From a8cb1f33b2c0ea49c434b5f251fe45938d050f6a Mon Sep 17 00:00:00 2001
From: Seth Flynn <getchoo@tuta.io>
Date: Thu, 20 Feb 2025 04:19:27 -0500
Subject: nixos: include nginx proxies in mixins

---
 modules/nixos/mixins/miniflux.nix | 47 +++++++++++++++++++++++++++++++++++++++
 1 file changed, 47 insertions(+)
 create mode 100644 modules/nixos/mixins/miniflux.nix

(limited to 'modules/nixos/mixins/miniflux.nix')

diff --git a/modules/nixos/mixins/miniflux.nix b/modules/nixos/mixins/miniflux.nix
new file mode 100644
index 0000000..187ddc0
--- /dev/null
+++ b/modules/nixos/mixins/miniflux.nix
@@ -0,0 +1,47 @@
+{
+  config,
+  lib,
+  secretsDir,
+  ...
+}:
+
+{
+  config = lib.mkMerge [
+    {
+      services.miniflux = {
+        adminCredentialsFile = config.age.secrets.miniflux.path;
+        config = {
+          BASE_URL = "https://miniflux.${config.networking.domain}";
+          LISTEN_ADDR = "localhost:7000";
+        };
+      };
+    }
+
+    (lib.mkIf config.services.miniflux.enable {
+      age.secrets.miniflux.file = secretsDir + "/miniflux.age";
+
+      services = {
+        nginx.virtualHosts.${lib.removePrefix "https://" config.services.miniflux.config.BASE_URL} = {
+          locations."/" = {
+            proxyPass = "http://${config.services.miniflux.config.LISTEN_ADDR}";
+          };
+        };
+      };
+
+      /*
+        # Create the socket manually to ensure NGINX has permission for the socket's parent directory
+        # ...since for some reason Miniflux will not give it the same `0777` permission as the socket itself
+        systemd = {
+          services.miniflux = {
+            requires = [ "miniflux.socket" ];
+          };
+
+          sockets.miniflux = {
+            wantedBy = [ "sockets.target" ];
+            listenStreams = [ "/run/miniflux.sock" ];
+          };
+        };
+      */
+    })
+  ];
+}
-- 
cgit v1.2.3