From c21d55a02837bfb62e160f3f72d18fece4e16116 Mon Sep 17 00:00:00 2001
From: Henry-Hiles <henry@henryhiles.com>
Date: Sun, 22 Mar 2026 13:28:12 -0400
Subject: [PATCH] dont custom build lasuite

---
 .../docs/enable-languages.patch               |  13 --
 clients/quadraticserver/lasuite-docs.nix      | 139 ++++++++++++++++++
 2 files changed, 139 insertions(+), 13 deletions(-)
 delete mode 100644 clients/quadraticserver/docs/enable-languages.patch
 create mode 100644 clients/quadraticserver/lasuite-docs.nix

diff --git a/clients/quadraticserver/docs/enable-languages.patch b/clients/quadraticserver/docs/enable-languages.patch
deleted file mode 100644
index f607294..0000000
--- a/clients/quadraticserver/docs/enable-languages.patch
+++ /dev/null
@@ -1,13 +0,0 @@
-diff --git a/src/backend/impress/settings.py b/src/backend/impress/settings.py
-index 9059dd29..010cc524 100755
---- a/impress/settings.py
-+++ b/impress/settings.py
-@@ -248,6 +248,9 @@ class Base(Configuration):
-             ("de-de", "Deutsch"),
-             ("nl-nl", "Nederlands"),
-             ("es-es", "Español"),
-+            ("br-fr", "Brezhoneg"),
-+            ("uk-ua", "Українська"),
-+            ("ru-ru", "Русский"),
-         )
-     )
\ No newline at end of file
diff --git a/clients/quadraticserver/lasuite-docs.nix b/clients/quadraticserver/lasuite-docs.nix
new file mode 100644
index 0000000..33842ec
--- /dev/null
+++ b/clients/quadraticserver/lasuite-docs.nix
@@ -0,0 +1,139 @@
+{
+  inputs,
+  config,
+  pkgs,
+  ...
+}:
+let
+  s3Domain = "http://127.0.0.1${config.services.minio.listenAddress}";
+  cfg = config.services.lasuite-docs;
+in
+{
+  disabledModules = [
+    "services/web-apps/lasuite-docs.nix"
+  ];
+  imports = [
+    inputs.lasuite-docs-proxy.nixosModules.default
+    "${inputs.nixpkgs-custom}/nixos/modules/services/web-apps/lasuite-docs.nix"
+  ];
+
+  systemd.services = {
+    lasuite-docs-collaboration-server.serviceConfig = {
+      EnvironmentFile = cfg.environmentFile;
+      Restart = "always";
+    };
+
+    lasuite-docs-celery.serviceConfig.Restart = "always";
+    lasuite-docs.serviceConfig.Restart = "always";
+  };
+
+  services =
+    let
+      proxySocket = "/var/run/lasuite-docs-proxy/socket";
+      authDomain = "auth.federated.nexus";
+      domain = "docs.federated.nexus";
+      s3Url = "${s3Domain}/lasuite-docs";
+      socket = "/run/lasuite-docs/socket";
+    in
+    {
+      lasuite-docs-proxy = {
+        enable = true;
+        args = [
+          "--socket"
+          proxySocket
+          "--authUri"
+          "https://docs.federated.nexus/api/v1.0/documents/media-auth/"
+          "--minioUri"
+          s3Url
+        ];
+        group = "caddy";
+      };
+      lasuite-docs = {
+        enable = true;
+        enableNginx = false;
+        redis.createLocally = true;
+        postgresql.createLocally = true;
+        frontendPackage = pkgs.lasuite-docs-frontend.overrideAttrs {
+          NEXT_PUBLIC_PUBLISH_AS_MIT = "false";
+        };
+        bind = "unix:${socket}";
+        inherit s3Url domain;
+
+        settings = {
+          OIDC_OP_AUTHORIZATION_ENDPOINT = "https://federated.nexus/login";
+          OIDC_OP_TOKEN_ENDPOINT = "https://${authDomain}/token";
+          OIDC_OP_USER_ENDPOINT = "https://${authDomain}/userinfo";
+          OIDC_RP_SIGN_ALGO = "HS256";
+
+          COLLABORATION_API_URL = "https://${domain}/collaboration/api/";
+          LOGIN_REDIRECT_URL = "https://${domain}";
+
+          AWS_S3_ENDPOINT_URL = s3Domain;
+          AWS_S3_ACCESS_KEY_ID = "minioadmin";
+          AWS_STORAGE_BUCKET_NAME = "lasuite-docs";
+          MEDIA_BASE_URL = "https://${domain}";
+
+          DJANGO_ALLOWED_HOSTS = domain;
+          DJANGO_LANGUAGES = "en-us,English;fr-fr,Français;nl-nl,Nederlands;es-es,Español;uk-ua,Українська;ru-ru,Русский";
+        };
+
+        environmentFile = config.age.secrets."lasuiteSecrets.age".path;
+      };
+
+      minio = {
+        enable = true;
+        rootCredentialsFile = config.age.secrets."minioCredentials.age".path;
+      };
+
+      caddy.virtualHosts."${domain}".extraConfig =
+        let
+          collabUrl = "http://localhost:${toString cfg.collaborationServer.port}";
+        in
+        ''
+          handle_errors {
+            rewrite * /{http.error.status_code}
+            file_server
+          }
+
+          redir /api/v1.0/logout/None /
+
+          root * ${cfg.frontendPackage}
+          file_server
+
+          @uuidDocs path_regexp uuidDocs ^/docs/[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}/?$
+          rewrite @uuidDocs /docs/[id]/index.html
+
+          reverse_proxy /static/admin/* unix/${socket}
+          reverse_proxy /api/* unix/${socket}
+          reverse_proxy /admin* unix/${socket}
+
+          reverse_proxy /collaboration/ws/* ${collabUrl}
+          reverse_proxy /collaboration/api/* ${collabUrl}
+
+          reverse_proxy /api/v1.0/documents/media-auth/ unix/${socket}
+
+          reverse_proxy /media/* unix/${proxySocket}
+        '';
+    };
+
+  systemd.services.minio-init = {
+    description = "Create MinIO bucket";
+    after = [ "minio.service" ];
+    requires = [ "minio.service" ];
+    wantedBy = [ "multi-user.target" ];
+    path = with pkgs; [
+      getent
+      minio-client
+    ];
+
+    serviceConfig = {
+      Type = "oneshot";
+      EnvironmentFile = config.age.secrets."minioCredentials.age".path;
+      ExecStart = pkgs.writeShellScript "init-minio" ''
+        mc alias set minio ${s3Domain} "$MINIO_ROOT_USER" "$MINIO_ROOT_PASSWORD" --api s3v4
+        mc mb --ignore-existing minio/lasuite-docs
+        mc anonymous get minio/lasuite-docs
+      '';
+    };
+  };
+}