felschr/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor(collabora-office): switch to NixOS module

Browse source 
Switch from OCI container to NixOS module.
This commit is contained in:
Felix Schröter 2025-05-01 14:58:21 +02:00
parent 827217da51
commit 4130730852
Signed by: felschr
GPG key ID: 671E39E6744C807D
2 changed files with 15 additions and 39 deletions

3
flake.nix
View file

@ -57,7 +57,6 @@ rec {
pre-commit-hooks = {
url = "github:cachix/pre-commit-hooks.nix";
inputs.nixpkgs.follows = "nixpkgs";
inputs.nixpkgs-stable.follows = "nixpkgs";
};
matrix-appservices = {
@ -82,7 +81,7 @@ rec {
csharp-language-server = {
url = "github:SofusA/csharp-language-server";
inputs.nixpkgs.follows = "nixpkgs";
# inputs.nixpkgs.follows = "nixpkgs";
inputs.flake-utils.follows = "flake-utils";
};
};

51
services/collabora-office.nix
View file

@ -1,57 +1,34 @@
{ config, ... }:
let
inherit (config.users.users.collabora-office) uid;
inherit (config.users.groups.collabora-office) gid;
cfg = config.services.collabora-online;
in
{
virtualisation.oci-containers.containers.collabora-office = {
image = "docker.io/collabora/code";
ports = [ "9980:9980" ];
environment =
let
mkAlias = domain: "https://" + (builtins.replaceStrings [ "." ] [ "\\." ] domain) + ":443";
in
services.collabora-online = {
enable = true;
aliasGroups = [
{
server_name = "office.felschr.com";
aliasgroup1 = mkAlias "office.felschr.com";
aliasgroup2 = mkAlias "cloud.felschr.com";
extra_params = "--o:ssl.enable=false --o:ssl.termination=true";
};
extraOptions = [
"--runtime=crun"
"--uidmap=0:65534:1"
"--gidmap=0:65534:1"
"--uidmap=100:${toString uid}:1"
"--gidmap=101:${toString gid}:1"
"--network=host"
"--cap-add=MKNOD"
"--cap-add=CHOWN"
"--cap-add=FOWNER"
"--cap-add=SYS_CHROOT"
"--label=io.containers.autoupdate=registry"
host = "https://office.felschr.com";
aliases = [ "https://cloud.felschr.com" ];
}
];
settings = {
ssl = {
enable = false;
termination = true;
};
};
};
services.nginx.virtualHosts."office.felschr.com" = {
forceSSL = true;
enableACME = true;
locations."/" = {
proxyPass = "http://127.0.0.1:9980";
proxyPass = "http://127.0.0.1:${toString cfg.port}";
proxyWebsockets = true;
extraConfig = ''
proxy_read_timeout 36000s;
'';
};
};
users.users.collabora-office = {
isSystemUser = true;
group = "collabora-office";
uid = 982;
};
users.groups.collabora-office = {
gid = 982;
};
}