feat(MOMO): add miniflux

hosts/MOMO/services/default.nix

@@ -1,6 +1,7 @@
 {
   imports = [
     ./acme.nix
+    ./miniflux.nix
     ./nginx.nix
     ./postgresql.nix
     ./syncthing.nix

hosts/MOMO/services/miniflux.nix

@@ -0,0 +1,18 @@
+{ config, ... }: {
+
+  age.secrets.environments-miniflux = {
+    file = ../../../secrets/environments/miniflux.age;
+  };
+
+  services.miniflux = {
+    enable = true;
+    config = {
+      CLEANUP_FREQUENCY = 48;
+      LISTEN_ADDR = "127.0.0.1:8008";
+      BASE_URL = "https://miniflux.dryb.org/";
+    };
+    createDatabaseLocally = true;
+    adminCredentialsFile = config.age.secrets.environments-miniflux.path;
+  };
+
+}

hosts/MOMO/services/nginx.nix

@@ -23,6 +23,13 @@
         proxyPass = "http://127.0.0.1:8007";
       };
     };
+    virtualHosts."miniflux.dryb.org" = {
+      addSSL = true;
+      enableACME = true;
+      locations."/" = {
+        proxyPass = "http://127.0.0.1:8008";
+      };
+    };
   };
 
   networking.firewall = {

secrets/environments/miniflux.age

@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 lfMVeg LGj+qqx0yxhF/ytLXKlPkTdSrLY9JXUpaAgBcbfXSxw
+9ntYWif+Xz5nPJQfejaUr1wVPvRY/BtLOcdy/teurdg
+-> ssh-ed25519 ueRyzQ Ac+tPwQGq9iqbBNM4pa7KkUZT0TIDoCs+5dL0A+O2z0
+CPRCB9TLZkv6C6UhQLE/N0KERReO+NxhbirmbouzH6Y
+-> ssh-ed25519 IYnDOQ fSTrTu4EHHr+2uXKLEgmC+P5vLMSNzwy0Qi7n4ZflEw
+Kk6CGDCTjJRcZx+gzqWiGWXkdlIYx7eZ5nsyNU/kfgk
+--- NyNItTJRAWu5KH5PMXJKmKF2hzO+idSlBdhp3I148tg
+ãå“ôGFíuàäì<EFBFBD>:q˜Vçç5ßl!ëI@/™kÖ¬<>JО^*D‚±ÑÀª…ílô纠å…ÕÒCÞ~O7Ô0Õý'üq9q7ç±cRüž«É<É•ä¥ÜãåúJ¿¹

secrets/secrets.nix

@@ -16,6 +16,7 @@ let
 in
 {
   "environments/acme.age".publicKeys = users ++ servers;
+  "environments/miniflux.age".publicKeys = users ++ servers;
   "environments/vaultwarden.age".publicKeys = users ++ servers;
   "environments/yarr.age".publicKeys = users ++ servers;
   "passwords/anki/admin.age".publicKeys = users ++ servers;