feat: reformated services

nixos/modules/services/castopod.nix

@@ -1,102 +0,0 @@
-{
-  flake,
-  config,
-  ...
-}: let
-  inherit (flake.config.machines.devices) server;
-  inherit (flake.config.services.instances) castopod nginx web;
-  service = castopod;
-  localhost = web.localhost.address0;
-  host = "${service.subdomain}.${web.domains.url1}";
-in {
-  services = {
-    castopod = {
-      enable = true;
-      localDomain = host;
-      configureNginx = false;
-      environmentFile = config.sops.secrets."${service.name}-smtp".path;
-      maxUploadSize = "1024M";
-      database = {
-        createLocally = true;
-        # passwordFile = config.sops.secrets."${name}-database".path;
-      };
-      poolSettings = {
-        pm = "dynamic";
-        "pm.max_children" = "32";
-        "pm.max_requests" = "500";
-        "pm.max_spare_servers" = "4";
-        "pm.min_spare_servers" = "2";
-        "pm.start_servers" = "2";
-      };
-      settings = {
-        "email.fromEmail" = service.email.address0;
-        "email.protocol" = "smtp";
-        "email.SMTPHost" = localhost;
-        "email.SMTPPort" = 587;
-        "email.SMTPUser" = "smtp.protonmail.ch";
-      };
-    };
-
-    nginx = {
-      enable = true;
-      virtualHosts = {
-        "${host}" = {
-        };
-      };
-    };
-
-    caddy = {
-      virtualHosts = {
-        "${host}" = {
-          extraConfig = ''
-            reverse_proxy ${localhost}:${toString service.ports.port0}
-
-            tls ${service.ssl.cert} ${service.ssl.key}
-          '';
-        };
-      };
-    };
-  };
-
-  sops = let
-    sopsPath = secret: {
-      path = "${service.sops.path0}/${service.name}-${secret}";
-      owner = service.name;
-      mode = "600";
-    };
-  in {
-    secrets = builtins.listToAttrs (
-      map
-      (secret: {
-        name = "${service.name}-${secret}";
-        value = sopsPath secret;
-      })
-      [
-        "smtp"
-        "database"
-      ]
-    );
-  };
-
-  fileSystems."/var/lib/${service.name}" = {
-    device = service.paths.path0;
-    fsType = "none";
-    options = ["bind"];
-    depends = [server.storage0.mount];
-  };
-
-  systemd.tmpfiles.rules = [
-    "Z ${service.paths.path0} 755 ${service.name} ${service.name} -"
-    "Z ${service.sops.path0} 755 ${service.name} ${service.name} -"
-  ];
-
-  networking = {
-    firewall = {
-      allowedTCPPorts = [
-        service.ports.port0
-        nginx.ports.port0
-      ];
-    };
-  };
-  users.groups.nginx = {};
-}

nixos/modules/services/default.nix

@@ -1,12 +1,14 @@
 {
-  imports =
+  imports = let
+    configPath = ./config;
+  in
     (map
-      (folder: ./${folder})
+      (folder: (configPath + ./${folder}))
       [
         "mastodon"
       ])
     ++ (map
-      (file: ./${file}.nix)
+      (file: (configPath + ./${file}.nix))
       [
         "acme"
         "caddy"
@@ -19,9 +21,7 @@
         "owncast"
         "samba"
         "vaultwarden"
-        "wiki"
         # "forgejo"
-        # "castopod"
         # "nextcloud"
       ]);
 }

nixos/modules/services/wiki.nix

@@ -1,91 +0,0 @@
-{
-  flake,
-  config,
-  ...
-}: let
-  inherit (flake.config.machines.devices) server;
-  inherit (flake.config.services.instances) web wiki;
-  service = wiki;
-  localhost = web.localhost.address1;
-  host = "${service.subdomain}.${web.domains.url1}";
-in {
-  services = {
-    wiki-js = {
-      enable = true;
-      environmentFile = config.sops.secrets."${service.name}/pass".path;
-      settings = {
-        port = service.ports.port0;
-        bindIP = localhost;
-        db = {
-          db = "wiki-js";
-          host = "/run/postgresql";
-          type = "postgres";
-          user = "wiki-js";
-        };
-      };
-    };
-
-    caddy = {
-      virtualHosts = {
-        "${host}" = {
-          extraConfig = ''
-            reverse_proxy ${localhost}:${toString service.ports.port0}
-
-            tls ${service.ssl.cert} ${service.ssl.key}
-          '';
-        };
-      };
-    };
-
-    postgresql = {
-      ensureDatabases = [service.name];
-      ensureUsers = [
-        {
-          name = service.name;
-          ensureDBOwnership = true;
-        }
-      ];
-    };
-  };
-
-  sops = let
-    sopsPath = secret: {
-      path = "${service.sops.path0}/${secret}";
-      owner = "root";
-      mode = "600";
-    };
-  in {
-    secrets = builtins.listToAttrs (
-      map
-      (secret: {
-        name = "${service.name}/${secret}";
-        value = sopsPath secret;
-      })
-      [
-        "pass"
-        "ssh"
-      ]
-    );
-  };
-
-  fileSystems."/var/lib/${service.name}" = {
-    device = service.paths.path0;
-    fsType = "none";
-    options = ["bind"];
-    depends = [server.storage0.mount];
-  };
-
-  systemd.tmpfiles.rules = [
-    "Z ${service.paths.path0} 755 ${service.name} ${service.name} -"
-    "Z ${service.sops.path0} 755 ${service.name} ${service.name} -"
-  ];
-
-  networking = {
-    firewall = {
-      allowedTCPPorts = [
-        service.ports.port0
-        service.ports.port1
-      ];
-    };
-  };
-}