Compare commits

...

2 commits

Author SHA1 Message Date
bc8f7a990b ente fix 2025-12-07 15:27:18 +01:00
ce502e3d7b fixed owner 2025-12-07 00:55:40 +01:00

View file

@ -8,12 +8,13 @@ let
domain = "ente.kylekrein.com";
in
{
sops.secrets."services/minio" = {};
sops.secrets."services/minio" = {owner = "minio";};
services.minio = {
enable = true;
# ente's config must match this region!
region = "us-east-1";
listenAddress = ":21939";
consoleAddress = ":21940";
# Please use a file, agenix or sops-nix to securely store your root user password!
# MINIO_ROOT_USER=your_root_user
# MINIO_ROOT_PASSWORD=a_randomly_generated_long_password
@ -23,6 +24,11 @@ in
systemd.services.minio.environment.MINIO_SERVER_URL = "https://s3.kylekrein.com";
services.nginx = {
virtualHosts."web.s3.kylekrein.com" = {
forceSSL = true;
enableACME = true;
locations."/".proxyPass = "http://localhost:21940";
};
virtualHosts."s3.kylekrein.com" = {
forceSSL = true;
enableACME = true;
@ -61,8 +67,9 @@ in
apps.cast = "https://cast.${domain}";
public-albums = "https://albums.${domain}";
s3 = {
use_path_style_urls = true;
b2-eu-cen = {
are_local_buckets = false;
use_path_style_urls = true;
endpoint = "https://s3.kylekrein.com";
region = "us-east-1";
bucket = "ente";