non-critical-infra/owncast: init
Martin Weinelt committed
Jun 10, 2024 at 16:08 UTC
dc93e10e2e37d7d08366f12e648fc425bfea9a3f
3 files changed
+41
non-critical-infra/hosts/caliban.nixos.org/default.nix
+1
@@ -11,6 +11,7 @@
11
../../modules/backup.nix
12
../../modules/element-web.nix
13
../../modules/matrix-synapse.nix
14
+ ../../modules/owncast.nix
15
../../modules/vaultwarden.nix
16
];
17
non-critical-infra/modules/owncast.nix
new
+35
@@ -0,0 +1,35 @@
1
+{
2
+ config,
3
+ ...
4
+}:
5
+
6
+{
7
+ imports = [
8
+ ./nginx.nix
9
+ ];
10
+
11
+ fileSystems."/var/lib/owncast" = {
12
+ device = "zroot/root/owncast";
13
+ fsType = "zfs";
14
+ options = [ "zfsutil" ];
15
+ };
16
+
17
+ services.backups.includeZfsDatasets = [
18
+ "/var/lib/owncast"
19
+ ];
20
+
21
+ services.owncast = {
22
+ enable = true;
23
+ openFirewall = true;
24
+ };
25
+
26
+ services.nginx.virtualHosts."live.nixos.org" = {
27
+ forceSSL = true;
28
+ enableACME = true;
29
+
30
+ locations."/" = {
31
+ proxyPass = with config.services.owncast; "http://${listen}:${toString port}";
32
+ proxyWebsockets = true;
33
+ };
34
+ };
35
+}
terraform/dns.tf
+5
@@ -271,6 +271,11 @@ locals {
271
type = "CNAME"
272
value = "caliban.nixos.org."
273
},
274
+ {
275
+ hostname = "live.nixos.org"
276
+ type = "CNAME"
277
+ value = "caliban.nixos.org."
278
+ },
279
{
280
hostname = "matrix.nixos.org"
281
type = "CNAME"