blob: 19f163590f7c8dc399804d958b3adab1a6726144 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
|
{ me, pkgs, auxiliaryPkgs, ... }:
let
inherit (pkgs) miniflux dockerTools;
inherit (auxiliaryPkgs) common;
minifluxDir = "/srv/miniflux";
minifluxLocalPort = 9149;
minifluxImage = dockerTools.streamLayeredImage {
name = "miniflux";
tag = miniflux.version;
fromImage = common.alpine.base;
contents = [ miniflux ];
};
in
{
foundation.service.miniflux = {
miniflux = {
image = minifluxImage;
ports = [ minifluxLocalPort ];
environment = {
PORT = toString minifluxLocalPort;
BASE_URL = "https://miniflux.rnrd.fyi/";
CREATE_ADMIN = "1";
ADMIN_USERNAME = "mel";
ADMIN_PASSWORD = "X98ji!9aoJNfCB";
DATABASE_URL = "postgres://miniflux:miniflux@db/miniflux?sslmode=disable";
RUN_MIGRATIONS = "1";
};
entrypoint = "${miniflux}/bin/miniflux";
workdir = "/etc/miniflux";
};
db = {
fullImage = common.postgres17;
volumes = [ [ "${minifluxDir}/pgdata" "/var/lib/postgresql/data" ] ];
environment = {
"POSTGRES_DATABASE" = "miniflux";
"POSTGRES_USER" = "miniflux";
"POSTGRES_PASSWORD" = "miniflux";
};
};
};
services.nginx.virtualHosts."miniflux.rnrd.fyi" = {
useACMEHost = "rnrd.fyi";
forceSSL = true;
listenAddresses = [ me.tailscale.ip ];
locations."/" = {
proxyPass = "http://127.0.0.1:${toString minifluxLocalPort}/";
recommendedProxySettings = true;
};
};
}
|
