init

services/akkoma.nix

@@ -0,0 +1,52 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}: let
+  fediPort = 8083;
+  inherit ((pkgs.formats.elixirConf {}).lib) mkAtom;
+in {
+  services.akkoma = {
+    enable = true;
+    config = {
+      ":pleroma" = {
+        ":instance" = {
+          name = "social.distrust.network";
+          description = "Akkoma instance for distrust.network users";
+          email = "root@distrust.network";
+          registration_open = false;
+        };
+        ":ldap" = {
+          enabled = true;
+          host = "localhost";
+          port = 3890;
+          ssl = false;
+          tls = false;
+          base = "ou=people,dc=distrust,dc=network";
+          uid = "uid";
+        };
+        "Pleroma.Upload".base_url = "https://social.distrust.network/media/";
+        "Pleroma.Web.Endpoint" = {
+          url.host = "social.distrust.network";
+          http = {
+            ip = "0.0.0.0";
+            port = fediPort;
+          };
+        };
+        "Pleroma.Web.Auth.Authenticator" = mkAtom "Pleroma.Web.Auth.LDAPAuthenticator";
+      };
+    };
+  };
+
+  services.caddy.virtualHosts."social.distrust.network".extraConfig = ''
+    reverse_proxy localhost:${toString fediPort}
+  '';
+
+  services.tor.relay.onionServices."akkoma".map = [
+    {
+      port = 80;
+      target = {port = fediPort;};
+    }
+  ];
+}