From 5f6d9e5dbabbe6756bc1360cd3366def55d349bb Mon Sep 17 00:00:00 2001
From: zuckerberg <5-zuckerberg@users.noreply.git.neet.dev>
Date: Sun, 30 May 2021 21:30:54 -0400
Subject: [PATCH] privatebin

---
 common/common.nix                       |  1 +
 common/server/privatebin/conf.php       | 42 ++++++++++++++++++
 common/server/privatebin/privatebin.nix | 59 +++++++++++++++++++++++++
 machines/mitty/configuration.nix        |  5 +++
 4 files changed, 107 insertions(+)
 create mode 100644 common/server/privatebin/conf.php
 create mode 100644 common/server/privatebin/privatebin.nix

diff --git a/common/common.nix b/common/common.nix
index 540644d..5fd9b58 100644
--- a/common/common.nix
+++ b/common/common.nix
@@ -14,6 +14,7 @@
     ./server/nginx-stream.nix
     ./server/matrix.nix
     ./server/zerobin.nix
+    ./server/privatebin.nix
     ./pc/de.nix
   ];
 
diff --git a/common/server/privatebin/conf.php b/common/server/privatebin/conf.php
new file mode 100644
index 0000000..bf43f48
--- /dev/null
+++ b/common/server/privatebin/conf.php
@@ -0,0 +1,42 @@
+;<?php http_response_code(403); /*
+[main]
+name = "Kode Paste"
+discussion = false
+opendiscussion = false
+password = true
+fileupload = false
+burnafterreadingselected = false
+defaultformatter = "plaintext"
+sizelimit = 10485760
+template = "bootstrap"
+languageselection = false
+
+[expire]
+default = "1week"
+
+[expire_options]
+5min = 300
+10min = 600
+1hour = 3600
+1day = 86400
+1week = 604800
+
+[formatter_options]
+plaintext = "Plain Text"
+syntaxhighlighting = "Source Code"
+markdown = "Markdown"
+
+[traffic]
+limit = 10
+dir = "/var/lib/privatebin"
+
+[purge]
+limit = 300
+batchsize = 10
+dir = "/var/lib/privatebin"
+
+[model]
+class = Filesystem
+
+[model_options]
+dir = "/var/lib/privatebin"
\ No newline at end of file
diff --git a/common/server/privatebin/privatebin.nix b/common/server/privatebin/privatebin.nix
new file mode 100644
index 0000000..cfd7191
--- /dev/null
+++ b/common/server/privatebin/privatebin.nix
@@ -0,0 +1,59 @@
+{ config, pkgs, lib, ... }:
+
+let
+  cfg = config.services.privatebin;
+in {
+  options.services.privatebin = {
+    enable = lib.mkEnableOption "enable privatebin";
+    host = lib.mkOption {
+      type = lib.types.str;
+      example = "example.com";
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+
+    users.users.privatebin = {
+      description = "privatebin service user";
+      group = "privatebin";
+      isSystemUser = true;
+    };
+    users.groups.privatebin = {};
+
+    services.nginx.enable = true;
+    services.nginx.virtualHosts.${cfg.host} = {
+      enableACME = true;
+      forceSSL = true;
+      locations."~ \.php$" = {
+        root = lib.mkDerivation {
+          name = "privatebin";
+          src = lib.fetchFromGitHub {
+            owner = "privatebin";
+            repo = "privatebin";
+            rev = "d65bf02d7819a530c3c2a88f6f9947651fe5258d";
+            # sha256 = "";
+          };
+          installPhase = ''
+            cp -ar $src $out
+          '';
+        };
+        extraConfig = ''
+          fastcgi_pass  unix:${config.services.phpfpm.pools.privatebin.socket};
+          fastcgi_index index.php;
+        '';
+      };
+    };
+
+    systemd.tmpfiles.rules = [
+      "d '/var/lib/privatebin' 0750 ${user} ${group} - -"
+    ];
+
+    services.phpfpm.pools.privatebin = {                                                                                                                                                                                                             
+      user = "privatebin";
+      group = "privatebin";
+      phpEnv = {
+        CONFIG_PATH = "${./conf.php}";
+      };
+    };
+  };
+}
\ No newline at end of file
diff --git a/machines/mitty/configuration.nix b/machines/mitty/configuration.nix
index b9f47be..7864f26 100644
--- a/machines/mitty/configuration.nix
+++ b/machines/mitty/configuration.nix
@@ -44,6 +44,11 @@
     host = "paste.neet.cloud";
   };
 
+  services.privatebin = {
+    enable = true;
+    host = "kode.neet.dev";
+  };
+
   security.acme.acceptTerms = true;
   security.acme.email = "letsencrypt+5@tar.ninja";
 }