forked from Fediversity/Fediversity
103 lines
3.1 KiB
Nix
103 lines
3.1 KiB
Nix
{ pkgs, ... }:
|
||
|
||
{
|
||
imports = [ ../common ];
|
||
|
||
procolix.vm = {
|
||
name = "vm02187";
|
||
ip4 = "185.206.232.187";
|
||
ip6 = "2a00:51c0:12:1201::187";
|
||
};
|
||
|
||
services.phpfpm.pools.mediawiki.phpOptions = ''
|
||
upload_max_filesize = 1024M;
|
||
post_max_size = 1024M;
|
||
'';
|
||
|
||
services.mediawiki = {
|
||
enable = true;
|
||
name = "Fediversity Wiki";
|
||
webserver = "nginx";
|
||
nginx.hostName = "wiki.fediversity.eu";
|
||
passwordFile = pkgs.writeText "password" "eiM9etha8ohmo9Ohphahpesiux0ahda6";
|
||
extraConfig = ''
|
||
# Disable anonymous editing
|
||
$wgGroupPermissions['*']['edit'] = false;
|
||
$wgEnableUploads = true;
|
||
$wgFileExtensions = array('png', 'jpg', 'jpeg', 'svg', 'pdf', 'odt', 'ods', 'brd', 'sch', 'JPG', 'PNG', 'JPEG', 'SVG', 'json', 'mkv', 'mp4', 'gif');
|
||
$wgUseImageMagick = true;
|
||
$wgMaxShellMemory = 524288;
|
||
$wgSVGMetadataCutoff = 1024*1024;
|
||
$wgAllowExternalImages = false;
|
||
|
||
## Permissions
|
||
$wgGroupPermissions['*']['edit'] = false;
|
||
$wgGroupPermissions['*']['createaccount'] = false;
|
||
$wgGroupPermissions['*']['autocreateaccount'] = true;
|
||
$wgGroupPermissions['user']['edit'] = true;
|
||
$wgGroupPermissions['user']['createaccount'] = true;
|
||
$wgGroupPermissions['user']['editmyprivateinfo'] = true;
|
||
$wgGroupPermissions['sysop']['interwiki'] = true;
|
||
$wgGroupPermissions['sysop']['editwidgets'] = true;
|
||
# 1 GB ought to be enough for everyone
|
||
$wgUploadSizeWarning = 1024*1024*512;
|
||
$wgMaxUploadSize = 1024*1024*1024;
|
||
|
||
$wgHeadScriptCode = <<<'END'
|
||
<link rel=me href="https://mastodon.fediversity.eu/@fediversity">
|
||
END;
|
||
'';
|
||
|
||
extensions = {
|
||
VisualEditor = null;
|
||
};
|
||
};
|
||
|
||
services.nginx = {
|
||
enable = true;
|
||
virtualHosts."wiki.fediversity.eu" = {
|
||
basicAuth = {
|
||
fediv = "SecretSauce123!";
|
||
};
|
||
forceSSL = true;
|
||
enableACME = true;
|
||
};
|
||
};
|
||
|
||
security.acme = {
|
||
acceptTerms = true;
|
||
defaults.email = "systeemmail@procolix.com";
|
||
};
|
||
|
||
users.users.nginx.extraGroups = [ "acme" ];
|
||
|
||
# List packages installed in system profile. To search, run:
|
||
# $ nix search wget
|
||
environment.systemPackages = with pkgs; [
|
||
(pkgs.vim_configurable.customize {
|
||
name = "vim";
|
||
vimrcConfig.packages.myplugins = with pkgs.vimPlugins; {
|
||
start = [ vim-nix ]; # load plugin on startup
|
||
};
|
||
vimrcConfig.customRC = ''
|
||
" your custom vimrc
|
||
set nocompatible
|
||
set backspace=indent,eol,start
|
||
" Turn on syntax highlighting by default
|
||
syntax on
|
||
" ...
|
||
'';
|
||
})
|
||
wget
|
||
];
|
||
|
||
# This value determines the NixOS release from which the default
|
||
# settings for stateful data, like file locations and database versions
|
||
# on your system were taken. It‘s perfectly fine and recommended to leave
|
||
# this value at the release version of the first install of this system.
|
||
# Before changing this value read the documentation for this option
|
||
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
||
system.stateVersion = "24.05"; # Did you read the comment?
|
||
|
||
}
|