William
5a1f04ff16
- Add miniflux service listening on Unix socket at /run/miniflux/miniflux.sock - Remove FreshRSS configuration and data directory - Update nginx to reverse proxy to miniflux socket - Update secrets to use miniflux-admincreds.age
38 lines
757 B
Nix
38 lines
757 B
Nix
{
|
|
config,
|
|
lib,
|
|
inputs,
|
|
...
|
|
}:
|
|
|
|
let
|
|
mkNginxVHosts = inputs.self.lib.mkNginxVHosts;
|
|
in
|
|
|
|
{
|
|
services = {
|
|
miniflux = {
|
|
enable = true;
|
|
config = {
|
|
LISTEN_ADDR = "/run/miniflux/miniflux.sock";
|
|
CREATE_ADMIN = 1;
|
|
};
|
|
adminCredentialsFile = config.age.secrets.miniflux-admincreds.path;
|
|
createDatabaseLocally = true;
|
|
};
|
|
|
|
nginx.virtualHosts = mkNginxVHosts {
|
|
domains."rss.baduhai.dev" = {
|
|
locations."/".proxyPass = "http://unix:/run/miniflux/miniflux.sock:/";
|
|
};
|
|
};
|
|
};
|
|
|
|
users.users.nginx.extraGroups = [ "miniflux" ];
|
|
|
|
age.secrets.miniflux-admincreds = {
|
|
file = "${inputs.self}/secrets/miniflux-admincreds.age";
|
|
owner = "miniflux";
|
|
group = "miniflux";
|
|
};
|
|
}
|