38 lines
1,017 B
Nix
38 lines
1,017 B
Nix
{ self, pkgs, config, lib, ... }:
|
|
|
|
{
|
|
age.secrets.wallabag-password.file = "${self}/secrets/wallabag-password.age";
|
|
age.secrets.wallabag-secret.file = "${self}/secrets/wallabag-secret.age";
|
|
age.secrets.wallabag-password.owner = "wallabag";
|
|
age.secrets.wallabag-secret.owner = "wallabag";
|
|
services.postgresql = {
|
|
enable = true;
|
|
package = pkgs.postgresql_15;
|
|
|
|
# Ensure the database, user, and permissions always exist
|
|
ensureDatabases = [ "wallabag" ];
|
|
ensureUsers = [
|
|
{
|
|
name = "wallabag";
|
|
# ensureDBOwnership = true;
|
|
}
|
|
];
|
|
authentication = ''
|
|
local wallabag all peer
|
|
'';
|
|
};
|
|
|
|
services.wallabag = {
|
|
enable = true;
|
|
domain = "read.mossnet.lan";
|
|
virtualHost.enable = true;
|
|
package = pkgs.my-wallabag;
|
|
# Systemd now defaults to /var/lib?
|
|
# dataDir = "/var/lib/wallabag";
|
|
parameters = {
|
|
"env(SECRET_FILE)" = config.age.secrets.wallabag-secret.path;
|
|
secret = "%env(file:resolve:SECRET_FILE)%";
|
|
};
|
|
};
|
|
}
|