feat(amy): add gotosocial for sandbox.isnt-a.top

flake.nix

@@ -183,6 +183,7 @@
         ./hosts/amy/configuration.nix
         ./roles/conduit.nix
         ./roles/coredns
+        ./roles/gts-sandbox.nix
         ./roles/iceshrimp.nix
         ./roles/keycloak.nix
         ./roles/mc-proxy.nix

roles/gts-sandbox.nix

@@ -0,0 +1,23 @@
+{
+  config
+, pkgs
+, ...
+}:
+
+{
+  age.secrets.gts-sandbox.file = ../secrets/gts-sandbox.age;
+
+  services.gotosocial = {
+    enable = true;
+    setupPostgresqlDB = true;
+    settings = {
+      host = "sandbox.isnt-a.top";
+      port = 3001;
+      trusted-proxies = ["100.64.0.0/10"];
+      bind-address = "0.0.0.0";
+      accounts-registration-open = true;
+      accounts-reason-required = true;
+    };
+    #environmentFile = config.age.secrets.gts-sandbox.path;
+  };
+}

secrets/secrets.nix

@@ -10,4 +10,5 @@ in
   "keycloakPostgres.age".publicKeys = users ++ systems;
   "zulip-redis.age".publicKeys = users ++ systems;
   "zulip-env.age".publicKeys = users ++ systems;
+  "gts-sandbox.age".publicKeys = users ++ systems;
 }