From c0d89b3a05be56d37d409f8da19e06e09ec4a8f4 Mon Sep 17 00:00:00 2001
From: Lucy Hochkamp <git@xyno.systems>
Date: Sat, 24 Feb 2024 16:25:59 +0100
Subject: [PATCH] calcom

---
 hosts/picard/calcom.nix  |  35 +++++++++++++++++++++++++++++++++++
 hosts/picard/default.nix |   1 +
 secrets/picardCalCom.age | Bin 0 -> 1149 bytes
 secrets/secrets.nix      |   1 +
 4 files changed, 37 insertions(+)
 create mode 100644 hosts/picard/calcom.nix
 create mode 100644 secrets/picardCalCom.age

diff --git a/hosts/picard/calcom.nix b/hosts/picard/calcom.nix
new file mode 100644
index 00000000..d902aa91
--- /dev/null
+++ b/hosts/picard/calcom.nix
@@ -0,0 +1,35 @@
+{ config, pkgs, lib, ... }:
+{
+
+  users.users.calcom = {
+    group = "calcom";
+    shell = "${pkgs.bash}/bin/bash";
+    uid = 592;
+  };
+  users.groups.calcom = {
+    gid = config.users.users.calcom.uid;
+  };
+  virtualisation.oci-containers.containers."calcom" = {
+    image = "calcom/cal.com:latest";
+    ports = [ "127.0.0.1:8009:8008" ];
+    user = "${toString config.users.users.calcom.uid}:${toString config.users.groups.calcom.gid}";
+    volumes = [
+      "/run/postgresql:/run/postgresql"
+    ];
+    environmentFiles = [ config.age.secrets.picardCalCom.path ];
+    environment = {
+      DATABASE_URL = "postgresql://calcom:calcom@/run/postgresql";
+      NEXT_PUBLIC_WEBAPP_URL = "https://cal.xyno.systems";
+      CALCOM_TELEMETRY_DISABLED = 1;
+    };
+  };
+  services.postgresql = {
+    ensureDatabases = [ "calcom" ];
+    ensureUsers = [
+      {
+        name = "calcom";
+        ensureDBOwnership = true;
+      }
+    ];
+  };
+}
diff --git a/hosts/picard/default.nix b/hosts/picard/default.nix
index a656e977..f56a8673 100644
--- a/hosts/picard/default.nix
+++ b/hosts/picard/default.nix
@@ -11,6 +11,7 @@
       ./hardware-configuration.nix
       ./xynospace-matrix.nix
       ./plausible.nix
+      ./calcom.nix
     ];
 
   documentation.enable = false;
diff --git a/secrets/picardCalCom.age b/secrets/picardCalCom.age
new file mode 100644
index 0000000000000000000000000000000000000000..255bc6eab1bc41e4632a3b45d43a6a94baed8fac
GIT binary patch
literal 1149
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCR+Pfqpr4^;3-@%8da
z$<0npH8RYq%nA!}_D=Rqjr7b-^D4~C_0HEWPP7O$_Hc7{%ja@UHY|71clI>VPt`XF
zaMzA<DF}@!H}}al(=U&VOb&MqOsc5z&vkb9bw#(WG~FXSyj&qM#kb5aDb%G@zckdV
z%-k!lq}(suB`3nG*fh#C!YeQ`Eifw3yg)zDBa|z>B*QZ(B-<@8*e$!n%grm&zq}yN
zC8sc}Qs2?Q*ULZO*)lQDCA++^EE(Ol&``^uU`K@j?~1g_3|A8`pD>e*fTWBP@8A+&
z{lth;FH7GFkC2dL?@;~1q{Q^xa1*X5zle-HuYz!oWWy-qq@-Ze2yY{8gG#gTqypE%
zH1j}<46htVr|>Kz<6?B%g1kJ9og5X)A}rHP5=-0)%}N8@o$`GQ3&IUd-MykpEP~w%
zs!|LKvt7dT^YfgtJ@UDNyj(Lf4J-ZpT_VhjlS=cFqH>F(GQE9@(~45FjGc=;s<PcZ
zqQcV(k^|9gi^wbU@-A2K3@JA=bkz^ZO7=DMHS#KqwD8JGwFo!N2+K?h_lvCXiu85M
zw)FNZOt;{&ObZAz3{4HlbuGwGjB+yz4@xXG_cG1N^tEtJPBaVla`N=oF3z$D4opY4
z&D_t&)Gu8jAj8?;EHN}AsmRnsyDB5XB0DH3Bgn*0KP%fPCDAFlDz7}<w<0?~!l0bX
z%fl?$$GOBKBr`azD7UoSAh#eqQ@^CJ!Yn5<BrC<zJuoLcF}1S5qOhDxS65dd$+99U
zu+qHPuQWA3%C{oZ!YS1`B|9W6&o`tb%1_(e&DqE(Jy~1d%_ETO;SvUCgUb^oH8av;
zcY5+%yl)wHJ2=Qg!NE$<NWYPb|F*RAPGO~W$Juuz<#~MLn|uHD{m%ychkCl$A_XQ1
zzm%AJ`DKx1`u20H3f^md^*CkH<o?SxiM@X2qbV0u-Y$^|x18D_zuBGVVbMai+8?u0
zBkUh-+xUI8@8W0nd_2qr_b;1WRo(o!|C;qH^NQCBM_Vqu@p1mEs<cFK_H><F8)hx@
z;5;x-=9dcNFFV__ttAiA3imwZ6rS<b?6cSXOKYy3-M;x;OtFl9xpCiLE=5^}KB-Qx
zYa04-nxSiS!>*>TSa3lzIl@Kt%8Wjq?Dq@%W40!HNjz74z#~6vD>rAPz%Jc_QuP(9
z*5sC_lrFoT7@@>tdCk1Lf;;Tvwxr$qtv1{{Y+TxJ`g|%8S7Ef#_pFoCF?2Y=6yxos
zCGGO2e}_WjlcX<Gh2!{ta=j_ARh`Lwllg0hdr{s!;j3mc`EsI_2_G7(w69gOFxLIl
zoT$ztvZT{*=B+)PpK8SFif65T`}oI<|BFtyKiRC?SM+fGopsmBzy4f&_Ho<)&Gx?^
QdHe{IT)fHc{BL1a0O(_|761SM

literal 0
HcmV?d00001

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index e730d4ff..f28d88dd 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -36,6 +36,7 @@ in
   "nextcloudAdminPass.age".publicKeys = pubkeys.ragon.host "picard";
   "picardResticSSHKey.age".publicKeys = pubkeys.ragon.host "picard";
   "picardSlidingSyncSecret.age".publicKeys = pubkeys.ragon.host "picard";
+  "picardCalCom.age".publicKeys = pubkeys.ragon.host "picard";
   "picardResticPassword.age".publicKeys = pubkeys.ragon.host "picard";
   "picardResticHealthCheckUrl.age".publicKeys = pubkeys.ragon.host "picard";
   "desec.age".publicKeys = pubkeys.ragon.host "picard";