30 lines
862 B
Nix
30 lines
862 B
Nix
{ lib, config, ... }:
|
|
let
|
|
port = config.lib.ports.miniflux;
|
|
in
|
|
{
|
|
services.miniflux = {
|
|
enable = true;
|
|
adminCredentialsFile = config.sops.secrets."miniflux/environment".path;
|
|
config = {
|
|
LISTEN_ADDR = "127.0.0.1:${toString port}";
|
|
BASE_URL = "https://rss.ny4.dev";
|
|
|
|
OAUTH2_PROVIDER = "oidc";
|
|
OAUTH2_CLIENT_ID = "miniflux";
|
|
# OAUTH2_CLIENT_SECRET = "replace_me"; # EnvironmentFile
|
|
OAUTH2_REDIRECT_URL = "https://rss.ny4.dev/oauth2/oidc/callback";
|
|
OAUTH2_OIDC_DISCOVERY_ENDPOINT = "https://id.ny4.dev/realms/ny4";
|
|
};
|
|
};
|
|
|
|
services.caddy.settings.apps.http.servers.srv0.routes = lib.singleton {
|
|
match = lib.singleton {
|
|
host = [ "rss.ny4.dev" ];
|
|
};
|
|
handle = lib.singleton {
|
|
handler = "reverse_proxy";
|
|
upstreams = [ { dial = "localhost:${toString port}"; } ];
|
|
};
|
|
};
|
|
}
|