✨ add pleroma

hosts/plato/configuration.nix

@@ -15,11 +15,13 @@ in
     ../../modules/gitea
     ../../modules/home-assistant
     ../../modules/matrix
+    ../../modules/pleroma
     ../../modules/sops
   ];
 
   # Use the systemd-boot EFI boot loader.
   boot.loader.systemd-boot.enable = true;
+  boot.loader.systemd-boot.configurationLimit = 3;
   boot.loader.efi.canTouchEfiVariables = true;
   boot.cleanTmpDir = true;
   boot.binfmt.emulatedSystems = [ "aarch64-linux" ];

hosts/socrates/configuration.nix

@@ -3,7 +3,8 @@
 let
   dotfiles = builtins.fetchTarball
     "https://github.com/walkah/dotfiles/archive/main.tar.gz";
-in {
+in
+{
   imports = [
     ./hardware-configuration.nix
     ./networking.nix # generated at runtime by nixos-infect
@@ -15,6 +16,7 @@ in {
     ../../modules/home-assistant/nginx.nix
     ../../modules/ipfs/gateway.nix
     ../../modules/matrix/nginx.nix
+    ../../modules/pleroma/nginx.nix
   ];
 
   nixpkgs.overlays = [ (import ../../overlays) ];

modules/home-assistant/default.nix

@@ -5,7 +5,7 @@
   virtualisation.oci-containers = {
     containers = {
       home-assistant = {
-        image = "ghcr.io/home-assistant/home-assistant:2022.3.8";
+        image = "ghcr.io/home-assistant/home-assistant:2022.4.3";
         volumes =
           [ "/var/lib/hass:/config" "/etc/localtime:/etc/localtime:ro" ];
         extraOptions = [ "--privileged" "--network=host" ];

modules/pleroma/default.nix

@@ -0,0 +1,17 @@
+{ config, lib, pkgs, ... }:
+
+{
+  services = {
+    pleroma = {
+      enable = true;
+      configs = [ "import Config" ];
+    };
+    postgresql = {
+      ensureDatabases = [ "pleroma" ];
+      ensureUsers = [{
+        name = "pleroma";
+        ensurePermissions = { "DATABASE pleroma" = "ALL PRIVILEGES"; };
+      }];
+    };
+  };
+}

modules/pleroma/nginx.nix

@@ -0,0 +1,17 @@
+{ config, lib, pkgs, ... }:
+
+{
+  services.nginx = {
+    enable = true;
+    virtualHosts = {
+      "walkah.social" = {
+        forceSSL = true;
+        enableACME = true;
+        locations."/" = {
+          proxyPass = "http://plato:4000";
+          proxyWebsockets = true;
+        };
+      };
+    };
+  };
+}

nix/sources.json

@@ -5,10 +5,10 @@
         "homepage": "https://nix-community.github.io/home-manager/",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "0382c5f75e9b4ffb0cdc75535c3e249019710a02",
-        "sha256": "1dqcs13gxfficb2xdbl7vznin6qvb3ha7zni60ivyv6ci6nk9xcd",
+        "rev": "e39a9d0103e3b2e42059c986a8c633824b96c193",
+        "sha256": "0i5nx4vbib5l0nlmpmfa0djcgqsypa0arxz13cbgh30vjx667mjp",
         "type": "tarball",
-        "url": "https://github.com/nix-community/home-manager/archive/0382c5f75e9b4ffb0cdc75535c3e249019710a02.tar.gz",
+        "url": "https://github.com/nix-community/home-manager/archive/e39a9d0103e3b2e42059c986a8c633824b96c193.tar.gz",
         "url_template": "https://github.com/<owner>/<repo>/archive/<rev>.tar.gz"
     },
     "niv": {
@@ -17,10 +17,10 @@
         "homepage": "https://github.com/nmattia/niv",
         "owner": "nmattia",
         "repo": "niv",
-        "rev": "2998a663d03ef9521585f67cf8fdfa8dac348462",
-        "sha256": "17wgdcqysj5dah6h8dydvvnraff70nh2sgz059mw92qzm9i5gv6g",
+        "rev": "df49d53b71ad5b6b5847b32e5254924d60703c46",
+        "sha256": "1j5p8mi1wi3pdcq0lfb881p97i232si07nb605dl92cjwnira88c",
         "type": "tarball",
-        "url": "https://github.com/nmattia/niv/archive/2998a663d03ef9521585f67cf8fdfa8dac348462.tar.gz",
+        "url": "https://github.com/nmattia/niv/archive/df49d53b71ad5b6b5847b32e5254924d60703c46.tar.gz",
         "url_template": "https://github.com/<owner>/<repo>/archive/<rev>.tar.gz"
     },
     "nixpkgs": {
@@ -41,10 +41,10 @@
         "homepage": "",
         "owner": "Mic92",
         "repo": "sops-nix",
-        "rev": "c01f48b055ac776f9831c9d4a0fff83e3b74dbe3",
-        "sha256": "0aqhh2c8hnsm5jr7jvajvcsc2l90iv33d11nf8jk3ybxm0qxzhb6",
+        "rev": "c2614c4fe61943b3d280ac1892fcebe6e8eaf8c8",
+        "sha256": "1vcjqcgikmjsk3h14pb4z2fzj1ppwyv356k6a340qd48n3qnaf99",
         "type": "tarball",
-        "url": "https://github.com/Mic92/sops-nix/archive/c01f48b055ac776f9831c9d4a0fff83e3b74dbe3.tar.gz",
+        "url": "https://github.com/Mic92/sops-nix/archive/c2614c4fe61943b3d280ac1892fcebe6e8eaf8c8.tar.gz",
         "url_template": "https://github.com/<owner>/<repo>/archive/<rev>.tar.gz"
     }
 }