WIP
This commit is contained in:
@@ -1,7 +1,5 @@
|
|||||||
{ config, pkgs, lib, inputs, ... }:
|
{ config, pkgs, lib, inputs, ... }:
|
||||||
let
|
let
|
||||||
fqdn = "kavita.home.arpa";
|
|
||||||
useHttps = config.services.step-ca.enable;
|
|
||||||
baseDir = "/mnt/1tbssd/kavita";
|
baseDir = "/mnt/1tbssd/kavita";
|
||||||
mangal = "${pkgs.mangal}/bin/mangal";
|
mangal = "${pkgs.mangal}/bin/mangal";
|
||||||
in
|
in
|
||||||
@@ -22,22 +20,12 @@ in
|
|||||||
settings.Port = 5000;
|
settings.Port = 5000;
|
||||||
dataDir = baseDir;
|
dataDir = baseDir;
|
||||||
tokenKeyFile = config.age.secrets.kavita.path;
|
tokenKeyFile = config.age.secrets.kavita.path;
|
||||||
|
settings.BaseUrl = "/kavita";
|
||||||
};
|
};
|
||||||
|
|
||||||
#todo: base url needs new kavita version
|
#todo: base url needs new kavita version
|
||||||
systemd.services.kavita = {
|
systemd.services.kavita = {
|
||||||
after = [ "nginx.service" "step-ca.service" ];
|
after = [ "nginx.service" ];
|
||||||
preStart = ''
|
|
||||||
umask u=rwx,g=rx,o=
|
|
||||||
cat > "/mnt/1tbssd/kavita/config/appsettings.json" <<EOF
|
|
||||||
{
|
|
||||||
"TokenKey": "$(cat ${config.age.secrets.kavita.path})",
|
|
||||||
"Port": 5000,
|
|
||||||
"BaseUrl" : "/books",
|
|
||||||
"IpAddresses": "${lib.concatStringsSep "," ["0.0.0.0" "::"]}"
|
|
||||||
}
|
|
||||||
EOF
|
|
||||||
'';
|
|
||||||
};
|
};
|
||||||
|
|
||||||
systemd.services.download-manga = {
|
systemd.services.download-manga = {
|
||||||
@@ -61,14 +49,9 @@ in
|
|||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
security.acme.certs."${fqdn}".server = "https://127.0.0.1:8443/acme/acme/directory";
|
services.nginx.virtualHosts."kopatz.ddns.net".locations."/kavita" = {
|
||||||
services.nginx.virtualHosts."${fqdn}" = {
|
proxyPass = "http://127.0.0.1:5000";
|
||||||
forceSSL = useHttps;
|
extraConfig = ''
|
||||||
enableACME = useHttps;
|
|
||||||
quic = useHttps;
|
|
||||||
http3 = useHttps;
|
|
||||||
locations."/".proxyPass = "http://127.0.0.1:5000";
|
|
||||||
locations."/".extraConfig = ''
|
|
||||||
add_header Access-Control-Allow-Origin *;
|
add_header Access-Control-Allow-Origin *;
|
||||||
add_header Access-Control-Allow-Methods "GET, POST, OPTIONS";
|
add_header Access-Control-Allow-Methods "GET, POST, OPTIONS";
|
||||||
add_header Access-Control-Allow-Headers "Authorization, Origin, X-Requested-With, Content-Type, Accept";
|
add_header Access-Control-Allow-Headers "Authorization, Origin, X-Requested-With, Content-Type, Accept";
|
||||||
|
|||||||
Reference in New Issue
Block a user