From 4250623685dd786899296f12979240dd9e50bd8a Mon Sep 17 00:00:00 2001
From: notohh <github@notohh.dev>
Date: Fri, 2 Feb 2024 10:03:22 -0500
Subject: [PATCH] yuki: init hydroxide

traefik: remove searxng
---
 hosts/yuki/services/default.nix   |  1 +
 hosts/yuki/services/hydroxide.nix | 17 +++++++++++++++++
 hosts/yuki/services/traefik.nix   |  8 --------
 3 files changed, 18 insertions(+), 8 deletions(-)
 create mode 100644 hosts/yuki/services/hydroxide.nix

diff --git a/hosts/yuki/services/default.nix b/hosts/yuki/services/default.nix
index 53af6c6..6f1b88b 100644
--- a/hosts/yuki/services/default.nix
+++ b/hosts/yuki/services/default.nix
@@ -11,5 +11,6 @@
     ./anki-sync-server.nix
     ./paperless.nix
     ./miniflux.nix
+    ./hydroxide.nix
   ];
 }
diff --git a/hosts/yuki/services/hydroxide.nix b/hosts/yuki/services/hydroxide.nix
new file mode 100644
index 0000000..690332c
--- /dev/null
+++ b/hosts/yuki/services/hydroxide.nix
@@ -0,0 +1,17 @@
+{pkgs, ...}: {
+  environment.systemPackages = [pkgs.hydroxide];
+  networking.firewall.allowedTCPPorts = [1025 1143];
+
+  systemd.services.hydroxide = {
+    enable = true;
+    wantedBy = ["multi-user.target"];
+    description = "A third-party, open-source ProtonMail bridge";
+
+    serviceConfig = {
+      User = "notoh";
+      ExecStart = "${pkgs.hydroxide}/bin/hydroxide -disable-carddav serve";
+      Restart = "always";
+      RestartSec = 30;
+    };
+  };
+}
diff --git a/hosts/yuki/services/traefik.nix b/hosts/yuki/services/traefik.nix
index a63a985..c100680 100644
--- a/hosts/yuki/services/traefik.nix
+++ b/hosts/yuki/services/traefik.nix
@@ -55,13 +55,6 @@
             tls.domains = [{main = "*.internal.flake.sh";}];
             tls.certresolver = "production";
           };
-          searxng = {
-            rule = "Host(`search.internal.flake.sh`)";
-            entrypoints = ["websecure"];
-            service = "searxng";
-            tls.domains = [{main = "*.internal.flake.sh";}];
-            tls.certresolver = "production";
-          };
           hass = {
             rule = "Host(`hass.internal.flake.sh`)";
             entrypoints = ["websecure"];
@@ -141,7 +134,6 @@
           jellyfin.loadBalancer.servers = [{url = "http://localhost:8096";}];
           jellyseerr.loadBalancer.servers = [{url = "http://localhost:5055";}];
           wallos.loadBalancer.servers = [{url = "http://localhost:8282";}];
-          searxng.loadBalancer.servers = [{url = "http://localhost:8100";}];
           hass.loadBalancer.servers = [{url = "http://localhost:8123";}];
           paperless.loadBalancer.servers = [{url = "http://localhost:28981";}];
           miniflux.loadBalancer.servers = [{url = "http://localhost:9000";}];