summaryrefslogtreecommitdiff
path: root/services/kanboard.nix
diff options
context:
space:
mode:
Diffstat (limited to 'services/kanboard.nix')
-rw-r--r--services/kanboard.nix63
1 files changed, 34 insertions, 29 deletions
diff --git a/services/kanboard.nix b/services/kanboard.nix
index c19b673..6c7f0eb 100644
--- a/services/kanboard.nix
+++ b/services/kanboard.nix
@@ -1,57 +1,62 @@
-{pkgs, config, lib, ...}:
- let
- cfg = config.wilkuu.services.kanboard;
- inherit (lib) mkEnableOption mkOption types mkIf;
- in
+{ config, lib, ... }:
+let
+ cfg = config.wilkuu.services.kanboard;
+ inherit (lib)
+ mkEnableOption
+ mkOption
+ types
+ mkIf
+ ;
+in
{
options.wilkuu.services.kanboard = {
- enable = mkEnableOption "kanboard";
+ enable = mkEnableOption "kanboard";
domain = mkOption {
- type = types.str;
+ type = types.str;
example = "kb.wilkuu.xyz";
};
- };
+ };
config = mkIf cfg.enable {
- wilkuu.services.mysql.unix_users = ["kanboard"];
- wilkuu.mjmap = {
- enable = lib.mkDefault true;
- users = ["kanboard"];
- };
+ wilkuu.services.mysql.unix_users = [ "kanboard" ];
+ wilkuu.mjmap = {
+ enable = lib.mkDefault true;
+ users = [ "kanboard" ];
+ };
sops.secrets."kanboard/db_password" = {
- sopsFile = ../secrets/${config.networking.hostName}/kanboard.yaml;
- owner = "kanboard";
- mode = "500";
- };
+ sopsFile = ../secrets/${config.networking.hostName}/kanboard.yaml;
+ owner = "kanboard";
+ mode = "500";
+ };
sops.templates."kanboard-env" = {
content = ''
DB_PASSWORD=${config.sops.placeholder."kanboard/db_password"}
PLUGIN_INSTALLER=true
- '';
- owner = "kanboard";
- mode = "500";
+ '';
+ owner = "kanboard";
+ mode = "500";
};
systemd.services.phpfpm-kanboard.serviceConfig = {
- EnvironmentFile = config.sops.templates."kanboard-env".path;
- };
+ EnvironmentFile = config.sops.templates."kanboard-env".path;
+ };
services.kanboard = {
nginx = {
enableACME = false;
forceSSL = false;
- addSSL = false;
+ addSSL = false;
};
- domain = cfg.domain;
- enable = true;
+ domain = cfg.domain;
+ enable = true;
settings = {
PLUGIN_INSTALLER = "$PLUGIN_INSTALLER";
PLUGINS_DIR = "${config.services.kanboard.dataDir}/plugins";
- MAIL_FROM = "Kanboard <noreply@wilkuu.nl>";
+ MAIL_FROM = "Kanboard <noreply@wilkuu.nl>";
MAIL_TRANSPORT = "sendmail";
MAIL_SENDMAIL_COMMAND = "sendmail";
- DB_DRIVER = "mysql";
- DB_USERNAME = "kanboard";
+ DB_DRIVER = "mysql";
+ DB_USERNAME = "kanboard";
DB_HOSTNAME = "127.0.0.1;unix_socket=/run/mysqld/mysqld.sock";
- DB_PASSWORD = "$DB_PASSWORD";
+ DB_PASSWORD = "$DB_PASSWORD";
ENABLE_URL_REWRITE = true;
TRUSTED_PROXY_HEADERS = "HOST,X-REAL-IP,X-FORWARDED-FOR,X-FORWARDED-HOST,X-FORWARDED-SERVER";
TRUSTED_PROXY_NETWORKS = "192.168.80.0/24,192.168.88.0/24";