add freshrss

profiles/freshrss/default.nix

@@ -0,0 +1,35 @@
+{ config, lib, pkgs, ... }:
+
+{
+  services.freshrss = {
+    enable = true;
+    virtualHost = "rss.sealight.xyz";
+    baseUrl = "https://rss.sealight.xyz/";
+    database = {
+      type = "pgsql";
+      # passwordFile = "/run/secrets/gitea-dbpass"; # TODO supplied by agenix
+      passFile = "/run/secrets/freshrss-dbpass";
+    };
+  };
+
+  services.postgresql = {
+    enable = true; # Ensure postgresql is enabled
+    package = pkgs.postgresql_11;
+    authentication = ''
+      local freshrss all ident map=freshrss-users
+    '';
+    identMap = # Map the gitea user to postgresql
+      ''
+        freshrss-users freshrss freshrss
+      '';
+    # TODO with password
+    # ensureDatabases = [ "freshrss" ];
+    ensureUsers = [
+      { name = "freshrss"; ensurePermissions."DATABASE freshrss" = "ALL PRIVILEGES"; }
+    ];
+  };
+
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
+  security.acme.defaults.email = "anish+acme@lakhwara.com";
+  security.acme.acceptTerms = true;
+}