config/services/web/quentin/ihatemoney/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29

{ lib, config, ... }:

let cfg = config.services.ihatemoney;
in {
  services.nginx.virtualHosts."quentin.aristote.fr".locations =
    lib.mkIf cfg.enable {
      "/money/".proxyPass = "http://127.0.0.1${cfg.uwsgiConfig.http}/";
    };

  services.ihatemoney = {
    enable = true;
    enableAdminDashboard = true;
    adminHashedPassword =
      "pbkdf2:sha256:150000$s78RCYkJ$9c15a62ed1c89625cb78b5bde87d03b6dd1a03831afa4dbb2abb15ea4c1e150b";
    uwsgiConfig = { http = ":8000"; };
    extraConfig = ''
      APPLICATION_ROOT = "https://quentin.aristote.fr/money/"
    '';
  };

  services.opensmtpd = lib.mkIf cfg.enable {
    enable = true;
    serverConfiguration = ''
      listen on lo
      action block mda "cat >/dev/null"
      match from any for any action block
    '';
  };
}