depot/ops/nixos/bvm-twitterchiver/default.nix

# SPDX-FileCopyrightText: 2020 Luke Granger-Brown <depot@lukegb.com>
#
# SPDX-License-Identifier: Apache-2.0

{ depot, ... }:
{
  imports = [
    ../lib/bvm.nix
  ];

  # Networking!
  networking = {
    hostName = "bvm-twitterchiver";
    hostId = "c7ff157c";

    interfaces.enp1s0 = {
      ipv4.addresses = [{ address = "10.100.0.201"; prefixLength = 23; }];
    };
  };
  my.ip.tailscale = "100.119.86.55";

  services.postgresql = {
    enable = true;
    ensureDatabases = [
      "twitterchiver"
    ];
    ensureUsers = [{
      name = "twitterchiver";
      ensurePermissions = { "DATABASE twitterchiver" = "ALL PRIVILEGES"; };
    }];
  };
  services.postgresqlBackup.enable = true;

  users.groups.twitterchiver = {};
  users.users.twitterchiver = {
    home = "/srv/twitterchiver";
    isSystemUser = true;
    createHome = true;
    group = "twitterchiver";
  };

  systemd.services.twitterchiver-viewer = {
    description = "Twitterchiver Viewer";
    wants = ["network-online.target"];
    wantedBy = ["multi-user.target"];
    serviceConfig = {
      ExecStart = "${depot.go.twitterchiver.viewer}/bin/minotarproxy --user_to_twitter=lukegb@lukegb.com:lukegb,bgekul";
      WorkingDirectory = "${depot.go.twitterchiver.viewer}/share";
      User = "twitterchiver";
      Restart = "always";
    };
  };

  system.stateVersion = "21.05";
}