yta: download opus

configs/default.nix

@@ -106,7 +106,7 @@ in
           zathura = swallow "${pkgs.zathura}/bin/zathura";
           im = "${pkgs.openssh}/bin/ssh weechat@makanek -t tmux attach-session -t IM";
           yt = "${pkgs.yt-dlp}/bin/yt-dlp --add-metadata -ic"; # Download video link
-          yta = "${pkgs.yt-dlp}/bin/yt-dlp --add-metadata --audio-format opus --audio-quality 0 -xic"; # Download with audio
+          yta = "${pkgs.yt-dlp}/bin/yt-dlp --add-metadata --audio-format mp3 --audio-quality 0 -xic"; # Download with audio
         };
     }
     {

systems/ful/configuration.nix

@@ -2,6 +2,7 @@
   config,
   pkgs,
   lib,
+  inputs,
   ...
 }: let
   inherit (import ../../lib) kieran retiolumAddresses restic;
@@ -14,8 +15,8 @@ in {
     ./hledger.nix
     ./go-webring.nix
     ./gemini.nix
+    ./ical-ephemeris.nix
     ./wallabag.nix
-    ./alew.nix
     ../../configs/monitoring.nix
     ../../configs/mycelium.nix
     ../../configs/tor.nix
@@ -71,14 +72,6 @@ in {
     ];
   };
 
-  services.nginx.virtualHosts."ical-ephemeris.kmein.de" = {
-    addSSL = true;
-    enableACME = true;
-    locations."/" = {
-      root = "/var/www/ical-ephemeris";
-    };
-  };
-
   users.users.servant = {
     isSystemUser = true;
     group = "servant";

systems/ful/ical-ephemeris.nix

@@ -0,0 +1,24 @@
+{ config, pkgs, ... }:
+{
+  services.nginx.virtualHosts."ical-ephemeris.kmein.de" = {
+    addSSL = true;
+    enableACME = true;
+    locations."/" = {
+      proxyPass = "http://localhost:9090";
+    };
+  };
+
+  services.ical-ephemeris = {
+    enable = true;
+    port = 9090;
+    brevoApiKeyFile = config.age.secrets.brevo-key.path;
+    baseUrl = "https://ical-ephemeris.kmein.de";
+  };
+
+  age.secrets.brevo-key = {
+    file = ../../secrets/brevo-key.age;
+    owner = "ical-ephemeris";
+    group = "ical-ephemeris";
+    mode = "0400";
+  };
+}