Add wastebin

nixos/boxes/colony/vms/shill/containers/middleman/vhosts.nix

@@ -384,6 +384,10 @@ in
         };
         useACMEHost = pubDomain;
       };
+      "pb.${pubDomain}" = {
+        locations."/".proxyPass = "http://object-ctr.${domain}:8088";
+        useACMEHost = pubDomain;
+      };
     };
 
     minio =

nixos/boxes/colony/vms/shill/containers/object.nix

@@ -49,6 +49,7 @@ in
                 };
                 "object/atticd.env" = {};
                 "object/hedgedoc.env" = {};
+                "object/wastebin.env" = {};
               };
             };
 
@@ -58,6 +59,7 @@ in
                 config.services.sharry.config.bind.port
                 8069
                 config.services.hedgedoc.settings.port
+                8088
               ];
             };
 
@@ -220,6 +222,15 @@ in
                 allowEmailRegister = false;
               };
             };
+
+            wastebin = {
+              enable = true;
+              settings = {
+                WASTEBIN_MAX_BODY_SIZE = "67108864"; # 16 MiB
+                WASTEBIN_PASSWORD_SALT = "TeGhaemeer0Siez3";
+              };
+              extraSettingsFile = config.age.secrets."object/wastebin.env".path;
+            };
           };
         }
         (mkIf config.my.build.isDevVM {

nixos/modules/_list.nix

@@ -20,5 +20,6 @@
     nvme = ./nvme;
     spdk = ./spdk.nix;
     librespeed = ./librespeed;
+    wastebin = ./wastebin.nix;
   };
 }

nixos/modules/tmproot.nix

@@ -492,6 +492,9 @@ in
           }
         ];
       })
+      (mkIf config.services.wastebin.enable {
+        my.tmproot.persistence.config.directories = [ "/var/lib/private/wastebin" ];
+      })
     ]))
   ]);
 

nixos/modules/wastebin.nix

@@ -0,0 +1,35 @@
+{ lib, pkgs, config, ... }:
+let
+  inherit (lib) mkIf mkDefault;
+  inherit (lib.my) mkOpt' mkBoolOpt';
+
+  cfg = config.services.wastebin;
+in
+{
+  options.services.wastebin = with lib.types; {
+    enable = mkBoolOpt' false "Whether to enable wastebin.";
+    package = mkOpt' package pkgs.wastebin "Package to use.";
+    settings = mkOpt' (attrsOf str) { } "Environment variable settings.";
+    extraSettingsFile = mkOpt' (nullOr str) null "Extra environment file (e.g. for signing key).";
+  };
+
+  config = mkIf cfg.enable {
+    services.wastebin.settings = {
+      WASTEBIN_ADDRESS_PORT = mkDefault "[::]:8088";
+      WASTEBIN_DATABASE_PATH = mkDefault "/var/lib/wastebin/db.sqlite3";
+    };
+
+    systemd.services.wastebin = {
+      description = "wastebin minimal pastebin";
+      after = [ "network.target" ];
+      environment = cfg.settings;
+      serviceConfig = {
+        EnvironmentFile = mkIf (cfg.extraSettingsFile != null) cfg.extraSettingsFile;
+        DynamicUser = true;
+        StateDirectory = "wastebin";
+        ExecStart = "${cfg.package}/bin/wastebin";
+      };
+      wantedBy = [ "multi-user.target" ];
+    };
+  };
+}