feat: soft-serve

ssh git.elyth.xyz

Author: elythh

annas-arch-a44489c5d6e7.pdf

@@ -47,12 +47,21 @@
       booklore.enable = true;
       ephemera.enable = true;
       # lidify.enable = true;
-      koito.enable = true;
-      twitch.enable = true;
-      traefik = {
-          enable = true;
-          domain = "elyth.xyz";
-        };
+       koito.enable = true;
+       twitch.enable = true;
+       softserve = {
+         enable = true;
+         initialAdminPublicKeyFile = "${config.home.homeDirectory}/.ssh/id_default.pub";
+         repos = {
+           flake = "https://github.com/elythh/flake.git";
+           nvim = "https://github.com/elythh/nvim.git";
+           mithrix = "https://github.com/elythh/mithrix.git";
+         };
+       };
+       traefik = {
+           enable = true;
+           domain = "elyth.xyz";
+         };
     };
   };
 }

hosts/mithrix/home.nix

@@ -0,0 +1,63 @@
+{
+  config,
+  lib,
+  ...
+}: let
+  optionName = "softserve";
+  containerName = "soft-serve";
+  cfg = config.meadow.stacks.${optionName};
+  storage = "${config.meadow.stacks.storageBaseDir}/${containerName}";
+in {
+  options.meadow.stacks.${optionName} = {
+    enable = lib.mkEnableOption containerName;
+    repos = lib.mkOption {
+      type = lib.types.attrsOf lib.types.str;
+      default = {};
+      description = "Repositories to mirror into Soft Serve (name = clone URL).";
+    };
+    initialAdminPublicKey = lib.mkOption {
+      type = lib.types.nullOr lib.types.str;
+      default = null;
+      description = "SSH public key used for Soft Serve first-run admin bootstrap.";
+    };
+    initialAdminPublicKeyFile = lib.mkOption {
+      type = lib.types.nullOr lib.types.str;
+      default = null;
+      description = "Path to SSH public key file for Soft Serve first-run admin bootstrap.";
+    };
+    syncInterval = lib.mkOption {
+      type = lib.types.str;
+      default = "30m";
+      description = "How often to sync public GitHub repositories into Soft Serve.";
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    services.podman.containers.${containerName} = {
+      image = "docker.io/charmcli/soft-serve:latest";
+      volumes = [
+        "${storage}/data:/data"
+      ] ++ lib.optional (cfg.initialAdminPublicKeyFile != null) "${cfg.initialAdminPublicKeyFile}:/tmp/initial_admin_key.pub:ro";
+      ports = ["22:23231"];
+      environment =
+        {
+          SOFT_SERVE_DATA_PATH = "/data";
+        }
+        // lib.optionalAttrs (cfg.initialAdminPublicKey != null) {
+          SOFT_SERVE_INITIAL_ADMIN_KEYS = cfg.initialAdminPublicKey;
+        }
+        // lib.optionalAttrs (cfg.initialAdminPublicKeyFile != null) {
+          SOFT_SERVE_INITIAL_ADMIN_KEYS = "/tmp/initial_admin_key.pub";
+        };
+      stack = containerName;
+      homepage = {
+        category = "Utilities";
+        name = "Soft Serve";
+        settings = {
+          description = "Self-hosted Git over SSH";
+          icon = "github";
+        };
+      };
+    };
+  };
+}