51 lines
1.4 KiB
Nix
51 lines
1.4 KiB
Nix
let
|
|
snakeoil_key = {
|
|
id = "GKb5615457d44214411e673b7b";
|
|
secret = "5be6799a88ca9b9d813d1a806b64f15efa49482dbe15339ddfaf7f19cf434987";
|
|
};
|
|
in
|
|
{ config, lib, pkgs, ... }: {
|
|
services.garage = {
|
|
ensureBuckets = {
|
|
pixelfed = {
|
|
website = true;
|
|
# TODO: these are too broad, after getting everything works narrow it down to the domain we actually want
|
|
corsRules = {
|
|
enable = true;
|
|
allowedHeaders = [ "*" ];
|
|
allowedMethods = [ "GET" ];
|
|
allowedOrigins = [ "*" ];
|
|
};
|
|
};
|
|
};
|
|
ensureKeys = {
|
|
pixelfed = {
|
|
inherit (snakeoil_key) id secret;
|
|
ensureAccess = {
|
|
pixelfed = {
|
|
read = true;
|
|
write = true;
|
|
owner = true;
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
services.pixelfed.enable = true;
|
|
|
|
# TODO: factor these out so we're only defining e.g. s3.garage.localhost and port 3900 in one place
|
|
services.pixelfed.settings = {
|
|
DANGEROUSLY_SET_FILESYSTEM_DRIVER = "s3";
|
|
FILESYSTEM_CLOUD = "s3";
|
|
PF_ENABLE_CLOUD = true;
|
|
AWS_ACCESS_KEY_ID = snakeoil_key.id;
|
|
AWS_SECRET_ACCESS_KEY = snakeoil_key.secret;
|
|
AWS_DEFAULT_REGION = "garage";
|
|
AWS_URL = ""; ## Empty such that the URL is just relative to the pixelfed instance.
|
|
AWS_BUCKET = "pixelfed";
|
|
AWS_ENDPOINT = "http://s3.garage.localhost:3900";
|
|
AWS_USE_PATH_STYLE_ENDPOINT = false;
|
|
};
|
|
}
|