hosts/server2: Setup sharkey

Server2 is currently not so much under load, as such it seems better to
split the load.

  # server2
  ## Virtual Hosts

  etebase.vhack.eu: dav.vhack.eu
  gallery.s-schoeffel.de
  git.foss-syndicate.org
  invidious-router.vhack.eu: video.fosswelt.org invidious-router.sils.li
  issues.foss-syndicate.org
  libreddit.vhack.eu
  nextcloud.vhack.eu # <-- This
  redlib.vhack.eu
  sharkey.vhack.eu # <-- And this are the “only” really heavy services here.
  source.foss-syndicate.org
  source.vhack.eu

  ## Open ports

  TCP 22: ssh
  TCP 25: mail-smtp
  TCP 53: dns
  TCP 80: http
  TCP 443: https
  TCP 465: mail-smtp-tls
  TCP 993: mail-imap-tls
  TCP 995: mail-pop3-tls
  TCP 10222: taskchampion-sync

  UDP 53: dns

  # server3

  ## Virtual Hosts

  b-peetz.de
  mail.vhack.eu
  mastodon.vhack.eu
  matrix.vhack.eu
  miniflux.foss-syndicate.org: rss.foss-syndicate.org rss.vhack.eu miniflux.vhack.eu
  openpgpkey.b-peetz.de
  openpgpkey.s-schoeffel.de
  openpgpkey.sils.li
  openpgpkey.vhack.eu
  peertube.vhack.eu
  trinitrix.vhack.eu
  vhack.eu

  ## Open ports

  TCP 22: ssh
  TCP 25: <port is 'mail-smtp' but service 'vhack.mail' is not enabled.>
  TCP 53: dns
  TCP 80: http
  TCP 443: https
  TCP 465: <port is 'mail-smtp-tls' but service 'vhack.mail' is not enabled.>
  TCP 993: <port is 'mail-imap-tls' but service 'vhack.mail' is not enabled.>
  TCP 4190: ???
  TCP 64738: ???

  UDP 53: dns
  UDP 64738: ???

1 files changed, 20 insertions, 0 deletions

diff --git a/hosts/by-name/server2/configuration.nix b/hosts/by-name/server2/configuration.nix
index ba0de14..24513f4 100644
--- a/hosts/by-name/server2/configuration.nix
+++ b/hosts/by-name/server2/configuration.nix
@@ -83,6 +83,26 @@
     };
     redlib.enable = true;
     rust-motd.enable = true;
+    sharkey = {
+      enable = true;
+      fqdn = "sharkey.vhack.eu";
+      settings = {
+        id = "aidx";
+
+        maxNoteLength = 8192;
+        maxFileSize = 1024 * 1024 * 1024;
+        proxyRemoteFiles = true;
+
+        # > At the suggestion of Sharkey maintainers,
+        # > this allows the server to run multiple workers
+        # > and without this (and postgres tuning), the instance runs slowly.
+        # Copied from: https://github.com/sodiboo/system/blob/b63c7b27f49043e8701b3ff5e1441cd27d5a2fff/sharkey.mod.nix#L21-L23
+        clusterLimit = 3;
+
+        signToActivityPubGet = true;
+        CheckActivityPubGetSigned = false;
+      };
+    };
     taskchampion-sync.enable = true;
     users.enable = true;
   };