freshrss on alexandria

aspects/hosts/_alexandria/freshrss.nix

@@ -0,0 +1,34 @@
+{
+  config,
+  lib,
+  inputs,
+  ...
+}:
+
+let
+  mkNginxVHosts = inputs.self.lib.mkNginxVHosts;
+in
+
+{
+  services = {
+    freshrss = {
+      enable = true;
+      defaultUser = "admin";
+      passwordFile = config.age.secrets.freshrss-adminpass.path;
+      baseUrl = "https://rss.baduhai.dev";
+      dataDir = "/data/freshrss";
+      webserver = "nginx";
+      virtualHost = "rss.baduhai.dev";
+    };
+
+    nginx.virtualHosts = mkNginxVHosts {
+      domains."rss.baduhai.dev" = { };
+    };
+  };
+
+  age.secrets.freshrss-adminpass = {
+    file = "${inputs.self}/secrets/freshrss-adminpass.age";
+    owner = "freshrss";
+    group = "freshrss";
+  };
+}

data/services.nix

@@ -12,11 +12,6 @@
   };
 
   services = [
-    {
-      name = "kanidm";
-      domain = "auth.baduhai.dev";
-      host = "alexandria";
-    }
     {
       name = "vaultwarden";
       domain = "pass.baduhai.dev";
@@ -38,5 +33,10 @@
       domain = "jellyfin.baduhai.dev";
       host = "alexandria";
     }
+    {
+      name = "freshrss";
+      domain = "rss.baduhai.dev";
+      host = "alexandria";
+    }
   ];
 }

secrets/secrets.nix

@@ -32,4 +32,9 @@ in
     rotterdam-user
     trantor
   ];
+  "freshrss-adminpass.age".publicKeys = [
+    io-user
+    rotterdam-user
+    alexandria
+  ];
 }