forked from emily/nixfiles
280 lines
9.1 KiB
Nix
280 lines
9.1 KiB
Nix
{ config, pkgs, ... }: {
|
|
sops.secrets."services/akkoma/mailerPassword" = {
|
|
sopsFile = ../../../secrets/services/akkoma.yaml;
|
|
};
|
|
sops.secrets."services/akkoma/deepl" = {
|
|
sopsFile = ../../../secrets/services/akkoma.yaml;
|
|
};
|
|
services.akkoma = {
|
|
enable = true;
|
|
extraStatic."emoji/blobs.gg" = pkgs.akkoma-emoji.blobs_gg;
|
|
|
|
extraStatic."static/styles.json" = pkgs.writeText "styles.json" (builtins.toJSON {
|
|
pleroma-dark = "/static/themes/pleroma-dark.json";
|
|
pleroma-light = "/static/themes/pleroma-light.json";
|
|
pleroma-amoled = [ "Pleroma Dark AMOLED" "#000000" "#111111" "#b0b0b1" "#d8a070" "#aa0000" "#0fa00f" "#0095ff" "#d59500"];
|
|
classic-dark = [ "Classic Dark" "#161c20" "#282e32" "#b9b9b9" "#baaa9c" "#d31014" "#0fa00f" "#0095ff" "#ffa500" ];
|
|
bird = [ "Bird" "#f8fafd" "#e6ecf0" "#14171a" "#0084b8" "#e0245e" "#17bf63" "#1b95e0" "#fab81e"];
|
|
ir-black = [ "Ir Black" "#000000" "#242422" "#b5b3aa" "#ff6c60" "#FF6C60" "#A8FF60" "#96CBFE" "#FFFFB6" ];
|
|
monokai = [ "Monokai" "#272822" "#383830" "#f8f8f2" "#f92672" "#F92672" "#a6e22e" "#66d9ef" "#f4bf75" ];
|
|
|
|
redmond-xx = "/static/themes/redmond-xx.json";
|
|
redmond-xx-se = "/static/themes/redmond-xx-se.json";
|
|
redmond-xxi = "/static/themes/redmond-xxi.json";
|
|
breezy-dark = "/static/themes/breezy-dark.json";
|
|
breezy-light = "/static/themes/breezy-light.json";
|
|
paper = "/static/themes/paper.json";
|
|
thekanata = "/static/themes/thekanata.json";
|
|
ihatebeingalive = "/static/themes/ihatebeingalive.json";
|
|
elly-mod = "/static/themes/elly-mod.json";
|
|
});
|
|
|
|
extraStatic."static/themes/elly-mod.json" = pkgs.writeText "elly-mod.json" (builtins.readFile ./elly-mod.json);
|
|
|
|
extraStatic."static/terms-of-service.html" = pkgs.writeText "terms-of-service.html" ''
|
|
<h3>Likes are now florps. The timeline goes sideways.</h3>
|
|
'';
|
|
|
|
extraStatic."images/akkoma-wp.png" = pkgs.fetchurl {
|
|
url = "https://kyouma.net/akkoma-wp.avif";
|
|
hash = "sha256-p0slibhwLExsGUzCSZHIl6tNm28r4fB3iJsI6peRFRs=";
|
|
};
|
|
|
|
extraStatic."favicon.png" = let
|
|
rev = "697a8211b0f427a921e7935a35d14bb3e32d0a2c";
|
|
in pkgs.stdenvNoCC.mkDerivation {
|
|
name = "favicon.png";
|
|
|
|
src = pkgs.fetchurl {
|
|
url = "https://raw.githubusercontent.com/TilCreator/NixOwO/${rev}/NixOwO_plain.svg";
|
|
hash = "sha256-tWhHMfJ3Od58N9H5yOKPMfM56hYWSOnr/TGCBi8bo9E=";
|
|
};
|
|
|
|
nativeBuildInputs = with pkgs; [ librsvg ];
|
|
|
|
dontUnpack = true;
|
|
installPhase = ''
|
|
rsvg-convert -o $out -w 96 -h 96 $src
|
|
'';
|
|
};
|
|
|
|
frontends = {
|
|
primary = {
|
|
package = pkgs.akkoma-fe-domi;
|
|
name = "akkoma-fe";
|
|
ref = "5f0339ce00";
|
|
};
|
|
admin = {
|
|
package = pkgs.akkoma-frontends.admin-fe;
|
|
name = "admin-fe";
|
|
ref = "stable";
|
|
};
|
|
};
|
|
};
|
|
services.akkoma.config = let
|
|
inherit ((pkgs.formats.elixirConf { }).lib) mkRaw mkAtom mkMap;
|
|
in {
|
|
":pleroma" = {
|
|
":instance" = {
|
|
name = "florp.social";
|
|
email = "contact@florp.social";
|
|
notify_email = "akkoma@florp.social";
|
|
description = "Likes are now florps. The timeline goes sideways.";
|
|
instance_thumbnail = "/instance/thumbnail.avif";
|
|
limit = 69420;
|
|
description_limit = 69420;
|
|
remote_limit = 131072;
|
|
upload_limit = 160 * 1024 * 1024;
|
|
avatar_upload_limit = 16 * 1024 * 1024;
|
|
background_upload_limit = 32 * 1024 * 1024;
|
|
banner_upload_limit = 32 * 1024 * 1024;
|
|
registrations_open = true;
|
|
registration_reason_length = 2048;
|
|
account_approval_required = true;
|
|
account_activation_required = true;
|
|
federation = false;
|
|
federation_incoming_replies_max_depth = 1024;
|
|
max_pinned_statuses = 10;
|
|
safe_dm_mentions = true;
|
|
remote_post_retention_days = 365;
|
|
user_bio_length = 8192;
|
|
user_name_length = 64;
|
|
max_account_fields = 8;
|
|
cleanup_attachments = true;
|
|
local_bubble = [
|
|
"solitary.social"
|
|
"donotsta.re"
|
|
"chaos.social"
|
|
];
|
|
};
|
|
|
|
"Pleroma.Captcha".method = mkRaw "Pleroma.Captcha.Kocaptcha";
|
|
|
|
"Pleroma.Web.Endpoint".url.host = "florp.social";
|
|
|
|
"Pleroma.Emails.Mailer" = {
|
|
enabled = true;
|
|
adapter = mkRaw "Swoosh.Adapters.SMTP";
|
|
relay = "mail.kyouma.net";
|
|
username = "akkoma@florp.social";
|
|
password._secret = config.sops.secrets."services/akkoma/mailerPassword".path;
|
|
port = 465;
|
|
ssl = true;
|
|
auth = mkRaw ":always";
|
|
};
|
|
|
|
":database".rum_enabled = true;
|
|
|
|
":media_proxy" = {
|
|
enabled = true;
|
|
base_url = "https://cache.florp.social";
|
|
proxy_opts.redirect_on_failure = true;
|
|
proxy_opts.max_body_length = 64 * 1024 * 1024;
|
|
};
|
|
|
|
":media_preview_proxy" = {
|
|
enabled = false;
|
|
thumbnail_max_width = 1920;
|
|
thumbnail_max_height = 1080;
|
|
min_content_length = 128 * 1024;
|
|
};
|
|
|
|
"Pleroma.Upload".base_url = "https://media.florp.social";
|
|
|
|
"Pleroma.Upload".filters = map mkRaw [
|
|
"Pleroma.Upload.Filter.Exiftool.ReadDescription"
|
|
"Pleroma.Upload.Filter.Exiftool.StripMetadata"
|
|
"Pleroma.Upload.Filter.Dedupe"
|
|
"Pleroma.Upload.Filter.AnonymizeFilename"
|
|
];
|
|
|
|
":mrf".policies = map mkRaw [
|
|
"Pleroma.Web.ActivityPub.MRF.SimplePolicy"
|
|
"Pleroma.Web.ActivityPub.MRF.ObjectAgePolicy"
|
|
];
|
|
|
|
":mrf_simple" = {
|
|
reject = mkMap {
|
|
"bae.st" = "harassment";
|
|
"brighteon.social" = "incompatible";
|
|
"detroitriotcity.com" = "incompatible";
|
|
"freeatlantis.com" = "incompatible";
|
|
"freespeechextremist.com" = "incompatible";
|
|
"gab.com" = "incompatible";
|
|
"gleasonator.com" = "incompatible";
|
|
"kitsunemimi.club" = "incompatible";
|
|
"poa.st" = "incompatible";
|
|
"seal.cafe" = "harassment";
|
|
"social.quodverum.com" = "incompatible";
|
|
"spinster.xyz" = "incompatible";
|
|
"truthsocial.co.in" = "incompatible";
|
|
"varishangout.net" = "incompatible";
|
|
|
|
"activitypub-troll.cf" = "security";
|
|
"misskey-forkbomb.cf" = "security";
|
|
"repl.co" = "security";
|
|
};
|
|
|
|
followers_only = mkMap {
|
|
"bitcoinhackers.org" = "annoying";
|
|
};
|
|
};
|
|
|
|
":mrf_object_age".threshold = 90 * 24 * 3600;
|
|
|
|
":frontend_configurations" = {
|
|
pleroma_fe = mkMap {
|
|
background = "/images/akkoma-wp.png";
|
|
collapseMessageWithSubject = true;
|
|
hideSiteFavicon = true;
|
|
streaming = true;
|
|
webPushNotifications = true;
|
|
useStreamingApi = true;
|
|
scopeCopy = true;
|
|
showFeaturesPanel = false;
|
|
subjectLineBehavior = "masto";
|
|
alwaysShowSubjectInput = true;
|
|
postContentType = "text/markdown";
|
|
modalOnRepeat = true;
|
|
minimalScopesMode = true;
|
|
redirectRootNoLogin = "/about";
|
|
translationLanguage = "EN";
|
|
theme = "elly-mod";
|
|
};
|
|
};
|
|
|
|
":restrict_unauthenticated" = {
|
|
timelines = mkMap {
|
|
local = false;
|
|
federated = true;
|
|
};
|
|
};
|
|
|
|
":translator" = {
|
|
enabled = true;
|
|
module = mkRaw "Pleroma.Akkoma.Translators.DeepL";
|
|
};
|
|
|
|
":deepl" = {
|
|
tier = mkAtom ":free";
|
|
api_key._secret = config.sops.secrets."services/akkoma/deepl".path;
|
|
};
|
|
};
|
|
|
|
":web_push_encryption".":vapid_details" = {
|
|
subject = "mailto:contact@florp.social";
|
|
};
|
|
|
|
":joken".":default_signer"._secret = "/var/lib/secrets/akkoma/jwt-signer";
|
|
};
|
|
services.postgresql.extraPlugins = [
|
|
pkgs.postgresql15Packages.rum
|
|
];
|
|
services.nginx = {
|
|
package = pkgs.tengine;
|
|
clientMaxBodySize = "256m";
|
|
commonHttpConfig = ''
|
|
proxy_cache_path /var/cache/nginx/cache/akkoma-media-cache
|
|
levels= keys_zone=akkoma_media_cache:32m max_size=32g
|
|
inactive=1y use_temp_path=off;
|
|
|
|
access_log off;
|
|
'';
|
|
};
|
|
kyouma.nginx.virtualHosts = {
|
|
"florp.social".locations."/".proxyPass = "http://unix:/run/akkoma/socket";
|
|
|
|
"media.florp.social" = {
|
|
useACMEHost = "florp.social";
|
|
locations."/".proxyPass = "http://unix:/run/akkoma/socket";
|
|
};
|
|
|
|
"cache.florp.social" = {
|
|
useACMEHost = "florp.social";
|
|
locations."/" = {
|
|
proxyPass = "http://unix:/run/akkoma/socket";
|
|
extraConfig = ''
|
|
proxy_cache akkoma_media_cache;
|
|
|
|
# Cache objects in slices of 1 MiB
|
|
slice 1m;
|
|
proxy_cache_key $host$uri$is_args$args$slice_range;
|
|
proxy_set_header Range $slice_range;
|
|
|
|
# Decouple proxy and upstream responses
|
|
proxy_buffering on;
|
|
proxy_cache_lock on;
|
|
proxy_ignore_client_abort on;
|
|
|
|
# Default cache times for various responses
|
|
proxy_cache_valid 200 1y;
|
|
proxy_cache_valid 206 301 304 1h;
|
|
|
|
# Allow serving of stale items
|
|
proxy_cache_use_stale error timeout invalid_header updating;
|
|
'';
|
|
};
|
|
};
|
|
};
|
|
security.acme.certs."florp.social".extraDomainNames = [ "cache.florp.social" "media.florp.social" ];
|
|
}
|