From 400309919f9375ccb3f6628a635c48591047ea72 Mon Sep 17 00:00:00 2001 From: Anish Lakhwara Date: Thu, 1 Dec 2022 16:33:07 +1000 Subject: [PATCH] add freshrss --- profiles/freshrss/default.nix | 35 +++++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) create mode 100644 profiles/freshrss/default.nix diff --git a/profiles/freshrss/default.nix b/profiles/freshrss/default.nix new file mode 100644 index 00000000..224c08f0 --- /dev/null +++ b/profiles/freshrss/default.nix @@ -0,0 +1,35 @@ +{ config, lib, pkgs, ... }: + +{ + services.freshrss = { + enable = true; + virtualHost = "rss.sealight.xyz"; + baseUrl = "https://rss.sealight.xyz/"; + database = { + type = "pgsql"; + # passwordFile = "/run/secrets/gitea-dbpass"; # TODO supplied by agenix + passFile = "/run/secrets/freshrss-dbpass"; + }; + }; + + services.postgresql = { + enable = true; # Ensure postgresql is enabled + package = pkgs.postgresql_11; + authentication = '' + local freshrss all ident map=freshrss-users + ''; + identMap = # Map the gitea user to postgresql + '' + freshrss-users freshrss freshrss + ''; + # TODO with password + # ensureDatabases = [ "freshrss" ]; + ensureUsers = [ + { name = "freshrss"; ensurePermissions."DATABASE freshrss" = "ALL PRIVILEGES"; } + ]; + }; + + networking.firewall.allowedTCPPorts = [ 80 443 ]; + security.acme.defaults.email = "anish+acme@lakhwara.com"; + security.acme.acceptTerms = true; +}