mirror of
https://github.com/Noratrieb/vps.git
synced 2026-01-14 16:55:00 +01:00
49 lines
1.2 KiB
Nix
49 lines
1.2 KiB
Nix
{ config, pkgs, name, ... }: {
|
|
age.secrets.garage_secrets.file = ../../secrets/garage_secrets.age;
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
minio-client
|
|
];
|
|
|
|
networking.firewall.interfaces.wg0.allowedTCPPorts = [
|
|
3901 # RPC
|
|
3903 # admin for metrics
|
|
];
|
|
|
|
services.garage = {
|
|
enable = true;
|
|
package = pkgs.garage_2_0_0;
|
|
settings = {
|
|
metadata_dir = "/var/lib/garage/meta";
|
|
data_dir = "/var/lib/garage/data";
|
|
db_engine = "sqlite";
|
|
metadata_auto_snapshot_interval = "6h";
|
|
|
|
replication_factor = 3;
|
|
|
|
# arbitrary, but a bit higher as disk space matters more than time. she says, cluelessly.
|
|
compression-level = 5;
|
|
|
|
rpc_bind_addr = "[::]:3901";
|
|
rpc_public_addr = "${name}.local:3901";
|
|
|
|
s3_api = {
|
|
s3_region = "garage";
|
|
api_bind_addr = "[::]:3900";
|
|
root_domain = ".s3.garage.localhost";
|
|
};
|
|
|
|
s3_web = {
|
|
bind_addr = "[::]:3902";
|
|
root_domain = ".web.garage.localhost";
|
|
index = "index.html";
|
|
};
|
|
|
|
admin = {
|
|
api_bind_addr = "[::]:3903";
|
|
};
|
|
};
|
|
environmentFile = config.age.secrets.garage_secrets.path;
|
|
};
|
|
}
|
|
|