feat(freshrss): host on makanek

systems/makanek/configuration.nix

@@ -7,6 +7,7 @@
   inherit (import <niveum/lib>) kieran retiolumAddresses restic;
 in {
   imports = [
+    ./freshrss.nix
     ./gitea.nix
     ./hardware-configuration.nix
     ./hedgedoc.nix
@@ -50,6 +51,7 @@ in {
       "/var/lib/grafana"
       "/var/lib/gitea"
       "/var/lib/redis"
+      "/var/lib/freshrss"
     ];
   };
 

systems/makanek/freshrss.nix

@@ -0,0 +1,18 @@
+let
+  domain = "feed.kmein.de";
+in {
+  services.freshrss = {
+    enable = true;
+    baseUrl = "https://${domain}";
+    dataDir = "/var/lib/freshrss";
+    database.type = "sqlite";
+    defaultUser = "k";
+    passwordFile = toString <secrets/freshrss/password>;
+    virtualHost = domain;
+  };
+
+  services.nginx.virtualHosts.${domain} = {
+    enableACME = true;
+    forceSSL = true;
+  };
+}