about summary refs log tree commit diff
path: root/users
diff options
context:
space:
mode:
Diffstat (limited to 'users')
-rw-r--r--users/tazjin/nixos/koptevo/default.nix1
-rw-r--r--users/tazjin/nixos/modules/miniflux.nix21
-rw-r--r--users/tazjin/secrets/miniflux.age14
-rw-r--r--users/tazjin/secrets/secrets.nix3
4 files changed, 38 insertions, 1 deletions
diff --git a/users/tazjin/nixos/koptevo/default.nix b/users/tazjin/nixos/koptevo/default.nix
index e93c3c42005e..a3eede1c5783 100644
--- a/users/tazjin/nixos/koptevo/default.nix
+++ b/users/tazjin/nixos/koptevo/default.nix
@@ -16,6 +16,7 @@ in
     (usermod "geesefs.nix")
     (usermod "predlozhnik.nix")
     (usermod "tgsa.nix")
+    (usermod "miniflux.nix")
     (depot.third_party.agenix.src + "/modules/age.nix")
   ];
 
diff --git a/users/tazjin/nixos/modules/miniflux.nix b/users/tazjin/nixos/modules/miniflux.nix
new file mode 100644
index 000000000000..52334ef503b3
--- /dev/null
+++ b/users/tazjin/nixos/modules/miniflux.nix
@@ -0,0 +1,21 @@
+{ config, depot, lib, pkgs, ... }:
+
+{
+  age.secrets.miniflux.file = depot.users.tazjin.secrets."miniflux.age";
+
+  services.miniflux = {
+    enable = true;
+    adminCredentialsFile = "/run/agenix/miniflux";
+    config.LISTEN_ADDR = "127.0.0.1:6359";
+  };
+
+  services.nginx.virtualHosts."feeds" = {
+    serverName = "feeds.tazj.in";
+    enableACME = true;
+    forceSSL = true;
+
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:6359";
+    };
+  };
+}
diff --git a/users/tazjin/secrets/miniflux.age b/users/tazjin/secrets/miniflux.age
new file mode 100644
index 000000000000..753dc6f03478
--- /dev/null
+++ b/users/tazjin/secrets/miniflux.age
@@ -0,0 +1,14 @@
+age-encryption.org/v1
+-> ssh-ed25519 dcsaLw SJBK+ym6o6dcB/+HFWzArbXS9RmyDjnglVxcXduJA1g
+pPWIi2A4G4X7I14HoZUWsNd/MOfhW1ZanwB/5OROSrw
+-> ssh-ed25519 zcCuhA oo/8OTqpV85g/9pha0qkmxwlYAlsc7v+nXbbtj67Jmc
+AexsAIgW6e5fYoPNJJZYdP61OvON2bKiL9ZJgLdG/zU
+-> ssh-ed25519 ph9lig 4evTl0M3SfdlmTixm3WnVqfHMPf/TYIyBKPdlfPisC0
+AK4GyhgqXN2wxbcFRGwbNNQJ4/2iFPt3CKGHosNJbmY
+-> ssh-ed25519 At5Mag JJ8r/qD5i+LLAY7jnnHXAgykAuHtzxtGGzdqw7BAogY
+wotjW3yaTq1IdqVUwoCVwzglXsmnzniQIt7SDBrF4jY
+-> sPHo{W-grease , h6 =mEp^w `ccnF
+QQEb+Vh1+Fv++oPQwdTfOB2Cg5JaP4GCOq0o3J+xSqCY1gE0cguwLGXwa6+Tylu2
+Kuh4pMovAxnlHUt44u6f
+--- yWQyncCrxJzVHffFaFT704BEp8hjUn09a+23r4S39N4
+}ң
l
I&m_{X̮?f1Mɧ|JVL<H5 NQQV#>s2M0I
\ No newline at end of file
diff --git a/users/tazjin/secrets/secrets.nix b/users/tazjin/secrets/secrets.nix
index 0b7c2c2cf19c..12f12f721c6c 100644
--- a/users/tazjin/secrets/secrets.nix
+++ b/users/tazjin/secrets/secrets.nix
@@ -10,6 +10,7 @@ let
   ];
 in
 {
-  "tgsa-yandex.age".publicKeys = allKeys;
   "geesefs-tazjins-files.age".publicKeys = allKeys;
+  "miniflux.age".publicKeys = allKeys;
+  "tgsa-yandex.age".publicKeys = allKeys;
 }