imnyang/nix-flakes
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

wow
Some checks failed
CI / check (push) Has been cancelled
Details
CI / ida (push) Has been cancelled
Details
CI / cpt (push) Has been cancelled
Details
CI / build-nixos (ena) (push) Has been cancelled
Details
CI / build-nixos (hako) (push) Has been cancelled
Details
CI / build-nixos (kazusa) (push) Has been cancelled
Details
CI / build-nixos (mizuki) (push) Has been cancelled
Details

Browse source
This commit is contained in:
암냥 2026-07-04 13:07:10 +09:00
commit ce348a71ac
No known key found for this signature in database
4 changed files with 123 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

2
hosts/server/natsu/default.nix
View file

@ -12,7 +12,7 @@ nixpkgs.lib.nixosSystem {
# ./services/attic.nix # ./services/attic.nix
./services/caddy.nix ./services/caddy.nix
./services/forgejo-runner.nix ./services/forgejo-runner.nix
./services/rtmps.nix ./services/stream.nix
# ./services/harmonia.nix # ./services/harmonia.nix
./configuration.nix ./configuration.nix
./hardware-configuration.nix ./hardware-configuration.nix

22
hosts/server/natsu/services/caddy.nix
View file

@ -1,5 +1,8 @@
{ pkgs, ... }: { pkgs, ... }:
let
streamPlayer = pkgs.writeTextDir "index.html" (builtins.readFile ./stream.html);
in
{ {
services.caddy = { services.caddy = {
enable = true; enable = true;
@ -92,8 +95,23 @@
reverse_proxy 127.0.0.1:4321 reverse_proxy 127.0.0.1:4321
''; '';
virtualHosts."rtmps.mizuki.guru".extraConfig = '' virtualHosts."stream.mizuki.guru".extraConfig = ''
respond 204 handle_path /hls/* {
root * /var/lib/nginx-rtmp/hls
header Cache-Control "no-store"
file_server
}
handle /live/* {
root * ${streamPlayer}
rewrite * /index.html
file_server
}
handle {
root * ${streamPlayer}
file_server
}
''; '';
virtualHosts."netbird.mizuki.guru".extraConfig = '' virtualHosts."netbird.mizuki.guru".extraConfig = ''

85
hosts/server/natsu/services/stream.html Normal file
View file

@ -0,0 +1,85 @@
<!doctype html>
<html lang="ko">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<title>stream.mizuki.guru</title>
<style>
:root {
color-scheme: dark;
}
body {
margin: 0;
min-height: 100vh;
display: grid;
place-items: center;
background: #0f0f14;
color: #f4f4f5;
font-family: system-ui, sans-serif;
}
main {
width: min(100vw - 2rem, 960px);
}
video {
width: 100%;
aspect-ratio: 16 / 9;
background: #000;
border-radius: 12px;
}
p {
color: #a1a1aa;
}
code {
color: #f9a8d4;
}
</style>
</head>
<body>
<main>
<video id="player" controls autoplay playsinline></video>
<p id="publish"></p>
</main>
<script src="https://cdn.jsdelivr.net/npm/hls.js@1"></script>
<script>
const video = document.getElementById("player");
const publish = document.getElementById("publish");
const streamName =
decodeURIComponent(
location.pathname
.replace(/^\/live\/?/, "")
.replace(/^\/+|\/+$/g, ""),
) || "stream";
const source = `/hls/${encodeURIComponent(streamName)}.m3u8`;
document.title = `${streamName} - stream.mizuki.guru`;
publish.innerHTML = `Publish: <code>rtmps://stream.mizuki.guru/live/${escapeHtml(streamName)}</code>`;
if (video.canPlayType("application/vnd.apple.mpegurl")) {
video.src = source;
} else if (Hls.isSupported()) {
const hls = new Hls({ liveDurationInfinity: true });
hls.loadSource(source);
hls.attachMedia(video);
} else {
video.outerHTML =
"<p>이</p> 브라우저는 HLS 재생을 지원하지 않습니다.</p>";
}
function escapeHtml(value) {
return value.replace(
/[&<>"']/g,
(ch) =>
({
"&": "&amp;",
"<": "&lt;",
">": "&gt;",
'"': "&quot;",
"'": "&#39;",
})[ch],
);
}
</script>
</body>
</html>

22
hosts/server/natsu/services/rtmps.nix → hosts/server/natsu/services/stream.nix
View file

@ -1,7 +1,8 @@
{ pkgs, ... }: { pkgs, ... }:
let let
domain = "rtmps.mizuki.guru"; domain = "stream.mizuki.guru";
hlsDir = "/var/lib/nginx-rtmp/hls";
caddyCertDir = "/var/lib/caddy/.local/share/caddy/certificates/acme-v02.api.letsencrypt.org-directory/${domain}"; caddyCertDir = "/var/lib/caddy/.local/share/caddy/certificates/acme-v02.api.letsencrypt.org-directory/${domain}";
in in
{ {
@ -20,14 +21,25 @@ in
application live { application live {
live on; live on;
record off; record off;
hls on;
hls_path ${hlsDir};
hls_fragment 2s;
hls_playlist_length 10s;
hls_cleanup on;
} }
} }
} }
''; '';
}; };
systemd.services.rtmps-stunnel = { systemd.tmpfiles.rules = [
description = "RTMPS TLS terminator for nginx-rtmp"; "d /var/lib/nginx-rtmp 0755 nginx nginx - -"
"d ${hlsDir} 0755 nginx nginx - -"
];
systemd.services.stream-stunnel = {
description = "RTMPS TLS terminator for stream.mizuki.guru";
after = [ after = [
"network-online.target" "network-online.target"
"caddy.service" "caddy.service"
@ -41,11 +53,11 @@ in
Type = "simple"; Type = "simple";
User = "caddy"; User = "caddy";
Group = "caddy"; Group = "caddy";
ExecStart = "${pkgs.stunnel}/bin/stunnel ${pkgs.writeText "rtmps-stunnel.conf" '' ExecStart = "${pkgs.stunnel}/bin/stunnel ${pkgs.writeText "stream-stunnel.conf" ''
foreground = yes foreground = yes
pid = pid =
[rtmps] [stream]
accept = 0.0.0.0:1935 accept = 0.0.0.0:1935
connect = 127.0.0.1:19350 connect = 127.0.0.1:19350
cert = ${caddyCertDir}/${domain}.crt cert = ${caddyCertDir}/${domain}.crt