From 5062c28d4fbbb7c8219e8640540a44423ae9a28a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Leonardo=20Eug=C3=AAnio?= <lelgenio@disroot.org>
Date: Wed, 25 Sep 2024 22:08:10 -0300
Subject: [PATCH] invidious: install many helpers

---
 hosts/phantom/invidious.nix            | 34 +++++++++++++++++++++++---
 secrets/phantom-invidious-settings.age | 16 ++++++++++++
 secrets/secrets.nix                    |  1 +
 3 files changed, 48 insertions(+), 3 deletions(-)
 create mode 100644 secrets/phantom-invidious-settings.age

diff --git a/hosts/phantom/invidious.nix b/hosts/phantom/invidious.nix
index 8c1e0f6..60c1dca 100644
--- a/hosts/phantom/invidious.nix
+++ b/hosts/phantom/invidious.nix
@@ -1,12 +1,40 @@
 {
+  inputs,
+  pkgs,
+  config,
+  ...
+}:
+{
+  # Replace with unstable, since 24.05 does not have sig-helper
+  disabledModules = [ "services/web-apps/invidious.nix" ];
+  imports = [ (inputs.nixpkgs-unstable + "/nixos/modules/services/web-apps/invidious.nix") ];
+
   services.invidious = {
     enable = true;
     domain = "invidious.lelgenio.com";
     nginx.enable = true;
     port = 10601;
-    settings.db = {
-      user = "invidious";
-      dbname = "invidious";
+    http3-ytproxy.enable = true;
+    sig-helper = {
+      enable = true;
+      package = pkgs.unstable.inv-sig-helper;
+    };
+    # {
+    #     "visitor_data": "...",
+    #     "po_token": "..."
+    # }
+    extraSettingsFile = config.age.secrets.phantom-invidious-settings.path;
+    settings = {
+      force_resolve = "ipv6";
+      db = {
+        user = "invidious";
+        dbname = "invidious";
+      };
     };
   };
+
+  age.secrets.phantom-invidious-settings = {
+    file = ../../secrets/phantom-invidious-settings.age;
+    mode = "666";
+  };
 }
diff --git a/secrets/phantom-invidious-settings.age b/secrets/phantom-invidious-settings.age
new file mode 100644
index 0000000..6ca9077
--- /dev/null
+++ b/secrets/phantom-invidious-settings.age
@@ -0,0 +1,16 @@
+age-encryption.org/v1
+-> ssh-rsa BwwxHg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+--- cinb+wzjVfTkpfm1CtFIFaepwoQVCj1MquB5rAC45Ew
+�
+6
+ZC�HS07����E�X*�qb=�O����wu����P�����ǖѳ/��mv����2V�ī
+��xv�
[�������̂A~�evd���0��ni�1қ�Q��"�@ٹ���{Kp�:�ϵu�s��B��(X�r[�QVg�T�������@�*����B��.���hE鲟��뒭�����zlz|k�`l8��8�M�cch���Z`� ?yeo�+�M-:/��**���c��ZD�2���&���Ǣ��e��*Hn�"�~+|ua(�6��J
\ No newline at end of file
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 368b837..7b5fdd8 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -17,4 +17,5 @@ in
   "phantom-renawiki.age".publicKeys = [ main_ssh_public_key ];
   "phantom-forgejo-mailer-password.age".publicKeys = [ main_ssh_public_key ];
   "phantom-mastodon-mailer-password.age".publicKeys = [ main_ssh_public_key ];
+  "phantom-invidious-settings.age".publicKeys = [ main_ssh_public_key ];
 }