Cryptpad: add example and test

[eljamm]

Tested inside an lxc container generated with nixos-generators:

Note: Instructions for reproducing this are available here.

[erictapen]

I worked on something similar yesterday to show something in the project overview. I think this will not work as expected without a reverse proxy, as the Nginx config currently ties a few routes together? My solution to this was

  services.nginx = {
    virtualHosts."cryptpad.localhost" = {
      enableACME = false;
      forceSSL = false;
    };
  };

so that we don't depend on ACME working.

[erictapen]

Suggested change

	examples.basic = {
	examples.demo = {

I had this idea to reserve the demo name for service demos, as they would be rendered differently in the overview than other examples. What do you think?

[eljamm]

Yup, that's a great idea! I like it.

[eljamm]

I worked on something similar yesterday to show something in the project overview. I think this will not work as expected without a reverse proxy, as the Nginx config currently ties a few routes together? My solution to this was

  services.nginx = {
    virtualHosts."cryptpad.localhost" = {
      enableACME = false;
      forceSSL = false;
    };
  };

so that we don't depend on ACME working.

The current config doesn't enable nginx for Cryptpad (even though it has an option to) and instead uses:

services.cryptpad.setting.httpSafeOrigin = "http://localhost:${toString servicePort}";

Which seems to work. Is there something that wouldn't work without this?

[erictapen]

Yeah I know. I didn't check the functionality, but the Nginx config also contains the /cryptpad_websocket route which wouldn't be reachable in your code, as the app seems to provide websockets on a different port.

https://github.com/NixOS/nixpkgs/blob/b613a5f7db5a7ad8507a2d20bec11db892193f25/nixos/modules/services/web-apps/cryptpad.nix#L266-L292

[eljamm]

I can't seem to make this work with nginx as I keep getting CORS errors when I try to sign up. Have you encountered this @erictapen?

[erictapen]

Oh, no I never tested it this far, sorry. Ideally we would be able give the name a proper host name like cryptpad.local, because my suspicion would be that using localhost messes with CORS.

[erictapen]

Let's merge for now and iterate on the Nginx problem later.