Initial commit

hosts/cepheus/couchdb.nix

@@ -0,0 +1,37 @@
+{ pkgs, lib, ... }: {
+  containers.couchdb = {
+    autoStart = true;
+    bindMounts = {
+      "/var/lib/couchdb" = { hostPath = "/nix/persist/services/couchdb"; isReadOnly = false; };
+    };
+    hostAddress = "192.168.105.10";
+    localAddress = "192.168.105.11";
+    privateNetwork = true;
+
+    config = { ... }: {
+      services.couchdb = {
+        enable = true;
+        bindAddress = "192.168.105.11";
+        port = 5984;
+        databaseDir = "/var/lib/couchdb";
+        viewIndexDir = "/var/lib/couchdb";
+
+        adminUser = lib.removeSuffix "\n" ("admin_" + pkgs.lib.readFile "${pkgs.runCommand "timestamp" {} "echo `head -c 12 /dev/urandom | base64 | sed 's/[+=\\/A-Z]//g'` > $out"}");
+        adminPass = pkgs.lib.readFile "${pkgs.runCommand "timestamp" {} "echo `head -c 32 /dev/urandom | base64 | sed 's/[+=\\/A-Z]//g'` > $out"}";
+      };
+
+      networking.firewall = {
+        enable = true;
+        allowedTCPPorts = [ 5984 ];
+      };
+      system.stateVersion = "25.05";
+    };
+  };
+
+  services.caddy.virtualHosts = {
+    "couchdb.nothing.run".extraConfig = ''
+      reverse_proxy http://192.168.105.11:5984
+    '';
+  };
+
+}