blob: 14c9fc5243b0251ce9072b1986b2eb71fd3a8459 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
|
{
config,
secretsDir,
...
}:
{
age.secrets.miniflux.file = secretsDir + "/miniflux.age";
services = {
miniflux = {
enable = true;
adminCredentialsFile = config.age.secrets.miniflux.path;
config = {
BASE_URL = "https://miniflux.${config.networking.domain}";
LISTEN_ADDR = "localhost:7000";
METRICS_COLLECTOR = 1;
};
};
nginx.virtualHosts = {
"miniflux.getchoo.com" = {
locations."/" = {
proxyPass = "http://${config.services.miniflux.config.LISTEN_ADDR}";
};
};
};
};
/*
# Create the socket manually to ensure NGINX has permission for the socket's parent directory
# ...since for some reason Miniflux will not give it the same `0777` permission as the socket itself
systemd = {
services.miniflux = {
requires = [ "miniflux.socket" ];
};
sockets.miniflux = {
wantedBy = [ "sockets.target" ];
listenStreams = [ "/run/miniflux.sock" ];
};
};
*/
}
|
