From 6fcca6ab7275a8710f3d66207b524806666d51b8 Mon Sep 17 00:00:00 2001
From: teidesu <alina@tei.su>
Date: Thu, 26 Dec 2024 11:25:55 +0300
Subject: [PATCH] feat(koi): outline wiki

---
 hosts/koi/containers/outline/LicenseHelper.js |  32 ++++++++
 hosts/koi/containers/outline/default.nix      |  77 ++++++++++++++++++
 secrets/outline-env.age                       | Bin 0 -> 908 bytes
 3 files changed, 109 insertions(+)
 create mode 100644 hosts/koi/containers/outline/LicenseHelper.js
 create mode 100644 hosts/koi/containers/outline/default.nix
 create mode 100644 secrets/outline-env.age

diff --git a/hosts/koi/containers/outline/LicenseHelper.js b/hosts/koi/containers/outline/LicenseHelper.js
new file mode 100644
index 0000000..7414129
--- /dev/null
+++ b/hosts/koi/containers/outline/LicenseHelper.js
@@ -0,0 +1,32 @@
+'use strict';
+
+Object.defineProperty(exports, "__esModule", {
+  'value': true
+});
+
+class LicenseHelper {
+  static async updateLicenseStatus(_0x2921bc) {}
+  static isOverSeatLimit = false;
+  static isFarExceedingSeatLimit = false;
+  static decoded = undefined;
+  static get lastCheckedAt() { return new Date(); };
+  static publicKey = '';
+
+  static details() {
+    return {
+      'isOverSeatLimit': false,
+      'isFarExceedingSeatLimit': false,
+      'isMissing': false,
+      'isInGracePeriod': false,
+      'isValid': true,
+      'isTrial': false,
+      'licensedTo': 'catgirls :3',
+      'expiresAt': new Date(2077, 0, 0),
+      'gracePeriodExpiresAt': new Date(2077, 0, 0),
+      'customerId': 'catgirls :3',
+      'seatCount': 99999999
+    };
+  }
+}
+
+exports.default = LicenseHelper;
\ No newline at end of file
diff --git a/hosts/koi/containers/outline/default.nix b/hosts/koi/containers/outline/default.nix
new file mode 100644
index 0000000..eb763ba
--- /dev/null
+++ b/hosts/koi/containers/outline/default.nix
@@ -0,0 +1,77 @@
+{ pkgs, config, ... }:
+
+let 
+  UID = 1121;
+in {
+  desu.secrets.outline-env.owner = "outline";
+
+  users.users.outline = {
+    isNormalUser = true;
+    uid = UID;
+  };
+
+  services.postgresql.ensureUsers = [
+    { name = "outline"; ensureDBOwnership = true; }
+  ];
+  services.postgresql.ensureDatabases = [ "outline" ];
+  desu.postgresql.ensurePasswords.outline = "outline";
+
+  virtualisation.oci-containers.containers.outline-redis = {
+    image = "docker.io/redis:7.0-alpine";
+    user = builtins.toString UID;
+    extraOptions = [
+      "--mount=type=bind,source=/srv/outline/redis,target=/data"
+    ];
+  };
+
+  systemd.tmpfiles.rules = [
+    "d /srv/outline/redis 0700 ${builtins.toString UID} ${builtins.toString UID} -"
+  ];
+
+  virtualisation.oci-containers.containers.outline = {
+    dependsOn = [ "outline-redis" ];
+    image = "outlinewiki/outline-enterprise:0.81.1";
+    volumes = [
+      "${./LicenseHelper.js}:/opt/outline/build/server/utils/LicenseHelper.js"
+    ];
+    environment = {
+      NODE_ENV = "production";
+      PORT = "80";
+      DATABASE_URL = "postgres://outline:outline@172.17.0.1:5432/outline"; 
+      PGSSLMODE = "disable";
+      REDIS_URL = "redis://outline-redis.docker:6379";
+      URL = "https://wiki.stupid.fish";
+      COLLABORATION_URL = "https://wiki.stupid.fish";
+      FILE_STORAGE = "local";
+      FILE_STORAGE_LOCAL_ROOT_DIR = "/var/lib/outline/data";
+      FILE_STORAGE_UPLOAD_MAX_SIZE = "262144000";
+      ENABLE_UPDATES = "false";
+      WEB_CONCURRENCY = "1";
+      LOG_LEVEL = "info";
+    };
+    environmentFiles = [
+      # oidc related config + SECRET_KEY, UTILS_SECRET
+      config.desu.secrets.outline-env.path
+    ];
+    user = builtins.toString UID;
+    extraOptions = [
+      "--group-add=${builtins.toString config.users.groups.geesefs.gid}"
+      "--mount=type=bind,source=/mnt/s3-desu-priv-encrypted/outline,target=/var/lib/outline/data"
+    ];
+  };
+  systemd.services.docker-outline.requires = [ "postgresql.service" "gocryptfs.service" ];
+
+  services.nginx.virtualHosts."wiki.stupid.fish" = {
+    forceSSL = true;
+    useACMEHost = "stupid.fish";
+
+    locations."/" = {
+      proxyPass = "http://outline.docker$request_uri";
+      proxyWebsockets = true;
+
+      extraConfig = ''
+        proxy_buffering off;
+      '';
+    };
+  };
+}
\ No newline at end of file
diff --git a/secrets/outline-env.age b/secrets/outline-env.age
new file mode 100644
index 0000000000000000000000000000000000000000..3cdba3b210e22346097906650df1854a1f062a79
GIT binary patch
literal 908
zcmV;719SXgXJsvAZewzJaCB*JZZ2<fXD@a!3N1b$b8~1dWn?lnH8D9Lb80v^Sa%>;
zW-xVmcyCWrOl4teW^8zBG;wBHHc@Ubc4$>`Wpi;!dQfwCO>AOqZEFf~IcjubNOL$;
zO?WRuD|uFEVlYK^Ol2`;OjK1cMsQ_uN-s?}Wl&~0Y&Z%nEiE8cLr`N=LqSMWSXW0u
zc1?6QQEhN|a&|*WQCBiqFEe;hPb+U}WKL^CNL31zhl~TWO*G4Ac9?e}#E+%8<8QZP
zl#YYOQz9y3ws_Qn+t?IjzhTy2uD|T^<ZY?Lz%_zloc|VY(=y2$ngYy4tENd%2WnzP
z2lk;@fu#S;BGc~fvT!tt+n9kY289+qIt={B0NCsk%@iz^&BQXU$`Ya+sur!U()GY@
z8%qn%a^CCuiZfqj-m&^RD+G<u1K1h`<1kuw^`GEJi6zCs-kSNL<TR#MnbLRoFu9<y
zBM2Pd{FE_IQhP_*OV<vh{Y3#v+*3Ne-G4|pN2M$Km-T(bh5o8EW6z)b4jln%oHSb@
z6*x5%`onOoBuuf9lwF}zJtgaOCyfn19rCfb$`KeRkwD<`#M=a9q){1OezMH!Jb*z;
z2WL_zNxFa+7Q8`1pGH7FHt>@|B5_3k*#-)7&h-|NSzfP(<2D~?sm(vahKAkMSvY=(
zFr(c+mWK#k<7qe$mQck)i=jeG)2y*|@3ZIC+RKcX?2<}Uk~T6BpWs7Ru4f}9P#^<f
ze8cP;-I@w%5WUj^NvfENlEk6{<d8{Cgp@~)EwqHd9`vpF*43kdDRp8=WGtLXO+#g$
z8xLn;-*ouG?osnl6qZ~6DtCPH>;aH>Q)*j>JF;*KcG*G%sMSw4Bm@n>iVK)%i%jm-
zZF>C$VENdvqohSw$egi@T2D6kjF_wpY}pZZGRm`pI|S8`Gd;(4x{F-G7BMj}VwMDX
z84IrqsKdHo1`V#N?o?15)vZrbx&F#$BT)d!knPz;-716AAv{?;kML~Qoj_Ero<se1
zQ$vHLFUlbNkB($ACTqSHmX&cWR5%SYueRAR?Q<N5um1kbf|mhLR4|;f_5D1i3T8wO
zyFVpR@4Zds$ciJLi)m~__p-Sn=n_(}#tF+MgP;6%Awzc^OPy`?`xgv{nt##$A*GsB
iIe;QVqxw~|A&)cH)VQYWaxi56v4W9bD1K&h&>jD;^q*n?

literal 0
HcmV?d00001