feat(MOMO): add yarr

hosts/MOMO/services/nginx.nix

@@ -16,6 +16,13 @@
         proxyPass = "http://127.0.0.1:8005";
       };
     };
+    virtualHosts."yarr.dryb.org" = {
+      addSSL = true;
+      enableACME = true;
+      locations."/" = {
+        proxyPass = "http://127.0.0.1:8007";
+      };
+    };
   };
 
   networking.firewall = {

hosts/MOMO/services/yarr.nix

@@ -0,0 +1,14 @@
+{ config, ... }: {
+
+  age.secrets.environments-yarr = {
+    file = ../../../secrets/environments/yarr.age;
+  };
+
+  services.yarr = {
+    enable = true;
+    port = 8007;
+    address = "127.0.0.1";
+    baseUrl = "https://yarr.dryb.org";
+    authFilePath = config.age.secrets.environments-yarr.path;
+  };
+}

secrets/environments/yarr.age

@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 lfMVeg g6zt2+iuzFNLhz1MUN45Fm/PQyTcDNGTNTFV2/gZCSo
+rsH1EqfGlXzXxKHK5qeaZDo9tQ2LG7aZ5tc4lM6OQwo
+-> ssh-ed25519 ueRyzQ uEKYQgWA2BUAWaZ0UU8QBj8sgeRJZow9FARAI5jcng4
+z2wLWrY/Fz2lZEOjsHohpmjhcixY6UN1EyYl4QkJu80
+-> ssh-ed25519 IYnDOQ ajiSs82r6uhtD1j5UAPIwAHSV3+U7trR3imTI1zoKGs
+IlFf/4TMT3SZeyuPyI66g/jRFXhuNbiRpoIUuFjya5k
+--- GGkZetyyd0xSN2v4oDLV+KAFC8zYPCX5QvtifMP08uM
+Õmªë ïþ,LYã"þÄp%lǬ°«9º_þ[âý-ñÍᬙ÷®bÜꂉ¶O$ !¸Gy5œ5[7bøöhLlŠoËúF

secrets/secrets.nix

@@ -17,6 +17,7 @@ in
 {
   "environments/acme.age".publicKeys = users ++ servers;
   "environments/vaultwarden.age".publicKeys = users ++ servers;
+  "environments/yarr.age".publicKeys = users ++ servers;
   "passwords/anki/admin.age".publicKeys = users ++ servers;
   "passwords/ddclient/cloudflare.age".publicKeys = users ++ servers;
   "passwords/gitea/db.age".publicKeys = users ++ servers;