+1

nixos/ferret/default.nix

reviewed

··· 8 8 ./media.nix 9 9 ./caddy.nix 10 10 ./paperless.nix 11 11 + ./miniflux.nix 11 12 12 13 ./tailscale-splitdns.nix 13 14 ];

+29

nixos/ferret/miniflux.nix

reviewed

··· 1 1 + {config, ...}: 2 2 + let 3 3 + certloc = "/var/lib/acme/ferret.otter.place"; 4 4 + fqdn = "miniflux.ferret.otter.place"; 5 5 + in { 6 6 + 7 7 + age.secrets.miniflux-creds.file = ../../secrets/miniflux-creds.age; 8 8 + 9 9 + services.miniflux = { 10 10 + enable = true; 11 11 + adminCredentialsFile = config.age.secrets.miniflux-creds.path; 12 12 + createDatabaseLocally = true; # TODO install hstore extension in global postgres 13 13 + config = { 14 14 + BASE_URL = "https://${fqdn}"; 15 15 + LISTEN_ADDR = "localhost:18069"; 16 16 + }; 17 17 + }; 18 18 + 19 19 + # SSL config 20 20 + services.caddy = { 21 21 + virtualHosts."${fqdn}".extraConfig = '' 22 22 + reverse_proxy http://${config.services.miniflux.config.LISTEN_ADDR} 23 23 + 24 24 + tls ${certloc}/cert.pem ${certloc}/key.pem { 25 25 + protocols tls1.3 26 26 + } 27 27 + ''; 28 28 + }; 29 29 + }

+1

secrets/secrets.nix

reviewed

··· 8 8 { 9 9 "caddy.age".publicKeys = [ alex ferret ]; 10 10 "paperless-password.age".publicKeys = [ alex ferret ]; 11 11 + "miniflux-creds.age".publicKeys = [ alex ferret ]; 11 12 }