add paste.ingolf-wagner.de

.forgejo/workflows/nix_build.yaml

@@ -3,9 +3,9 @@ name: Build all NixOS Configurations
 on:
   push:
     branches:
-      - '**'
+      - "**"
   schedule:
-    - cron: '30 2 * * *' # not to frequent, GitHub only allows a few pulls per hour
+    - cron: "30 2 * * *" # not to frequent, GitHub only allows a few pulls per hour
 
 jobs:
   nix build:

machines/orbi/configuration.nix

@@ -8,15 +8,16 @@
     ../../components
     ../../modules
 
-    ./service-forgejo.nix
     ./service-forgejo-runner.nix
+    ./service-forgejo.nix
     ./service-hedgedoc.nix
+    ./service-nix-cache.nix
     ./service-photoprism.nix
+    #./service-surrealdb.nix # not really needed at the moment
     ./service-taskserver.nix
     ./service-vaultwarden.nix
-    #./service-surrealdb.nix # not really needed at the moment
     ./service-vikunja.nix
-    ./service-nix-cache.nix
+    ./service-wastebin.nix
 
     ./nginx-ingolf-wagner-de.nix
     ./nginx-wkd.nix

machines/orbi/service-wastebin.nix

@@ -0,0 +1,27 @@
+{ pkgs, ... }:
+let
+  port = 9001;
+in
+{
+  services.wastebin = {
+    enable = true;
+    settings = {
+      WASTEBIN_ADDRESS_PORT = "127.0.0.1:${toString port}";
+      WASTEBIN_TITLE = "paste.ingolf-wagner.de";
+      WASTEBIN_MAX_PASTE_EXPIRATION = 60 * 60 * 24 * 30;
+    };
+  };
+
+  services.nginx = {
+    enable = true;
+    virtualHosts. "paste.ingolf-wagner.de" = {
+      forceSSL = true;
+      enableACME = true;
+      locations."/" = {
+        recommendedProxySettings = true;
+        proxyWebsockets = true;
+        proxyPass = "http://127.0.0.1:${toString port}";
+      };
+    };
+  };
+}