1 { config, lib, pkgs, pkgs-unstable, ... }:
4 imports = [ ./prod.nix ];
6 services.lemmy-prod = {
8 server.package = pkgs.callPackage ./server.nix { Security = null; };
9 ui.package = pkgs.callPackage ./ui.nix { };
11 database.createLocally = true;
14 hostname = "awful.systems";
16 admin_username = "self";
17 admin_email = "self@awful.systems";
18 site_name = "awful.systems";
23 sops.secrets."lemmy/initial_admin_password" = { };
25 sops.templates.lemmy-prod.content = builtins.toJSON
26 (config.services.lemmy-prod.settings // {
27 setup = config.services.lemmy-prod.settings.setup // {
28 admin_password = config.sops.placeholder."lemmy/initial_admin_password";
32 systemd.services.lemmy-prod = {
36 LoadCredential = ''lemmy-prod:${config.sops.templates.lemmy-prod.path}'';
40 LEMMY_CONFIG_LOCATION = lib.mkForce "%d/lemmy-prod";
41 RUST_BACKTRACE = "full";
43 pkgs.lib.mkForce "postgres:///lemmy?host=/run/postgresql&user=lemmy";
47 networking.firewall.allowedTCPPorts = [ 80 ];