kfbox: add wastebin

flake.nix

@@ -28,7 +28,8 @@
     };
 
     lollypops = {
-      url = "github:pinpox/lollypops";
+      # url = "github:GeoffreyFrogeye/lollypops/use-nix-flake-archive";
+      url = "github:pinpox/lollypops/nix-flake-archive-fixes";
       inputs.nixpkgs.follows = "nixpkgs";
     };
 

machines/kfbox/configuration.nix

@@ -101,6 +101,7 @@
       gitea.enable = true;
       owncast.enable = true;
       vikunja.enable = true;
+      wastebin.enable = true;
     };
 
     metrics.node.enable = true;

modules/wastebin/default.nix

@@ -0,0 +1,35 @@
+{ config, lib, ... }:
+with lib;
+let cfg = config.pinpox.services.wastebin;
+in
+{
+
+  options.pinpox.services.wastebin = {
+    enable = mkEnableOption "wastebin server";
+  };
+
+  config = mkIf cfg.enable {
+
+    # WASTEBIN_PASSWORD_SALT
+    # WASTEBIN_SIGNING_KEY
+    lollypops.secrets.files."wastebin/envfile" = { };
+
+    # Create system user and group
+    services.wastebin = {
+      enable = true;
+
+      secretFile = config.lollypops.secrets.files."wastebin/envfile".path;
+
+      settings = {
+        WASTEBIN_ADDRESS_PORT = "127.0.0.1:8088";
+        WASTEBIN_BASE_URL = "https://paste.0cx.de";
+        WASTEBIN_HTTP_TIMEOUT = 7;
+        WASTEBIN_MAX_BODY_SIZE = 1024;
+        WASTEBIN_TITLE = "wastebin";
+        RUST_LOG = "warning";
+      };
+    };
+    # TODO Reverse proxy
+    # TODO Backup?
+  };
+}