Merge pull request #417 from NixOS/init-survey

Init limesurvey on caliban
NixOS · Jul 15, 2024 · a162fe0 · a162fe0
2 parents 0e4ddbf + cfed31e
commit a162fe0
Show file tree

Hide file tree

Showing 6 changed files with 470 additions and 11 deletions.
diff --git a/non-critical-infra/hosts/caliban.nixos.org/default.nix b/non-critical-infra/hosts/caliban.nixos.org/default.nix
@@ -13,6 +13,7 @@
       ../../modules/matrix-synapse.nix
       ../../modules/owncast.nix
       ../../modules/vaultwarden.nix
+      ./limesurvey-tmp.nix
     ];
 
   # Bootloader.

diff --git a/non-critical-infra/hosts/caliban.nixos.org/limesurvey-tmp.nix b/non-critical-infra/hosts/caliban.nixos.org/limesurvey-tmp.nix
@@ -0,0 +1,31 @@
+# the content of this file should be put in the modules folder once the actual module has been upstreamed
+# PR: https://github.com/NixOS/nixpkgs/pull/325665/
+{ config, pkgs, ... }:
+{
+  disabledModules = [ "services/web-apps/limesurvey.nix" ];
+
+  imports = [ ../../modules/limesurvey.nix ];
+
+  services.limesurvey = {
+    enable = true;
+    encryptionKeyFile = config.sops.secrets.limesurvey-encryption-key.path;
+    encryptionNonceFile = config.sops.secrets.limesurvey-encryption-nonce.path;
+    virtualHost = {
+      serverName = "survey.nixos.org";
+      enableACME = true;
+      forceSSL = true;
+    };
+  };
+
+  sops.secrets.limesurvey-encryption-key = {
+    format = "binary";
+    sopsFile = ../../secrets/limesurvey-encryption-key.caliban;
+  };
+
+  sops.secrets.limesurvey-encryption-nonce = {
+    format = "binary";
+    sopsFile = ../../secrets/limesurvey-encryption-nonce.caliban;
+  };
+
+
+}