seafile: init

hosts/nuc/default.nix

@@ -10,6 +10,7 @@
       ./modules/backup
       ./modules/hydra
       ./modules/nextcloud
+      ./modules/seafile
       ./modules/uptime-kuma
       ./modules/vaultwarden
       ./modules/nginx

hosts/nuc/modules/backup/default.nix

@@ -12,13 +12,18 @@
   services.borgmatic = {
     enable = true;
     settings = {
-      location.source_directories = [
+      # fix failing check
+      location = null;
+      source_directories = [
         "/var/lib"
         "/var/log"
         "/nix/persist"
       ];
-      location.repositories = [
-        "/mnt/backup/nuc"
+      repositories = [
+        {
+          label = "nuc";
+          path = "/mnt/backup/nuc";
+        }
       ];
       storage = {
         encryption_passcommand = "${pkgs.coreutils}/bin/cat ${config.sops.secrets."borg/passphrase".path}";

hosts/nuc/modules/seafile/default.nix

@@ -0,0 +1,29 @@
+{ config, pkgs, ... }:
+let
+  domain = "seafile.${config.networking.domain}";
+in
+{
+  services.seafile = {
+    enable = true;
+    adminEmail = "rouven@rfive.de";
+    initialAdminPassword = "unused garbage";
+    ccnetSettings.General.SERVICE_URL = "https://${domain}";
+    ccnetSettings.General.FILE_SERVER_ROOT = "https://${domain}/seafhttp";
+  };
+  services.nginx.virtualHosts."${domain}" = {
+    enableACME = true;
+    forceSSL = true;
+    locations."/" = {
+      proxyPass = "http://unix:/run/seahub/gunicorn.sock";
+    };
+    locations."/seafhttp" = {
+      proxyPass = "http://127.0.0.1:${toString config.services.seafile.seafileSettings.fileserver.port}";
+      extraConfig = ''
+        rewrite ^/seafhttp(.*)$ $1 break;
+      '';
+    };
+    locations."/media" = {
+      root = pkgs.seahub;
+    };
+  };
+}