sops: add miniflux login

hosts/arashi/services/postgresql.nix

@@ -32,10 +32,15 @@
         name = "forgejo";
         ensurePermissions."DATABASE forgejo" = "ALL PRIVILEGES";
       }
+      {
+        name = "miniflux";
+        ensurePermissions."DATABASE miniflux" = "ALL PRIVILEGES";
+      }
     ];
     ensureDatabases = [
       "forgejo"
       "hedgedoc"
+      "miniflux"
     ];
   };
 }

hosts/yuki/services/default.nix

@@ -7,5 +7,6 @@
     ./searxng.nix
     ./homarr.nix
     ./dashdot.nix
+    ./miniflux.nix
   ];
 }

hosts/yuki/services/miniflux.nix

@@ -0,0 +1,16 @@
+{
+  config,
+  lib,
+  ...
+}: {
+  networking.firewall.allowedTCPPorts = [8200];
+  sops.secrets.miniflux = {};
+  services.miniflux = {
+    enable = true;
+    config = {
+      DATABASE_URL = lib.mkForce "host=192.168.1.211 port=5432 user=miniflux password=miniflux dbname=miniflux sslmode=disable";
+      LISTEN_ADDR = "localhost:8200";
+    };
+    adminCredentialsFile = config.sops.secrets.miniflux.path;
+  };
+}

hosts/yuki/services/traefik.nix

@@ -35,6 +35,11 @@ _: {
             entrypoints = ["web"];
             service = "dashdot";
           };
+          miniflux = {
+            rule = "Host(`news.home.arpa`)";
+            entrypoints = ["web"];
+            service = "miniflux";
+          };
         };
         services = {
           kanboard.loadBalancer.servers = [{url = "http://localhost:8080";}];
@@ -42,6 +47,7 @@ _: {
           homarr.loadBalancer.servers = [{url = "http://localhost:7575";}];
           dashdot.loadBalancer.servers = [{url = "http://localhost:4000";}];
           searxng.loadBalancer.servers = [{url = "http://localhost:8100";}];
+          miniflux.loadBalancer.servers = [{url = "http://localhost:8200";}];
         };
       };
     };

secrets/secrets.yaml

@@ -7,6 +7,7 @@ woodpecker-server: ENC[AES256_GCM,data:elB9cO9bM3B4aRadcma42tz5TFdXRPN4RS71PDfqK
 woodpecker-agent-secret: ENC[AES256_GCM,data:Xfz8OEQqcqeb9zi531zhfitbDbfxtVAsf4JFmmqpAL9rMsQwRl8vWVp3m23yEl6F5f67+Bf26GAlPwWT8hVCAA==,iv:fCoBgR1L1niZaa/HCCfJTsrJvOrlGv0Fa7zcTL6s118=,tag:SOE/4MOp6tx+eTr4vrxxGA==,type:str]
 attic-secret: ENC[AES256_GCM,data:dHKfY7zNz5cH2pOiK6evuZv/WMt+VHhzeOB2E3kgcEvB7uCTcC1xRtyyCpCpsBZiTJg6RRHKPf0RO8pF3NIrKlTMQZvnzlTOW7baNlOXDPGrgTfH78/a3o+laVUeBozTIvvi8fkztJjUq3VcSPRkkdzo6OCwft70R3dbYmqPQ3vd,iv:MrJ55LJMBlGik0LW1Co99pHiK4JysoBJtJvW6Rgx4Bs=,tag:eW2kdbTJ7LQy8QlRr5NkTg==,type:str]
 gluetun: ENC[AES256_GCM,data:yL+LOPpwU+CAtbjc7YWbNUOTpDhq4mH3aJOl3hPYxgbFUba6NVJQ73mFt7BF+PXeqA/ilbZJW3GbCfAoXWLDP3qzFYqs9XeEV/FhHznkVHB88xdr+Fbv7cuCEa7PnnYbSiwr/R68EZLsGSr+u99+uu1TH6ABXG9nJna0bkwkTfx6ui/Yc2GndWS+Ew==,iv:rYdMasJS1LqMGvMYFyAdEkoTLtOHrZHGcfBOvbn63bg=,tag:YNcP/pvgKHPYNhAwVGdFHw==,type:str]
+miniflux: ENC[AES256_GCM,data:Ug7i6US14DKf0WvCdk07oganRcepD6GbrX7fKKDYhfpoIsksZCWQPLNCxO+uBHm4xAf7e+bk,iv:biWn2ou2chR0gDJM0dEFbAojVHrM7BFvwZ/xtk9f4og=,tag:deFNV/lCNEz0F8yBwCnVyw==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -22,8 +23,8 @@ sops:
             YWNQcURKMSs2U0pOa3E0cTdCZ3RnalkKGayA7DBUQS+kn+6OYVBc6oTunF0qeZdt
             5b9DLHgh0HRWFm09XGSOog8K315d93Wzblw1My1/dXeEQX/ryinqUQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2023-06-16T07:26:48Z"
-    mac: ENC[AES256_GCM,data:MoKoGCTFAruLzYERJNesBwAsjVzLknZqy0uxRuZHSS/hpklLe1pVvboyTe8W8ke4R34+oFD4zwzAnPezU1ldjGvTSnaSTl48PPT2RZgNPgsJwzmLjmGKEosWVn5kBosDqeuDIjr9qeQU2QnfEGfMKYlLNt8MG/M48H4lnY94ZUw=,iv:FOzhtSj/j8j/A6b86TA2W1d4M/PyAgjubFXOmpXJwG4=,tag:MkvIuezoB8Jt8HZX2yYJQw==,type:str]
+    lastmodified: "2023-06-19T09:08:32Z"
+    mac: ENC[AES256_GCM,data:0F4X7gdqDin1iXKB0iknrhYXPdw40uhEfgjSEdj47HhMHsQofDX/74jl6U3fGaAt7Gp8mhbqaE9ZdU2eYzU7kpX/zYExnEwEjwwzD/S5Qpovl6YbfQgZ1F1iGmohCZK1r8GXV5pnvzmqrJyZL1b8g0jSeC10CFGEqCCnaUjLe8Y=,iv:2/615IMcdghY0juFyGOEWILf+5ACNk/6BZoglU75fI4=,tag:Nup4fpsidj/Usxu6GKGp3w==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.7.3