Merge pull request #69 from DarkKirb/add-peertube

Add peertube

config/nixos-8gb-fsn1-1.nix

@@ -28,6 +28,7 @@
     ./bittorrent-blocker.nix
     ./services/invtracker.nix # Remove once prof is done grading
     ./services/akkoma
+    ./services/peertube
   ];
 
   boot.initrd.availableKernelModules = ["ata_piix" "virtio_pci" "virtio_scsi" "xhci_pci" "sd_mod" "sr_mod"];

config/services/peertube/default.nix

@@ -0,0 +1,37 @@
+{ config, ... }: {
+  services.peertube = {
+    enable = true;
+    localDomain = "peertube.chir.rs";
+    listenHttp = 5370;
+    listenWeb = 5370;
+    serviceEnvironmentFile = config.sops.secrets."services/peertube".path;
+    settings = {
+      object_storage = {
+        enabled = true;
+        endpoint = "s3.us-west-001.backblazeb2.com";
+        videos = {
+          bucket_name = "mastodon-chir-rs";
+          prefix = "peertube/videos/";
+          base_url = "https://mastodon-assets.chir.rs/";
+        };
+        streaming_playlists = {
+          bucket_name = "mastodon-chir-rs";
+          prefix = "peertube/streaming-playlists/";
+          base_url = "https://mastodon-assets.chir.rs/";
+        };
+      };
+    };
+    database.createLocally = true;
+    redis.createLocally = true;
+  };
+  services.caddy.virtualHosts."peertube.chir.rs" = {
+    useACMEHost = "chir.rs";
+    extraConfig = ''
+      import baseConfig
+      reverse_proxy {
+        to http://127.0.0.1:5370
+      }
+    '';
+  };
+  sops.secrets."services/peertube".owner = "peertube";
+}

secrets/nixos-8gb-fsn1-1.yaml

@@ -10,6 +10,7 @@ security:
 services:
     nix:
         cache-key: ENC[AES256_GCM,data:aLUW21G4ubmxS97LOwvUY+9ovrk02tZwq3D6tSO5tK9DwhySEuquQIHKsmuhsQtuCZRDLPgRh+T1XIKykWxv0S42NhdMGiE6GuRs8SbnEwcYMHwEPwHHMppG38G+EEKmTA==,iv:nm0yWYS8xk2C5mn3lpSEocqmCFOx2rL57euMfcXOXHA=,tag:WXEAMiMS9S/0hKrd63mBLQ==,type:str]
+    peertube: ENC[AES256_GCM,data:7ZFddxNg4bgXnn56OhcY23aU7Yz6qIyQgOxXg0wDgG7jOyefU2VAQwupmr0OUmD6I1C12gGLv0JymktVSLcZ4pEIhx/cbSmn2dHrWqHDyzp/xRfUYFjTxtc+rKQUpH4vX9hnqC0dx7Hp9/7kIPGQOTkUneg/f9amw2zZlMj/XsuUpzSF5g==,iv:KdaWy211C2H5QTVweLWmE8/r3GV2StTJUE0fXrudo4U=,tag:5WMWhJMgH11byV7EHIHn2w==,type:str]
     akkoma.exs: ENC[AES256_GCM,data:snEg7wZKp0Oa+tQnZjjeMwUbsFXdFHP2g4UwjPIHit2YYuR7HJQGra6RP+2mnmr9v8rceWyEXx8JQi5zbveT/NAg6Hp9WZ3gI2ClwazchiAeJ35wMHi49AgfSaRIVjDam1EI2uOfxjOUi5nsgTqb5raQDmwFV/NsK8qCUwzHb9oGoaT+PV3kl601Ua6gWWVoB7vX/X5NIxfxx3cTvzYPRdlJqNQUHCHLIrGO6qkeu0iVeJiU8iTCG/7ZFSP5mbO8d/H3LmRQbenPpCYSTdRy1zNwHCk5THtmcoMiytpj8/AmMJS0Yq8JcKST0fdgevU0eV4c6B34ZbRS4hKBG/ppnGy/WnnN1i/R14YP6SPmbsHoYJ/4ksAMS7TvQFnes1HEMoMkM5gwCyoiEV9GLcs/NhWwVxKZnLtb1S/hwYWJ32WnJuQxzcspR+n7dPawD31bxO1sT4tfmRxU3eFtO53g9TkNDLVV8ntZHZlnc6WKOVW6eeVHmrACaJO1zfJpnc6oEAiay5fK0xMRlmLvhZcDu8USHj7IGvaEn5G2HgmDjxmOJeM9T9S5+yZUkfGkbQSAKzPbcXZQdvdepqqHibBNSYgiIvIHojqLUy/cjQwB7Yek13EwsC2KJR2j/IsrdPr6Qef6Cru4aUh1IN+IiBVseo/ohOGKJADf0gGfW4ul84SrAIuMGM+nKN0LFv1XLXXlkSYcBCiyUfwoO0rfeU/a53NZKR+Vk7MvMF3n1DW6KZ3Nlo2/8VMZAgBdPk3AHjpcAYqMMjbuYg8QJ8XKgs2u7f9LmIcVWbmHR48ZdzswUGHGVSb+Uf+/gu2J7sEFFu2vqZb9Kzwglmo1tmN7ZvElU3EsolqVX3ybs/PEOtwIISbfHBFLgiYiUwm0Qu/BoMMRs8mRA6USDRxdCjD4OWeqJ5m6XfZN+qJne+rz1B+FmQo8uXBoVLiGbpymGX4nIGl61rfdfsrAYMtgCPL9xky5BiieSUb8C27/P0XXMp4=,iv:HRszf3GE1/4xFwdWpTF7sz9TIKXO/2Y8j5Qd+Dk3zj0=,tag:iLSSIiOG4m+YuEcfCXyf/g==,type:str]
     matrix-media-repo:
         access-key-id: ENC[AES256_GCM,data:2/H4GA5iHAkvl5XgLmxm9tnxIAps4YokpA==,iv:661Dt7ZYNsKYyp3yG1DW2n6eRezhN+vMjSQcg4V8qR0=,tag:jn/0Uj6//gAaAdXybUwLwA==,type:str]
@@ -75,8 +76,8 @@ sops:
             N1lNTTRhSDFsczd4VjNudUU2NEt4MUEKdVJIJmaoGcwUHa0BGB45jqYnm9aPVZxP
             dl1vkMx8EAiKhWKbBwQm5fFZcNh371rspGE7KOXmwNbNWef5bVfHpQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2022-11-20T14:43:49Z"
-    mac: ENC[AES256_GCM,data:spHTRiTpWU208lkC2mR3vSGTev3muYBp/q7ifSNYfCzKIj8NCiubBT3OeS5UiLs2hDbGd75bIjyfZwxmNrGeHx8sBoaE/Pa+KaAhuJiDnHT9/AgNy83sw37BtggdnLJduDLmZHzKhPWvMdnSQ9EQMrTT9g3D5cpVGfoZ8mD7PDU=,iv:UhM6RbZjjhOM+/v4JQOV+EhMij7tY9ev9nsnK+BKwB0=,tag:WT0DX976PSGXDNjVlDNNLQ==,type:str]
+    lastmodified: "2022-11-27T09:42:45Z"
+    mac: ENC[AES256_GCM,data:qnicU8esh7GytPm4v2PdZ2f8MEL+u/VkSnU/Zutnj+qKBfT91/MVxHV24mX9ozZhvTv/qFv0cl2hhBj4FOY/nnm2xGTJZ9TpkyFy69rg1c860uaqhTu3MnNNtmDAb13ywXNfri9rUG4xqXtJZMnvSUeQHjhns8KXjvC7Aj1Dvrs=,iv:zSpE/1kKLc9fL2mAD2ByZWGqJ1wE6JuxChMifjs1q0c=,tag:o8g+taLxtnZb3mF72sxrbA==,type:str]
     pgp:
         - created_at: "2022-02-02T17:50:42Z"
           enc: |

zones/chir.rs.nix

@@ -102,7 +102,7 @@ with dns.lib.combinators; let
     SOA = {
       nameServer = "ns1.chir.rs.";
       adminEmail = "lotte@chir.rs";
-      serial = 16;
+      serial = 17;
     };
     NS = [
       "ns1.chir.rs."
@@ -188,6 +188,7 @@ with dns.lib.combinators; let
       akko = createZone {};
       moa = createZone {};
       cache = createZone {};
+      peertube = createZone {};
 
       int =
         delegateTo [