From 25b37c2b017dc7c3b0c234b710daa2f6631a5fc4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Kier=C3=A1n=20Meinhardt?= <kmein@posteo.de>
Date: Mon, 14 Nov 2022 22:36:41 +0100
Subject: [PATCH] feat(freshrss): host on makanek

---
 systems/makanek/configuration.nix |  2 ++
 systems/makanek/freshrss.nix      | 18 ++++++++++++++++++
 2 files changed, 20 insertions(+)
 create mode 100644 systems/makanek/freshrss.nix

diff --git a/systems/makanek/configuration.nix b/systems/makanek/configuration.nix
index fca03b0..1a25f00 100644
--- a/systems/makanek/configuration.nix
+++ b/systems/makanek/configuration.nix
@@ -7,6 +7,7 @@
   inherit (import <niveum/lib>) kieran retiolumAddresses restic;
 in {
   imports = [
+    ./freshrss.nix
     ./gitea.nix
     ./hardware-configuration.nix
     ./hedgedoc.nix
@@ -50,6 +51,7 @@ in {
       "/var/lib/grafana"
       "/var/lib/gitea"
       "/var/lib/redis"
+      "/var/lib/freshrss"
     ];
   };
 
diff --git a/systems/makanek/freshrss.nix b/systems/makanek/freshrss.nix
new file mode 100644
index 0000000..37759e2
--- /dev/null
+++ b/systems/makanek/freshrss.nix
@@ -0,0 +1,18 @@
+let
+  domain = "feed.kmein.de";
+in {
+  services.freshrss = {
+    enable = true;
+    baseUrl = "https://${domain}";
+    dataDir = "/var/lib/freshrss";
+    database.type = "sqlite";
+    defaultUser = "k";
+    passwordFile = toString <secrets/freshrss/password>;
+    virtualHost = domain;
+  };
+
+  services.nginx.virtualHosts.${domain} = {
+    enableACME = true;
+    forceSSL = true;
+  };
+}