(T)im's N(ix) Flake, Multi-Host Configurations for all of my machines!
74k1.sh/
nixos
nix
feat(outline): init setup
+106
+1
hosts/nixos/eiri/configuration.nix
+1
hosts/nixos/eiri/configuration.nix
+85
modules/nixos/daemons/outline/default.nix
+85
modules/nixos/daemons/outline/default.nix
···
1
+
{
2
+
config,
3
+
pkgs,
4
+
lib,
5
+
inputs,
6
+
outputs,
7
+
allSecrets,
8
+
...
9
+
}:
10
+
{
11
+
age.secrets = {
12
+
"outline_secret_key" = {
13
+
rekeyFile = "${inputs.self}/secrets/outline_secret_key.age";
14
+
# mode = "770";
15
+
owner = "outline";
16
+
group = "outline";
17
+
};
18
+
# "outline_utils_secret" = {
19
+
# rekeyFile = "${inputs.self}/secrets/outline_utils_secret.age";
20
+
# # mode = "770";
21
+
# # owner = "";
22
+
# # group = "";
23
+
# };
24
+
"outline_oidc_client_secret" = {
25
+
rekeyFile = "${inputs.self}/secrets/outline_oidc_client_secret.age";
26
+
# mode = "770";
27
+
owner = "outline";
28
+
group = "outline";
29
+
};
30
+
"outline_smtp_password" = {
31
+
rekeyFile = "${inputs.self}/secrets/outline_smtp_password.age";
32
+
# mode = "770";
33
+
owner = "outline";
34
+
group = "outline";
35
+
};
36
+
};
37
+
38
+
services.outline = {
39
+
enable = true;
40
+
publicUrl = "https://wiki.${allSecrets.global.domain00}";
41
+
port = 3303;
42
+
forceHttps = false;
43
+
44
+
secretKeyFile = config.age.secrets."outline_secret_key".path;
45
+
# utilsSecretFile = config.age.secrets."outline_utils_secret".path;
46
+
47
+
storage = {
48
+
storageType = "local";
49
+
localRootDir = "/mnt/btrfs_pool/outline_data/";
50
+
};
51
+
52
+
databaseUrl = "local";
53
+
redisUrl = "local";
54
+
55
+
concurrency = 1; # for under 1000 users..
56
+
maximumImportSize = 5120000;
57
+
58
+
smtp = {
59
+
host = allSecrets.global.mail.sender.host;
60
+
port = lib.strings.toInt allSecrets.global.mail.sender.port;
61
+
username = allSecrets.global.mail.sender.username;
62
+
passwordFile = config.age.secrets."outline_smtp_password".path;
63
+
replyEmail = allSecrets.global.mail.sender.username;
64
+
fromEmail = allSecrets.global.mail.sender.username;
65
+
secure = false;
66
+
};
67
+
68
+
oidcAuthentication = {
69
+
authUrl = allSecrets.global.oidc.authUrl;
70
+
tokenUrl = allSecrets.global.oidc.tokenUrl;
71
+
userinfoUrl = allSecrets.global.oidc.userinfoUrl;
72
+
clientId = "outline";
73
+
clientSecretFile = config.age.secrets."outline_oidc_client_secret".path;
74
+
scopes = [ "openid" "email" "profile" ];
75
+
usernameClaim = "preferred_username";
76
+
displayName = "Pocket ID";
77
+
};
78
+
};
79
+
80
+
# NOTE: for debug purposes
81
+
# systemd.services.outline.environment = {
82
+
# DEBUG = lib.mkForce "*";
83
+
# LOG_LEVEL = "debug";
84
+
# };
85
+
}
+1
modules/nixos/default.nix
+1
modules/nixos/default.nix
+10
secrets/outline_oidc_client_secret.age
+10
secrets/outline_oidc_client_secret.age
···
1
+
age-encryption.org/v1
2
+
-> piv-p256 RRcsTA AkTiac14WesjAhv+WoaGifKdJR3OfHrx1nnXnqXCRjJk
3
+
0AvuzZJh7Cdr0kmkRU76sF4Ja1alhjVncyCEUrVyDe0
4
+
-> piv-p256 IBLnbw A/Z68mYj4QBpZ/mwT6pxkLRiKjm+UiIgSwNgki6OVpP9
5
+
Kt8S8X6ivtFbBVj2WaN9urPJ1P7f/VdINeVmk8flYTU
6
+
-> p-grease 13,lkd
7
+
vKtUSaa8WdCLbfrsZvqibg7DaHXlwdUXVK31OTQoJ7c5mWfBc1bKGjLCCBErP/7J
8
+
VgCKSKlhVAq5anI6+VPH224f5eweQzCwRLdCbRl2bQ
9
+
--- SE4RT6MiaDK3tLTgtfBnsQZSbTjjeyeKfA+boSJ3Pu0
10
+
�\��s J���(O_�S�� ��-�>_-;x\��^n�� ݤ�e>z�s�e�IX���� �Gs�+q}
+9
secrets/outline_secret_key.age
+9
secrets/outline_secret_key.age
···
1
+
age-encryption.org/v1
2
+
-> piv-p256 RRcsTA A/oMh/ZgyTBZnzkEr2+vvfBCXoUekqfF51cCJLaDYcO6
3
+
w0MT6pdAeLechA4KcapPKMtxDNIDGRzVxhd+5RtDQuo
4
+
-> piv-p256 IBLnbw ArNtvOBZh6+DClYEhv3gyuNBWmgk/Mqbc9y3kc/0b3fX
5
+
+lGKGw+3vmjHUnb3+28glMJZkzQoQRQyJpIVKIlBwss
6
+
-> =-grease 8rWer\ }uL8> YLt ;E
7
+
d9BSa1QuaqfPnXvDHisHWQya2wKHj98vbqFqEp+Yk+ITQOduU7ytGWMdbEVqZg
8
+
--- 4+6hvgHCY01AO8TcZIij26M6mKQOlBjabzcMqsM8mHg
9
+
� q�����������K/� ���>Y�~D�y�y��1_g4�� T� `E��ӲE�h�)�zV�La�� So�6�-��LL�����C����94[�]
secrets/outline_smtp_password.age
secrets/outline_smtp_password.age
This is a binary file and will not be displayed.