host(koumakan): add breezewikiu

Author: soopyc

systems/koumakan/certificates/breezewiki.nix

@@ -0,0 +1,10 @@
+{...}: {
+  # Certificate for breezewiki
+  security.acme.certs."bw.c.soopy.moe" = {
+    group = "nginx";
+    extraDomainNames = [
+      "bw.soopy.moe"
+      "*.bw.soopy.moe"
+    ];
+  };
+}

systems/koumakan/certificates/default.nix

@@ -4,5 +4,6 @@
     ./postgresql.nix
     ./fediverse.nix
     ./bsky-pds.nix
+    ./breezewiki.nix
   ];
 }

systems/koumakan/services/arion/breezewiki.nix

@@ -0,0 +1,23 @@
+{_utils, ...}: {
+  virtualisation.arion.projects.breezewiki.settings = {
+    services.breezewiki = {
+      service = {
+        image = "quay.io/pussthecatorg/breezewiki";
+        ports = ["35612:10416"];
+        environment = {
+          bw_canonical_origin = "https://bw.soopy.moe";
+          bw_log_outgoing = "false";
+          bw_strict_proxy = "true";
+          bw_feature_search_suggestions = "true";
+        };
+      };
+    };
+  };
+
+  services.nginx.virtualHosts.".bw.soopy.moe" = _utils.mkSimpleProxy {
+    port = 35612;
+    extraConfig = {
+      useACMEHost = "bw.c.soopy.moe";
+    };
+  };
+}

systems/koumakan/services/arion/default.nix

@@ -0,0 +1,12 @@
+{...}: {
+  imports = [
+    ./breezewiki.nix
+  ];
+
+  virtualisation.arion.backend = "podman-socket";
+  virtualisation.podman = {
+    enable = true;
+    dockerSocket.enable = true;
+    defaultNetwork.settings.dns_enabled = true;
+  };
+}

systems/koumakan/services/default.nix

@@ -5,6 +5,9 @@
     ./databases
     ./scm
 
+    # "containers" in a burning text gif
+    ./arion
+
     # Gensokyo local stuff
     ./ftp.nix