
       
}: rec {

     

       
6
       
6
       
+
       
}: let

     

       
7
       
7
       
+
       
  lib = inputs.nixpkgs.lib;

     

       
8
       
8
       
+
       
in rec {

     

       
7
       
9
       
 
       
  mkVhost = {...} @ opts:

     

       
8
       
10
       
 
       
    {

     

       
9
       
11
       
 
       
      # ideally mkOverride/mkDefault would be used, but i have 0 idea how it works.

     
···

       
25
       
27
       
 
       
        proxyWebsockets = websockets;

     

       
26
       
28
       
 
       
      };

     

       
27
       
29
       
 
       
    };

     

       
30
       
30
       
+
       


     

       
31
       
31
       
+
       
  genSecrets = namespace: files: value:

     

       
32
       
32
       
+
       
    lib.genAttrs (

     

       
33
       
33
       
+
       
      map (x: namespace + lib.optionalString (lib.stringLength namespace != 0) "/" + x) files

     

       
34
       
34
       
+
       
    ) (_: value);

     

       
28
       
35
       
 
       
}

     

···

       
7
       
7
       
 
       
}: let

     

       
8
       
8
       
 
       
  mkRaw = (pkgs.formats.elixirConf {}).lib.mkRaw;

     

       
9
       
9
       
 
       
  # I don't know what i did but i made this abomination

     

       
10
       
10
       
-
       
  genSecrets = namespace: files: value: lib.genAttrs (map (x: namespace + x) files) (_: value);

     

       
11
       
10
       
 
       
  mkSecret = file:

     

       
12
       
11
       
 
       
    if !lib.elem file secrets

     

       
13
       
12
       
 
       
    then throw "Provided secret file ${file} is not in the list of defined secrets."

     
···

       
32
       
31
       
 
       
  ];

     

       
33
       
32
       
 
       
in {

     

       
34
       
33
       
 
       
  # secrets definition

     

       
35
       
35
       
-
       
  sops.secrets = genSecrets "akkoma/" secrets {};

     

       
34
       
34
       
+
       
  sops.secrets = _utils.genSecrets "akkoma" secrets {};

     

       
36
       
35
       
 
       


     

       
37
       
36
       
 
       
  services.akkoma = {

     

       
38
       
37
       
 
       
    enable = true;

     
···

       
42
       
41
       
 
       
    # frontends = {

     

       
43
       
42
       
 
       
    #   swagger

     

       
44
       
43
       
 
       
    # };

     

       
44
       
44
       
+
       


     

       
45
       
45
       
+
       
    # TODO: Issue #5

     

       
45
       
46
       
 
       
    dist.cookie = mkSecret "dist/cookie";

     

       
46
       
47
       
 
       
    config = {

     

       
47
       
48
       
 
       
      ":joken".":default_signer" = mkSecret "joken_default_signer";