94 lines
2.7 KiB
Nix
94 lines
2.7 KiB
Nix
# admin:
|
|
# - view stats:
|
|
# - sudo -u ipfs -g ipfs ipfs -c /var/lib/ipfs/ stats bw
|
|
# - sudo -u ipfs -g ipfs ipfs -c /var/lib/ipfs/ stats dht
|
|
# - sudo -u ipfs -g ipfs ipfs -c /var/lib/ipfs/ bitswap stat
|
|
# - number of open peer connections:
|
|
# - sudo -u ipfs -g ipfs ipfs -c /var/lib/ipfs/ swarm peers | wc -l
|
|
|
|
{ lib, ... }:
|
|
|
|
lib.mkIf false # i don't actively use ipfs anymore
|
|
{
|
|
sane.persist.sys.byStore.plaintext = [
|
|
# TODO: mode? could be more granular
|
|
{ user = "261"; group = "261"; path = "/var/lib/ipfs"; }
|
|
];
|
|
|
|
networking.firewall.allowedTCPPorts = [ 4001 ];
|
|
networking.firewall.allowedUDPPorts = [ 4001 ];
|
|
|
|
services.nginx.virtualHosts."ipfs.uninsane.org" = {
|
|
# don't default to ssl upgrades, since this may be dnslink'd from a different domain.
|
|
# ideally we'd disable ssl entirely, but some places assume it?
|
|
addSSL = true;
|
|
enableACME = true;
|
|
# inherit kTLS;
|
|
|
|
locations."/" = {
|
|
proxyPass = "http://127.0.0.1:8080";
|
|
extraConfig = ''
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Ipfs-Gateway-Prefix "";
|
|
'';
|
|
};
|
|
};
|
|
|
|
sane.dns.zones."uninsane.org".inet.CNAME."ipfs" = "native";
|
|
|
|
# services.ipfs.enable = true;
|
|
services.kubo.localDiscovery = true;
|
|
services.kubo.settings = {
|
|
Addresses = {
|
|
Announce = [
|
|
# "/dns4/ipfs.uninsane.org/tcp/4001"
|
|
"/dns4/ipfs.uninsane.org/udp/4001/quic"
|
|
];
|
|
Swarm = [
|
|
# "/dns4/ipfs.uninsane.org/tcp/4001"
|
|
# "/ip4/0.0.0.0/tcp/4001"
|
|
"/dns4/ipfs.uninsane.org/udp/4001/quic"
|
|
"/ip4/0.0.0.0/udp/4001/quic"
|
|
];
|
|
};
|
|
Gateway = {
|
|
# the gateway can only be used to serve content already replicated on this host
|
|
NoFetch = true;
|
|
};
|
|
Swarm = {
|
|
ConnMgr = {
|
|
# maintain between LowWater and HighWater peer connections
|
|
# taken from: https://github.com/ipfs/ipfs-desktop/pull/2055
|
|
# defaults are 600-900: https://github.com/ipfs/kubo/blob/master/docs/config.md#swarmconnmgr
|
|
LowWater = 20;
|
|
HighWater = 40;
|
|
# default is 20s. i guess more grace period = less churn
|
|
GracePeriod = "1m";
|
|
};
|
|
ResourceMgr = {
|
|
# docs: https://github.com/libp2p/go-libp2p-resource-manager#resource-scopes
|
|
Enabled = true;
|
|
Limits = {
|
|
System = {
|
|
Conns = 196;
|
|
ConnsInbound = 128;
|
|
ConnsOutbound = 128;
|
|
FD = 512;
|
|
Memory = 1073741824; # 1GiB
|
|
Streams = 1536;
|
|
StreamsInbound = 1024;
|
|
StreamsOutbound = 1024;
|
|
};
|
|
};
|
|
};
|
|
Transports = {
|
|
Network = {
|
|
# disable TCP, force QUIC, for lighter resources
|
|
TCP = false;
|
|
QUIC = true;
|
|
};
|
|
};
|
|
};
|
|
};
|
|
}
|