athens/modules/ipfs/cluster.nix

{ config, ... }:

{
  imports = [
    ./default.nix
    ../../services/ipfs-cluster.nix
  ];

  services = {
    kubo = {
      enable = true;
      settings = {
        Discovery = { MDNS = { Enabled = true; }; };
        Swarm = {
          AddrFilters = null;
          ConnMgr = {
            Type = "basic";
            LowWater = 25;
            HighWater = 50;
            GracePeriod = "1m0s";
          };
        };
      };
    };

    ipfs-cluster = {
      enable = true;
      consensus = "crdt";
      secretFile = config.sops.secrets.ipfs-cluster-secret.path;
    };
  };

  sops.secrets.ipfs-cluster-secret = {
    owner = "ipfs";
  };
}