[machines] set dynamicdiscord binary cache

machines/configuration.nix

@@ -17,9 +17,21 @@ let
     {
       imports = [
         ({ pkgs, ... }: {
-          nix.extraOptions = ''
-            experimental-features = nix-command flakes
-          '';
+          nix = {
+            extraOptions = ''
+              experimental-features = nix-command flakes
+            '';
+
+            settings = {
+              substituters = [
+                "https://cache.dynamicdiscord.de"
+                "https://cache.nixos.org/"
+              ];
+              trusted-public-keys = [
+                "cache.dynamicdiscord.de-1:zWXTUJmfigHZ883fv52KZU6VFlivyNVVP2y7mvHtYeE="
+              ];
+            };
+          };
         })
 
         sops-nix.nixosModules.sops

machines/lucia/configuration.nix

@@ -130,6 +130,24 @@ in
   ympd = {
     enable = true;
   };
+
+  hedgedoc = {
+    enable = true;
+    settings = {
+      allowAnonymousEdits = true;
+      allowEmailRegister = false;
+      allowFreeURL = true;
+      allowOrigin = [ "pad.malobeo.org" ];
+      db = {
+        dialect = "sqlite";
+        storage = "/var/lib/hedgedoc/db.hedgedoc.sqlite";
+      };
+      domain = "pad.malobeo.org";
+      port = 3333;
+      useSSL = false;
+      protocolUseSSL = true;
+    };
+  };
   };
 
   security.acme = {
@@ -153,8 +171,19 @@ in
         proxyWebsockets = true;
       };
     };
+
+    virtualHosts."pad.malobeo.org" = {
+      enableACME = true;
+      forceSSL = true;
+      acmeRoot = null;
+      locations."/" = {
+        proxyPass = "http://127.0.0.1:3333";
+        proxyWebsockets = true;
+      };
+    };
   };
 
+
   networking.firewall.allowedTCPPorts = [ 80 443 ];
 
   environment.systemPackages = with pkgs; [