90 lines
2.8 KiB
Nix
90 lines
2.8 KiB
Nix
{ lib, pkgs, config, ... }:
|
|
let
|
|
cfg = config.modules.services.bin;
|
|
fqdn = "${cfg.subdomain}.${config.networking.domain}";
|
|
rustypasteConfig = (pkgs.formats.toml { }).generate "rustypaste-config.toml" {
|
|
server = {
|
|
address = "[::1]:${toString cfg.port}";
|
|
max_content_length = "1GB";
|
|
upload_path = "/var/lib/rustypaste/uploads";
|
|
timeout = "5m";
|
|
};
|
|
|
|
landing_page = {
|
|
text = ''
|
|
┬─┐┬ ┬┌─┐┌┬┐┬ ┬┌─┐┌─┐┌─┐┌┬┐┌─┐
|
|
├┬┘│ │└─┐ │ └┬┘├─┘├─┤└─┐ │ ├┤
|
|
┴└─└─┘└─┘ ┴ ┴ ┴ ┴ ┴└─┘ ┴ └─┘
|
|
|
|
Submit files via HTTP POST here:
|
|
curl -F 'file=@example.txt' https://${fqdn}
|
|
This will return the URL of the uploaded file.
|
|
|
|
The server administrator might remove any pastes that they do not personally
|
|
want to host.
|
|
|
|
If you are the server administrator and want to change this page, just go
|
|
into your config file and change it! If you change the expiry time, it is
|
|
recommended that you do.
|
|
|
|
By default, pastes expire every hour. The server admin may or may not have
|
|
changed this.
|
|
|
|
Check out the GitHub repository at https://github.com/orhun/rustypaste
|
|
Command line tool is available at https://github.com/orhun/rustypaste-cli
|
|
'';
|
|
content_type = "text/plain; charset=utf-8";
|
|
};
|
|
|
|
paste = {
|
|
default_extension = "txt";
|
|
random_url = { type = "petname"; words = 2; separator = "-"; };
|
|
delete_expirted_files = { enabled = true; interval = "1h"; };
|
|
default_expiry = "100y";
|
|
mime_override = [
|
|
{ mime = "text/plain"; regex = "^.*\.(log|txt|diff|sh|rs|toml|cr|nix|rb|js|tsx|ts|jsx)$"; }
|
|
];
|
|
};
|
|
};
|
|
in
|
|
{
|
|
options.modules.services.bin = {
|
|
enable = lib.mkEnableOption "Enable Rustypaste";
|
|
subdomain = lib.mkOption {
|
|
type = lib.types.str;
|
|
};
|
|
port = lib.mkOption {
|
|
type = lib.types.int;
|
|
default = 3600;
|
|
};
|
|
};
|
|
|
|
config = lib.mkIf cfg.enable {
|
|
systemd.services.rustypaste = {
|
|
enable = true;
|
|
description = "Rustypaste pastebin";
|
|
environment = {
|
|
CONFIG = rustypasteConfig;
|
|
AUTH_TOKENS_FILE = "/var/secrets/rustypaste-tokens";
|
|
};
|
|
serviceConfig = {
|
|
ExecStart = "${pkgs.rustypaste}/bin/rustypaste";
|
|
WorkingDirectory = "/var/lib/rustypaste";
|
|
StateDirectory = "rustypaste";
|
|
DynamicUser = true;
|
|
BindReadOnlyPaths = [ "/var/secrets/rustypaste-tokens" ];
|
|
};
|
|
wantedBy = [ "multi-user.target" ];
|
|
confinement = {
|
|
enable = true;
|
|
packages = [ rustypasteConfig ];
|
|
};
|
|
};
|
|
|
|
modules.services.webserver = {
|
|
enable = lib.mkDefault true;
|
|
vHosts.${fqdn}.locations."/".proxyPort = cfg.port;
|
|
};
|
|
};
|
|
}
|