From 049db6fcf8305d47bfa6a85d19b1db1785f84c81 Mon Sep 17 00:00:00 2001
From: Ashhhleyyy <ash@ashhhleyyy.dev>
Date: Sat, 24 Aug 2024 18:25:22 +0100
Subject: [PATCH] feat(amy): add gotosocial for sandbox.isnt-a.top

---
 flake.nix               |   1 +
 roles/gts-sandbox.nix   |  23 +++++++++++++++++++++++
 secrets/gts-sandbox.age | Bin 0 -> 526 bytes
 secrets/secrets.nix     |   1 +
 4 files changed, 25 insertions(+)
 create mode 100644 roles/gts-sandbox.nix
 create mode 100644 secrets/gts-sandbox.age

diff --git a/flake.nix b/flake.nix
index aff6af1..0c14456 100644
--- a/flake.nix
+++ b/flake.nix
@@ -183,6 +183,7 @@
         ./hosts/amy/configuration.nix
         ./roles/conduit.nix
         ./roles/coredns
+        ./roles/gts-sandbox.nix
         ./roles/iceshrimp.nix
         ./roles/keycloak.nix
         ./roles/mc-proxy.nix
diff --git a/roles/gts-sandbox.nix b/roles/gts-sandbox.nix
new file mode 100644
index 0000000..4c177b7
--- /dev/null
+++ b/roles/gts-sandbox.nix
@@ -0,0 +1,23 @@
+{
+  config
+, pkgs
+, ...
+}:
+
+{
+  age.secrets.gts-sandbox.file = ../secrets/gts-sandbox.age;
+
+  services.gotosocial = {
+    enable = true;
+    setupPostgresqlDB = true;
+    settings = {
+      host = "sandbox.isnt-a.top";
+      port = 3001;
+      trusted-proxies = ["100.64.0.0/10"];
+      bind-address = "0.0.0.0";
+      accounts-registration-open = true;
+      accounts-reason-required = true;
+    };
+    #environmentFile = config.age.secrets.gts-sandbox.path;
+  };
+}
diff --git a/secrets/gts-sandbox.age b/secrets/gts-sandbox.age
new file mode 100644
index 0000000000000000000000000000000000000000..d89aa483494aca4a4ea2e5fe71942a3f09797773
GIT binary patch
literal 526
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCT4b}cs!DOV^kHn7Oa
zD9ZM5&eP9xOZ0cGiga{y^++yEN%Sd*^ow%Ib2Ls1sVX;h_2tqxN-TFyvhdC;aWW_>
zNi$9L$gj#VGcGeq)DQEFFbE4RD9i~<)Gl?73PrcgBHyw+KTx5h!l*RQJkqDsBRec3
zJK4}H%QwHQA~Y<s%->nRIH=U3!Z@ic$<W6;Gn*?sQ9r=nsJJk!+}X1z!_qG*BEm2*
zJkOxgD9=2?BdsJXH9tAOtW3KwJCaLRS63k@*s-!Ovcfda&?G4_*jqovs4~yI#9co(
zJj&89tvJ}X*fb~Hyx3d2Je!L#_*~p?`8{!*x+_X}CVeq-@6h8(Wsv7NxL^n0qDTAR
zx}7zhmHJTNkG!|>-3jcT?pGB3-^@D``aS5$b|bTw)-xW+>lS^#uyiqxX#7UoJsjru
z^{(oFjhPXq{{Be*d~y4=lLa{K7tC+EXU<XoTR(zdW;a`m-2OXfgl_Pxe#a*qde_#m
z^4QTY$L@bPVaaCqYvwe$`2D+uJ|F+Jamj>iu8__Ln#HeL!rbGW-MW}w3vN|1v0IgF
z=-=#7wC;0wOWwOVmS4@6_O1BwZ~ZjK%tu;6jIUDH+NcF{$y+mail}}M*y-+n{`PUT
M@a=0;d?#-Q0G6@Mm;e9(

literal 0
HcmV?d00001

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 73b09ea..7df73b3 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -10,4 +10,5 @@ in
   "keycloakPostgres.age".publicKeys = users ++ systems;
   "zulip-redis.age".publicKeys = users ++ systems;
   "zulip-env.age".publicKeys = users ++ systems;
+  "gts-sandbox.age".publicKeys = users ++ systems;
 }