this repo has no description
add freshrss
+35
+35
profiles/freshrss/default.nix
+35
profiles/freshrss/default.nix
···
1
+
{ config, lib, pkgs, ... }:
2
+
3
+
{
4
+
services.freshrss = {
5
+
enable = true;
6
+
virtualHost = "rss.sealight.xyz";
7
+
baseUrl = "https://rss.sealight.xyz/";
8
+
database = {
9
+
type = "pgsql";
10
+
# passwordFile = "/run/secrets/gitea-dbpass"; # TODO supplied by agenix
11
+
passFile = "/run/secrets/freshrss-dbpass";
12
+
};
13
+
};
14
+
15
+
services.postgresql = {
16
+
enable = true; # Ensure postgresql is enabled
17
+
package = pkgs.postgresql_11;
18
+
authentication = ''
19
+
local freshrss all ident map=freshrss-users
20
+
'';
21
+
identMap = # Map the gitea user to postgresql
22
+
''
23
+
freshrss-users freshrss freshrss
24
+
'';
25
+
# TODO with password
26
+
# ensureDatabases = [ "freshrss" ];
27
+
ensureUsers = [
28
+
{ name = "freshrss"; ensurePermissions."DATABASE freshrss" = "ALL PRIVILEGES"; }
29
+
];
30
+
};
31
+
32
+
networking.firewall.allowedTCPPorts = [ 80 443 ];
33
+
security.acme.defaults.email = "anish+acme@lakhwara.com";
34
+
security.acme.acceptTerms = true;
35
+
}