From 9a5a1ddf24229c89862d35751843f03981aaa6c9 Mon Sep 17 00:00:00 2001 From: Vincent Ambo Date: Sun, 25 Feb 2024 12:47:32 +0300 Subject: feat(tazjin/koptevo): experimental miniflux setup Change-Id: I2020a6bf2262966d41d3b47a17b122df121d661d --- users/tazjin/nixos/koptevo/default.nix | 1 + users/tazjin/nixos/modules/miniflux.nix | 21 +++++++++++++++++++++ users/tazjin/secrets/miniflux.age | 14 ++++++++++++++ users/tazjin/secrets/secrets.nix | 3 ++- 4 files changed, 38 insertions(+), 1 deletion(-) create mode 100644 users/tazjin/nixos/modules/miniflux.nix create mode 100644 users/tazjin/secrets/miniflux.age (limited to 'users') diff --git a/users/tazjin/nixos/koptevo/default.nix b/users/tazjin/nixos/koptevo/default.nix index e93c3c42005e..a3eede1c5783 100644 --- a/users/tazjin/nixos/koptevo/default.nix +++ b/users/tazjin/nixos/koptevo/default.nix @@ -16,6 +16,7 @@ in (usermod "geesefs.nix") (usermod "predlozhnik.nix") (usermod "tgsa.nix") + (usermod "miniflux.nix") (depot.third_party.agenix.src + "/modules/age.nix") ]; diff --git a/users/tazjin/nixos/modules/miniflux.nix b/users/tazjin/nixos/modules/miniflux.nix new file mode 100644 index 000000000000..52334ef503b3 --- /dev/null +++ b/users/tazjin/nixos/modules/miniflux.nix @@ -0,0 +1,21 @@ +{ config, depot, lib, pkgs, ... }: + +{ + age.secrets.miniflux.file = depot.users.tazjin.secrets."miniflux.age"; + + services.miniflux = { + enable = true; + adminCredentialsFile = "/run/agenix/miniflux"; + config.LISTEN_ADDR = "127.0.0.1:6359"; + }; + + services.nginx.virtualHosts."feeds" = { + serverName = "feeds.tazj.in"; + enableACME = true; + forceSSL = true; + + locations."/" = { + proxyPass = "http://127.0.0.1:6359"; + }; + }; +} diff --git a/users/tazjin/secrets/miniflux.age b/users/tazjin/secrets/miniflux.age new file mode 100644 index 000000000000..753dc6f03478 --- /dev/null +++ b/users/tazjin/secrets/miniflux.age @@ -0,0 +1,14 @@ +age-encryption.org/v1 +-> ssh-ed25519 dcsaLw SJBK+ym6o6dcB/+HFWzArbXS9RmyDjnglVxcXduJA1g +pPWIi2A4G4X7I14HoZUWsNd/MOfhW1ZanwB/5OROSrw +-> ssh-ed25519 zcCuhA oo/8OTqpV85g/9pha0qkmxwlYAlsc7v+nXbbtj67Jmc +AexsAIgW6e5fYoPNJJZYdP61OvON2bKiL9ZJgLdG/zU +-> ssh-ed25519 ph9lig 4evTl0M3SfdlmTixm3WnVqfHMPf/TYIyBKPdlfPisC0 +AK4GyhgqXN2wxbcFRGwbNNQJ4/2iFPt3CKGHosNJbmY +-> ssh-ed25519 At5Mag JJ8r/qD5i+LLAY7jnnHXAgykAuHtzxtGGzdqw7BAogY +wotjW3yaTq1IdqVUwoCVwzglXsmnzniQIt7SDBrF4jY +-> sPHo{W-grease , h6 =mEp^w `ccnF +QQEb+Vh1+Fv++oPQwdTfOB2Cg5JaP4GCOq0o3J+xSqCY1gE0cguwLGXwa6+Tylu2 +Kuh4pMovAxnlHUt44u6f +--- yWQyncCrxJzVHffFaFT704BEp8hjUn09a+23r4S39N4 +}ң l I&m_ {X̮?f1Mɧ|JVL<H5 NQQV#>s2M0I \ No newline at end of file diff --git a/users/tazjin/secrets/secrets.nix b/users/tazjin/secrets/secrets.nix index 0b7c2c2cf19c..12f12f721c6c 100644 --- a/users/tazjin/secrets/secrets.nix +++ b/users/tazjin/secrets/secrets.nix @@ -10,6 +10,7 @@ let ]; in { - "tgsa-yandex.age".publicKeys = allKeys; "geesefs-tazjins-files.age".publicKeys = allKeys; + "miniflux.age".publicKeys = allKeys; + "tgsa-yandex.age".publicKeys = allKeys; } -- cgit 1.4.1