9e2b4df8df
ensure backup services is able to write to /media/cloud
32 lines
791 B
Nix
32 lines
791 B
Nix
{ pkgs, lib, config, ... }:
|
|
let
|
|
fqdn = "rss.euer.krebsco.de";
|
|
ratt-path = "/var/lib/ratt/";
|
|
in {
|
|
systemd.tmpfiles.rules = ["d ${ratt-path} 0750 nginx nginx - -" ];
|
|
services.tt-rss = {
|
|
enable = true;
|
|
virtualHost = fqdn;
|
|
selfUrlPath = "https://${fqdn}";
|
|
};
|
|
|
|
services.postgresql.package = pkgs.postgresql_9_6;
|
|
state = [ config.services.postgresqlBackup.location ];
|
|
|
|
services.postgresqlBackup = {
|
|
enable = true;
|
|
databases = [ config.services.tt-rss.database.name ];
|
|
};
|
|
systemd.services.postgresqlBackup-tt_rss.serviceConfig.SupplementaryGroups = [ "download" ];
|
|
|
|
services.nginx.virtualHosts."${fqdn}" = {
|
|
enableACME = true;
|
|
forceSSL = true;
|
|
locations."/ratt/" = {
|
|
alias = ratt-path;
|
|
extraConfig = "autoindex on;";
|
|
};
|
|
};
|
|
}
|
|
|