From 9c0ca6347d28f5d7b1e446d98809397ff8497d13 Mon Sep 17 00:00:00 2001
From: Johannes Rothe <mail@johannes-rothe.de>
Date: Wed, 26 Mar 2025 22:47:41 +0100
Subject: [PATCH] gotosocial config

---
 hosts/dalinar/default.nix    | 36 ++++++++++++++++++++++++++++++++++++
 hosts/tien/configuration.nix |  3 +++
 2 files changed, 39 insertions(+)

diff --git a/hosts/dalinar/default.nix b/hosts/dalinar/default.nix
index a762fb6..9eeb8f6 100644
--- a/hosts/dalinar/default.nix
+++ b/hosts/dalinar/default.nix
@@ -300,6 +300,42 @@
     };
   };
 
+  containers.gotosocial = {
+    autoStart = true;
+    forwardPorts = [
+      {
+        containerPort = config.containers.gotosocial.config.services.gotosocial.settings.port;
+        hostPort = config.containers.gotosocial.config.services.gotosocial.settings.port;
+        protocol = "tcp";
+      }
+    ];
+    privateNetwork = true;
+    hostAddress = "192.168.100.10";
+    localAddress = "192.168.100.11";
+    bindMounts."/gotosocial/storage" = {
+      # TODO not readable for gotoscoial user (mounted as root)
+      hostPath = "/storage/encrypted/gotosocial/storage";
+      isReadOnly = false;
+    };
+    config = { ... }: {
+      system.stateVersion = "25.05";
+      services.gotosocial = {
+        enable = true;
+        setupPostgresqlDB = true;
+        openFirewall = true;
+        settings = {
+          host = "rothe.social";
+          port = 8081;
+          bind-address = "0.0.0.0";
+          storage-local-base-path = "/gotosocial/storage";
+          trusted-proxies = [
+            "192.168.0.0/16"
+          ];
+        };
+      };
+    };
+  };
+
   system.stateVersion = "24.11"; # Don't change
 
 }
diff --git a/hosts/tien/configuration.nix b/hosts/tien/configuration.nix
index 484650a..3e6a132 100644
--- a/hosts/tien/configuration.nix
+++ b/hosts/tien/configuration.nix
@@ -47,6 +47,9 @@
       "radicale.johannes-rothe.de".extraConfig = ''
         reverse_proxy base:5232
       '';
+      "rothe.social".extraConfig = ''
+        reverse_proxy dalinar:8081
+      '';
     };
   };