From 9a6e0634e6217017212bbdb93d73358c4e784b78 Mon Sep 17 00:00:00 2001
From: William <baduhai@proton.me>
Date: Wed, 8 Apr 2026 14:12:19 -0300
Subject: [PATCH] freshrss on alexandria

---
 aspects/hosts/_alexandria/freshrss.nix |  34 +++++++++++++++++++++++++
 data/services.nix                      |  10 ++++----
 secrets/freshrss-adminpass.age         | Bin 0 -> 465 bytes
 secrets/secrets.nix                    |   5 ++++
 4 files changed, 44 insertions(+), 5 deletions(-)
 create mode 100644 aspects/hosts/_alexandria/freshrss.nix
 create mode 100644 secrets/freshrss-adminpass.age

diff --git a/aspects/hosts/_alexandria/freshrss.nix b/aspects/hosts/_alexandria/freshrss.nix
new file mode 100644
index 0000000..b5880d5
--- /dev/null
+++ b/aspects/hosts/_alexandria/freshrss.nix
@@ -0,0 +1,34 @@
+{
+  config,
+  lib,
+  inputs,
+  ...
+}:
+
+let
+  mkNginxVHosts = inputs.self.lib.mkNginxVHosts;
+in
+
+{
+  services = {
+    freshrss = {
+      enable = true;
+      defaultUser = "admin";
+      passwordFile = config.age.secrets.freshrss-adminpass.path;
+      baseUrl = "https://rss.baduhai.dev";
+      dataDir = "/data/freshrss";
+      webserver = "nginx";
+      virtualHost = "rss.baduhai.dev";
+    };
+
+    nginx.virtualHosts = mkNginxVHosts {
+      domains."rss.baduhai.dev" = { };
+    };
+  };
+
+  age.secrets.freshrss-adminpass = {
+    file = "${inputs.self}/secrets/freshrss-adminpass.age";
+    owner = "freshrss";
+    group = "freshrss";
+  };
+}
diff --git a/data/services.nix b/data/services.nix
index ae7395c..b3eddf5 100644
--- a/data/services.nix
+++ b/data/services.nix
@@ -12,11 +12,6 @@
   };
 
   services = [
-    {
-      name = "kanidm";
-      domain = "auth.baduhai.dev";
-      host = "alexandria";
-    }
     {
       name = "vaultwarden";
       domain = "pass.baduhai.dev";
@@ -38,5 +33,10 @@
       domain = "jellyfin.baduhai.dev";
       host = "alexandria";
     }
+    {
+      name = "freshrss";
+      domain = "rss.baduhai.dev";
+      host = "alexandria";
+    }
   ];
 }
diff --git a/secrets/freshrss-adminpass.age b/secrets/freshrss-adminpass.age
new file mode 100644
index 0000000000000000000000000000000000000000..b7d7c90338af1af856faa24afa72b32c400e8f6e
GIT binary patch
literal 465
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCUlPD{zlPgk(8v<NHp
ztSU6f@lTIP_i#z^4K#DMNJ(_{@d^n^NjEG^bIvhOuL$zU^W^e%cFZj(O1AWM_9{+F
zEl$pkjI#8zbTqHbG;k`&iPSF4_DpmvEOaf+@kO`IA~M)9vs@uB+bPT^GqbQbqaay3
zI5^2H$J8Uo-^<9W+{HUF#o4hq$t&5^ucX-ABa|ztNZ%#Q!_3pU#IHETE5b6$Bs3{I
zD9<vfDy%FhDm^GTM?cBcP&*{B*c070FSC-c5J!c8Ds!*GDD$*Xuk_T6L~VEdte^^y
ztnwraOMf#nQx^;Kf@C+h2p7lfbXTsdau3g<C?mh(e0R?jFJDK;%3KS5w^Z${yrghP
z$7ClHN9~{h_q=e=%w#TIU0sE+<SOq#_sG&p<Er5NLZ_lo=dAolgLL=o<gyCOOz)u3
z^725xG;hBEZBH&Wfw#^&+$Q$QMglww?kt@5&eFyvNWrry)2HkB-Y=~ee!lt?>AJz<
f7*po{?5#B~idmh^b2S+5FR|`kCsD%RelH#X-)Nk!

literal 0
HcmV?d00001

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index a90cd74..277d880 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -32,4 +32,9 @@ in
     rotterdam-user
     trantor
   ];
+  "freshrss-adminpass.age".publicKeys = [
+    io-user
+    rotterdam-user
+    alexandria
+  ];
 }