diff --git a/hosts/servers/alexandria/miniflux.nix b/hosts/servers/alexandria/miniflux.nix new file mode 100644 index 0000000..86dce9a --- /dev/null +++ b/hosts/servers/alexandria/miniflux.nix @@ -0,0 +1,28 @@ +{ inputs, config, pkgs, lib, ... }: + +{ + services = { + miniflux = { + enable = true; + config = { + PORT = "${config.ports.miniflux}"; + FETCH_YOUTUBE_WATCH_TIME = true; + BASE_URL = "https://miniflux.baduhai.me"; + }; + adminCredentialsFile = config.age.secrets.miniflux-pass.path; + }; + + nginx.virtualHosts."miniflux.baduhai.me" = { + useACMEHost = "baduhai.me"; + forceSSL = true; + kTLS = true; + locations."/".proxyPass = "http://127.0.0.1:${config.ports.miniflux}"; + }; + }; + + age.secrets.miniflux-pass = { + file = ../../../secrets/miniflux-pass.age; + owner = "dbUser"; + group = "hosted"; + }; +} diff --git a/hosts/servers/alexandria/pairdrop.nix b/hosts/servers/alexandria/pairdrop.nix index 0354180..314a92a 100644 --- a/hosts/servers/alexandria/pairdrop.nix +++ b/hosts/servers/alexandria/pairdrop.nix @@ -6,12 +6,5 @@ ports = [ "${config.ports.pairdrop}:3000" ]; extraOptions = [ "--label=io.containers.autoupdate=registry" ]; }; - - services.nginx.virtualHosts."pairdrop.baduhai.me" = { - useACMEHost = "baduhai.me"; - forceSSL = true; - kTLS = true; - locations."/".proxyPass = "http://127.0.0.1:${config.ports.pairdrop}"; - }; } diff --git a/hosts/servers/alexandria/variables.nix b/hosts/servers/alexandria/variables.nix index 0841a3e..1c1add6 100644 --- a/hosts/servers/alexandria/variables.nix +++ b/hosts/servers/alexandria/variables.nix @@ -23,6 +23,7 @@ in { qbittorrent = mkStringOption "8008"; actual = mkStringOption "8009"; pairdrop = mkStringOption "8010"; + miniflux = mkStringOption "8011"; jellyfin = mkStringOption "8096"; sonarr = mkStringOption "8989"; jackett = mkStringOption "9117"; diff --git a/secrets/miniflux-pass.age b/secrets/miniflux-pass.age new file mode 100644 index 0000000..610c008 --- /dev/null +++ b/secrets/miniflux-pass.age @@ -0,0 +1,11 @@ +age-encryption.org/v1 +-> ssh-ed25519 SP9f6A 48e4UZtf1n69Ge04wCgUgn+OmGuGtFJN7ENRWUpfojA +bAIxQkXp3OqN2TYVupMcEpQuGkwAX2QWr0gogY0K3nA +-> ssh-ed25519 3Chb7w MLqrK7IMC/YSC7tX7YJUWfcmNz/Khcn+PuGUiWHV5XU +EmNQ80Q32TnGK3Ebrhm82YOheniCxSuh1XWakc6w2IA +-> ssh-ed25519 J6tVTA WXdgo7akWMmSXLHqX5nFCvqs16Sjkk2v1Z0uiRIf1B4 +fWulQMXt/yHbOfd2pxNs2Mpw4Ae6H4BO7wnRRoX1sps +-> 3hj3Jcf7-grease 9M +zoLvOFmKXkw +--- 2LHErSrXMPnoPPrAuR83Y0TS3tJRKQDwE7hqTJ01V10 + 1J.mf} Ymm 6?#+cj9x$\Ӻجۿf5vDm,d-iE>H%OĶ \ No newline at end of file diff --git a/secrets/secrets.nix b/secrets/secrets.nix index d9a98e2..bfa61cf 100644 --- a/secrets/secrets.nix +++ b/secrets/secrets.nix @@ -13,4 +13,5 @@ let in { "cloudflare-creds.age".publicKeys = all-hosts; "paperless-pass.age".publicKeys = all-hosts; + "miniflux-pass.age".publicKeys = all-hosts; }