diff options
| -rw-r--r-- | ops/machines/sanduny/default.nix | 5 | ||||
| -rw-r--r-- | ops/modules/depot-inbox.nix | 50 | ||||
| -rw-r--r-- | ops/modules/www/inbox.tvl.su.nix | 24 |
3 files changed, 79 insertions, 0 deletions
diff --git a/ops/machines/sanduny/default.nix b/ops/machines/sanduny/default.nix index 886a3a1be7..4db6311ceb 100644 --- a/ops/machines/sanduny/default.nix +++ b/ops/machines/sanduny/default.nix @@ -15,11 +15,13 @@ in { imports = [ (mod "cgit.nix") + (mod "depot-inbox.nix") (mod "depot-replica.nix") (mod "journaldriver.nix") (mod "known-hosts.nix") (mod "tvl-cache.nix") (mod "tvl-users.nix") + (mod "www/inbox.tvl.su.nix") (mod "www/self-redirect.nix") ]; @@ -87,6 +89,9 @@ in repo = "/var/lib/depot"; }; + # Serve public-inbox ... + services.depot.inbox.enable = true; + time.timeZone = "UTC"; # GRUB does not actually need to be installed on disk; Bitfolk have diff --git a/ops/modules/depot-inbox.nix b/ops/modules/depot-inbox.nix new file mode 100644 index 0000000000..b791cc6db7 --- /dev/null +++ b/ops/modules/depot-inbox.nix @@ -0,0 +1,50 @@ +# public-inbox configuration for depot@tvl.su +# +# The account itself is a Yandex 360 account in the tvl.su organisation, which +# is accessed via IMAP. Yandex takes care of spam filtering for us, so there is +# no particular SpamAssassin or other configuration. +{ config, lib, pkgs, ... }: + +let + cfg = config.services.depot.inbox; +in +{ + options.services.depot.inbox = with lib; { + enable = mkEnableOption "Enable public-inbox for depot@tvl.su"; + + depotPath = mkOption { + description = "path to local depot replica"; + type = types.str; + default = "/var/lib/depot"; + }; + }; + + config = lib.mkIf cfg.enable { + services.public-inbox = { + enable = true; + + http.enable = true; + http.port = 8053; + # imap.enable = true; + # nntp.enable = true; + + inboxes.depot = rec { + address = [ + "depot@tvl.su" # primary address + "depot@tazj.in" # legacy address + ]; + + description = "TVL depot development"; + coderepo = [ "depot" ]; + url = "https://inbox.tvl.su/depot"; + }; + + settings.coderepo.depot = { + dir = cfg.depotPath; + cgitUrl = "https://code.tvl.fyi"; + }; + + settings.publicinbox.wwwlisting = "all"; + }; + }; +} diff --git a/ops/modules/www/inbox.tvl.su.nix b/ops/modules/www/inbox.tvl.su.nix new file mode 100644 index 0000000000..a9af18e348 --- /dev/null +++ b/ops/modules/www/inbox.tvl.su.nix @@ -0,0 +1,24 @@ +{ config, ... }: + +{ + imports = [ + ./base.nix + ]; + + config = { + services.nginx.virtualHosts."inbox.tvl.su" = { + enableACME = true; + forceSSL = true; + + extraConfig = '' + location = / { + return 302 https://inbox.tvl.su/depot; + } + + location / { + proxy_pass http://localhost:${toString config.services.public-inbox.http.port}; + } + ''; + }; + }; +} |