qo.is/infrastructure
3
0
Fork 0
Code Issues 12 Pull requests Projects 1 Activity Actions

Use attic from nixpkgs

Browse source
This commit is contained in:
Fabian Hauser 2024-12-06 14:26:01 +02:00
parent df83c62e0c
commit 2b415162b6
4 changed files with 9 additions and 150 deletions
Download patch file Download diff file Expand all files Collapse all files

5
nixos-configurations/lindberg-build/applications/attic.nix
View file

@ -14,7 +14,7 @@ in
# generate secret with
# nix run system#openssl rand 64 | base64 -w0
# ATTIC_SERVER_TOKEN_HS256_SECRET_BASE64="output from openssl"
credentialsFile = config.sops.secrets."attic/server_token".path;
environmentFile = config.sops.secrets."attic/server_token".path;
settings = {
listen = "127.0.0.1:${builtins.toString atticPort}";
@ -44,6 +44,8 @@ in
max-size = 256 * 1024; # 256 KiB
};
garbage-collection.default-retention-period = "6 months";
database.url = "postgresql:///atticd?host=/run/postgresql";
};
};
@ -51,6 +53,7 @@ in
imports = [ ../../../defaults/webserver ];
qois.postgresql.enable = true;
# Note: Attic cache availability is "best effort", so no artifacts are backed up.
services.postgresql = {