replace snips.sh with rustypaste

hosts/freun.dev/services/bin.nix

@@ -0,0 +1,73 @@
+{ pkgs, ... }:
+let
+  fqdn = "bin.freun.dev";
+  port = 3600;
+  config = (pkgs.formats.toml { }).generate "rustypaste-config.toml" {
+    server = {
+      address = "[::1]:${toString port}";
+      max_content_length = "1GB";
+      upload_path = "/var/lib/rustypaste/uploads";
+      timeout = "5m";
+    };
+
+    landing_page = {
+      text = ''
+        ┬─┐┬ ┬┌─┐┌┬┐┬ ┬┌─┐┌─┐┌─┐┌┬┐┌─┐
+        ├┬┘│ │└─┐ │ └┬┘├─┘├─┤└─┐ │ ├┤
+        ┴└─└─┘└─┘ ┴  ┴ ┴  ┴ ┴└─┘ ┴ └─┘
+
+        Submit files via HTTP POST here:
+            curl -F 'file=@example.txt' https://${fqdn}
+        This will return the URL of the uploaded file.
+
+        The server administrator might remove any pastes that they do not personally
+        want to host.
+
+        If you are the server administrator and want to change this page, just go
+        into your config file and change it! If you change the expiry time, it is
+        recommended that you do.
+
+        By default, pastes expire every hour. The server admin may or may not have
+        changed this.
+
+        Check out the GitHub repository at https://github.com/orhun/rustypaste
+        Command line tool is available  at https://github.com/orhun/rustypaste-cli
+      '';
+      content_type = "text/plain; charset=utf-8";
+    };
+
+    paste = {
+      default_extension = "txt";
+      random_url = { type = "petname"; words = 2; separator = "-"; };
+      delete_expirted_files = { enabled = true; interval = "1h"; };
+      default_expiry = "100y";
+      mime_override = [
+        { mime = "text/plain"; regex = "^.*\.(log|txt|diff|sh|rs|toml|cr|nix|rb|js|tsx|ts|jsx)$"; }
+      ];
+    };
+  };
+in
+{
+  systemd.services.rustypaste = {
+    enable = true;
+    description = "Rustypaste pastebin";
+    environment = {
+      CONFIG = config;
+      AUTH_TOKENS_FILE = "/var/secrets/rustypaste-tokens";
+    };
+    serviceConfig = {
+      ExecStart = "${pkgs.rustypaste}/bin/rustypaste";
+      WorkingDirectory = "/var/lib/rustypaste";
+      StateDirectory = "rustypaste";
+      DynamicUser = true;
+      BindReadOnlyPaths = [ "/var/secrets/rustypaste-tokens" ];
+    };
+    wantedBy = [ "multi-user.target" ];
+    confinement = {
+      enable = true;
+      packages = [ config ];
+    };
+  };
+
+  modules.webserver.vHosts.${fqdn}.locations."/".proxyPort = port;
+}