sid/synix
1
0
Fork 0
Code Issues 7 Pull requests 1 Projects Activity Actions

initial commit
All checks were successful
Deploy docs / build-and-deploy (push) Successful in 3s
Details

Browse source
This commit is contained in:
sid 2026-02-23 20:34:35 +01:00
commit 95a533c876
451 changed files with 18255 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

44
modules/nixos/jirafeau/default.nix Normal file
View file

@ -0,0 +1,44 @@
{ config, lib, ... }:
let
cfg = config.services.jirafeau;
domain = config.networking.domain;
subdomain = cfg.reverseProxy.subdomain;
fqdn = if (cfg.reverseProxy.enable && subdomain != "") then "${subdomain}.${domain}" else domain;
inherit (lib)
mkDefault
mkIf
;
inherit (lib.utils)
mkReverseProxyOption
;
in
{
options.services.jirafeau = {
reverseProxy = mkReverseProxyOption "Jirafeau" "share";
};
config = mkIf cfg.enable {
services.jirafeau = {
hostName = fqdn;
extraConfig = mkDefault ''
$cfg['style'] = 'dark-courgette';
$cfg['maximal_upload_size'] = 4096;
'';
nginxConfig = {
enableACME = if cfg.reverseProxy.enable then cfg.reverseProxy.forceSSL else mkDefault false;
forceSSL = if cfg.reverseProxy.enable then cfg.reverseProxy.forceSSL else mkDefault false;
listenAddresses = mkDefault [ "0.0.0.0" ]; # FIXME: 127.0.0.1 does not work
serverName = fqdn;
sslCertificate =
mkIf (with cfg.reverseProxy; enable && forceSSL)
"${config.security.acme.certs."${fqdn}".directory}/cert.pem";
sslCertificateKey =
mkIf (with cfg.reverseProxy; enable && forceSSL)
"${config.security.acme.certs."${fqdn}".directory}/key.pem";
};
};
};
}