From 77b8fc9790a563affda781352f1e10048dd39f94 Mon Sep 17 00:00:00 2001
From: Jacob Bachmann <jacob.bachmann@posteo.de>
Date: Sun, 12 Oct 2025 11:35:44 +0200
Subject: [PATCH] feat(MOMO): add miniflux

---
 hosts/MOMO/services/default.nix   |  1 +
 hosts/MOMO/services/miniflux.nix  | 18 ++++++++++++++++++
 hosts/MOMO/services/nginx.nix     |  7 +++++++
 secrets/environments/miniflux.age |  9 +++++++++
 secrets/secrets.nix               |  1 +
 5 files changed, 36 insertions(+)
 create mode 100644 hosts/MOMO/services/miniflux.nix
 create mode 100644 secrets/environments/miniflux.age

diff --git a/hosts/MOMO/services/default.nix b/hosts/MOMO/services/default.nix
index 7047df9..642e109 100644
--- a/hosts/MOMO/services/default.nix
+++ b/hosts/MOMO/services/default.nix
@@ -1,6 +1,7 @@
 {
   imports = [
     ./acme.nix
+    ./miniflux.nix
     ./nginx.nix
     ./postgresql.nix
     ./syncthing.nix
diff --git a/hosts/MOMO/services/miniflux.nix b/hosts/MOMO/services/miniflux.nix
new file mode 100644
index 0000000..ce088e7
--- /dev/null
+++ b/hosts/MOMO/services/miniflux.nix
@@ -0,0 +1,18 @@
+{ config, ... }: {
+
+  age.secrets.environments-miniflux = {
+    file = ../../../secrets/environments/miniflux.age;
+  };
+
+  services.miniflux = {
+    enable = true;
+    config = {
+      CLEANUP_FREQUENCY = 48;
+      LISTEN_ADDR = "127.0.0.1:8008";
+      BASE_URL = "https://miniflux.dryb.org/";
+    };
+    createDatabaseLocally = true;
+    adminCredentialsFile = config.age.secrets.environments-miniflux.path;
+  };
+
+}
diff --git a/hosts/MOMO/services/nginx.nix b/hosts/MOMO/services/nginx.nix
index 5a83764..6455b1d 100644
--- a/hosts/MOMO/services/nginx.nix
+++ b/hosts/MOMO/services/nginx.nix
@@ -23,6 +23,13 @@
         proxyPass = "http://127.0.0.1:8007";
       };
     };
+    virtualHosts."miniflux.dryb.org" = {
+      addSSL = true;
+      enableACME = true;
+      locations."/" = {
+        proxyPass = "http://127.0.0.1:8008";
+      };
+    };
   };
 
   networking.firewall = {
diff --git a/secrets/environments/miniflux.age b/secrets/environments/miniflux.age
new file mode 100644
index 0000000..6798515
--- /dev/null
+++ b/secrets/environments/miniflux.age
@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 lfMVeg LGj+qqx0yxhF/ytLXKlPkTdSrLY9JXUpaAgBcbfXSxw
+9ntYWif+Xz5nPJQfejaUr1wVPvRY/BtLOcdy/teurdg
+-> ssh-ed25519 ueRyzQ Ac+tPwQGq9iqbBNM4pa7KkUZT0TIDoCs+5dL0A+O2z0
+CPRCB9TLZkv6C6UhQLE/N0KERReO+NxhbirmbouzH6Y
+-> ssh-ed25519 IYnDOQ fSTrTu4EHHr+2uXKLEgmC+P5vLMSNzwy0Qi7n4ZflEw
+Kk6CGDCTjJRcZx+gzqWiGWXkdlIYx7eZ5nsyNU/kfgk
+--- NyNItTJRAWu5KH5PMXJKmKF2hzO+idSlBdhp3I148tg
+���GF�u���:q�V��5�l!�I@/�k���JО^*D�������l�纠���C�~O7�0��'�q9q7�cR����<ɕ�����J��
\ No newline at end of file
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 7266e3d..ce37e9f 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -16,6 +16,7 @@ let
 in
 {
   "environments/acme.age".publicKeys = users ++ servers;
+  "environments/miniflux.age".publicKeys = users ++ servers;
   "environments/vaultwarden.age".publicKeys = users ++ servers;
   "environments/yarr.age".publicKeys = users ++ servers;
   "passwords/anki/admin.age".publicKeys = users ++ servers;