hosts/lab/dokuwiki.nix

@@ -4,7 +4,7 @@
     extraConfig = ''
       @health path /health-ping
       handle @health {
-        respond 200
+        reverse_proxy localhost:8070
       }
 
       handle {

hosts/lab/sites.nix

@@ -15,16 +15,11 @@
 #   dataDir             — base directory for repo and data (default: /srv/<name>)
 #   readWritePaths      — paths the server can write to at runtime (default: [])
 #   afterServices       — systemd units to wait for before building (default: ["forgejo.service"])
-#   preview.enable      — TinyAuth-protected preview of this site (default: false)
-#   preview.branch      — branch for preview (default: "develop")
-#   preview.domain      — preview domain (default: 0<name>.ily.rs)
-#   preview.port        — preview server port (required when static = false)
 #
 # remarks:
 #
 #   - a listener is active on http://localhost:4323/hooks/${name}-rebuild for CD
 #     Forgejo repo -> settings -> Webhooks -> Add webhook
-#   - preview webhook: http://localhost:4323/hooks/${name}-preview-rebuild
 
 { ... }:
 let
@@ -53,7 +48,6 @@ in
     redirectDomains = [ "penfield.wynne.rs" ];
     repo = "https://git.ily.rs/lew/penfield";
     static = true;
-    preview.enable = true;
   };
 
   services.site.record-generator = {

modules/site.nix

@@ -85,32 +85,10 @@ let
         default = [ "forgejo.service" ];
         description = "Systemd units to wait for before building.";
       };
-
-      preview = {
-        enable = lib.mkEnableOption "TinyAuth-protected preview of this site";
-
-        branch = mkOption {
-          type = types.str;
-          default = "develop";
-        };
-
-        domain = mkOption {
-          type = types.str;
-          default = "0${name}.ily.rs";
-          description = "Preview domain. Defaults to 0<name>.ily.rs.";
-        };
-
-        port = mkOption {
-          type = types.nullOr types.port;
-          default = null;
-          description = "Port for preview Node.js server. Required when parent static = false.";
-        };
-      };
     };
   });
 
   cfg = lib.filterAttrs (_: site: site.enable) config.services.site;
-  previewCfg = lib.filterAttrs (_: site: site.enable && site.preview.enable) config.services.site;
 
   webhookPort = 4323;
 
@@ -135,12 +113,7 @@ in
   };
 
   config = {
-    assertions = mapAttrsToList (name: site: {
-      assertion = site.static || site.preview.port != null;
-      message = "services.site.${name}.preview.port is required when static = false and preview is enabled";
-    }) previewCfg;
-
-    services.caddy.virtualHosts = mkMerge ((mapAttrsToList (name: site:
+    services.caddy.virtualHosts = mkMerge (mapAttrsToList (name: site:
       {
         ${site.domain}.extraConfig = if site.static then ''
           root * ${site.dataDir}/repo/${site.buildOutputDir}
@@ -157,33 +130,7 @@ in
           redir https://${site.domain}{uri} permanent
         '';
       }) site.redirectDomains)
-    ) cfg) ++ (mapAttrsToList (name: site:
-      let previewDataDir = "/srv/${name}-preview"; in {
-        ${site.preview.domain}.extraConfig = if site.static then ''
-          @health path /health-ping
-          handle @health {
-            respond 200
-          }
-          handle {
-            import tinyauth
-            root * ${previewDataDir}/repo/${site.buildOutputDir}
-            encode zstd gzip
-            try_files {path} /index.html
-            file_server
-          }
-        '' else ''
-          @health path /health-ping
-          handle @health {
-            respond 200
-          }
-          handle {
-            import tinyauth
-            reverse_proxy localhost:${toString site.preview.port}
-            encode zstd gzip
-          }
-        '';
-      }
-    ) previewCfg));
+    ) cfg);
 
     systemd.services = mkMerge ((mapAttrsToList (name: site:
       let h = siteHelpers name site; in {
@@ -237,63 +184,7 @@ in
           };
         };
       }
-    ) cfg) ++ (mapAttrsToList (name: site:
-      let
-        h = siteHelpers name site;
-        previewDataDir = "/srv/${name}-preview";
-        previewUser = "${name}-preview";
-      in {
-        "${name}-preview-rebuild" = {
-          description = "Clone/pull and build preview of ${site.domain}";
-          after = [ "network-online.target" ] ++ site.afterServices;
-          path = [ pkgs.nodejs pkgs.bash ]
-            ++ optional (site.packageManager == "pnpm") pkgs.pnpm;
-          environment = site.buildEnvironment;
-          wants = [ "network-online.target" ];
-          wantedBy = [ "multi-user.target" ];
-          serviceConfig = {
-            Type = "oneshot";
-            RemainAfterExit = false;
-            ExecStartPre = "+${pkgs.writeShellScript "prepare-${name}-preview" ''
-              mkdir -p ${previewDataDir}
-              chown -R ${previewUser}:${previewUser} ${previewDataDir}
-            ''}";
-            ExecStart = pkgs.writeShellScript "rebuild-${name}-preview" ''
-              set -euo pipefail
-              if [ ! -d ${previewDataDir}/repo/.git ]; then
-                ${pkgs.git}/bin/git clone ${site.repo} ${previewDataDir}/repo
-              fi
-              cd ${previewDataDir}/repo
-              ${pkgs.git}/bin/git fetch origin
-              ${pkgs.git}/bin/git reset --hard origin/${site.preview.branch}
-              ${h.installCmd}
-              ${h.pmBin} run build
-            '';
-            ExecStartPost = lib.mkIf (!site.static)
-              "+/run/current-system/sw/bin/systemctl restart ${previewUser}";
-            User = previewUser;
-            Group = previewUser;
-          };
-        };
-      } // lib.optionalAttrs (!site.static) {
-        ${previewUser} = {
-          description = "Preview of ${site.domain}";
-          environment = {
-            HOST = "127.0.0.1";
-            PORT = toString site.preview.port;
-          } // site.environment;
-          serviceConfig = {
-            Type = "simple";
-            WorkingDirectory = "${previewDataDir}/repo";
-            ExecStart = "${pkgs.nodejs}/bin/node ${site.entryPoint}";
-            Restart = "on-failure";
-            User = previewUser;
-            Group = previewUser;
-            ReadWritePaths = site.readWritePaths;
-          };
-        };
-      }
-    ) previewCfg) ++ [{
+    ) cfg) ++ [{
       site-webhook = mkIf (cfg != {}) {
         description = "Webhook listener for site rebuilds";
         after = [ "network.target" ];
@@ -301,19 +192,13 @@ in
         serviceConfig = {
           Type = "simple";
           ExecStart = let
-            allHooks = (mapAttrsToList (name: site: {
+            allHooks = mapAttrsToList (name: site: {
               id = "${name}-rebuild";
               execute-command = "/run/current-system/sw/bin/touch";
               pass-arguments-to-command = [
                 { source = "string"; name = "/run/site-rebuild/${name}"; }
               ];
-            }) cfg) ++ (mapAttrsToList (name: site: {
-              id = "${name}-preview-rebuild";
-              execute-command = "/run/current-system/sw/bin/touch";
-              pass-arguments-to-command = [
-                { source = "string"; name = "/run/site-rebuild/${name}-preview"; }
-              ];
-            }) previewCfg);
+            }) cfg;
             hooksFile = pkgs.writeText "site-hooks.json" (builtins.toJSON allHooks);
           in "${pkgs.webhook}/bin/webhook -hooks ${hooksFile} -port ${toString webhookPort} -verbose";
           Restart = "always";
@@ -323,7 +208,7 @@ in
       };
     }]);
 
-    systemd.paths = mkMerge ((mapAttrsToList (name: site: {
+    systemd.paths = mkMerge (mapAttrsToList (name: site: {
       "${name}-rebuild-trigger" = {
         description = "Watch for ${name} rebuild trigger";
         wantedBy = [ "multi-user.target" ];
@@ -332,35 +217,18 @@ in
           Unit = "${name}-rebuild.service";
         };
       };
-    }) cfg) ++ (mapAttrsToList (name: site: {
-      "${name}-preview-rebuild-trigger" = {
-        description = "Watch for ${name}-preview rebuild trigger";
-        wantedBy = [ "multi-user.target" ];
-        pathConfig = {
-          PathModified = "/run/site-rebuild/${name}-preview";
-          Unit = "${name}-preview-rebuild.service";
-        };
-      };
-    }) previewCfg));
+    }) cfg);
 
-    users.users = mkMerge ((mapAttrsToList (name: site: {
+    users.users = mkMerge (mapAttrsToList (name: site: {
       ${name} = {
         isSystemUser = true;
         group = name;
         home = site.dataDir;
       };
-    }) cfg) ++ (mapAttrsToList (name: site: {
-      "${name}-preview" = {
-        isSystemUser = true;
-        group = "${name}-preview";
-        home = "/srv/${name}-preview";
-      };
-    }) previewCfg));
+    }) cfg);
 
-    users.groups = mkMerge ((mapAttrsToList (name: _: {
+    users.groups = mkMerge (mapAttrsToList (name: _: {
       ${name} = {};
-    }) cfg) ++ (mapAttrsToList (name: _: {
-      "${name}-preview" = {};
-    }) previewCfg));
+    }) cfg);
   };
 }