sops: update secrets

hosts/haru/services/blocky.nix

@@ -118,7 +118,6 @@
           "prowlarr.internal.flake.sh" = "192.168.1.54";
           "stash.internal.flake.sh" = "192.168.1.98";
           "nextcloud.internal.flake.sh" = "192.168.1.199";
-          "news.internal.flake.sh" = "192.168.1.98";
 
           # misc
 

hosts/sakura/services/default.nix

@@ -10,5 +10,6 @@
     ./conduit.nix
     ./tailscale.nix
     ./justlog.nix
+    ./miniflux.nix
   ];
 }

hosts/sakura/services/miniflux.nix

@@ -3,8 +3,6 @@
   lib,
   ...
 }: {
-  networking.firewall.allowedTCPPorts = [9000];
-
   sops.secrets.miniflux = {};
 
   services.miniflux = {
@@ -13,7 +11,10 @@
     config = {
       LISTEN_ADDR = "0.0.0.0";
       PORT = 9000;
-      DATABASE_URL = lib.mkForce "host=192.168.1.211 port=5432 user=miniflux password=miniflux dbname=miniflux sslmode=disable";
+      BASE_URL = "https://rss.flake.sh";
+      HTTPS = "true";
+      WEBAUTHN = "true";
+      DATABASE_URL = lib.mkForce "host=100.94.214.100 port=5432 user=miniflux password=miniflux dbname=miniflux sslmode=disable";
     };
   };
 }

hosts/sora/networking.nix

@@ -30,6 +30,5 @@
   };
   services.udev.extraRules = ''
     ATTR{address}=="96:00:02:c2:dc:83", NAME="eth0"
-
   '';
 }

hosts/sora/services/traefik.nix

@@ -160,6 +160,13 @@
             tls.domains = [{main = "*.flake.sh";}];
             tls.certresolver = "production";
           };
+          miniflux = {
+            rule = "Host(`rss.flake.sh`)";
+            entrypoints = ["websecure"];
+            service = "miniflux";
+            tls.domains = [{main = "*.flake.sh";}];
+            tls.certresolver = "production";
+          };
         };
         services = {
           forgejo.loadBalancer = {
@@ -181,6 +188,7 @@
           attic.loadBalancer.servers = [{url = "http://100.104.42.96:8200";}];
           minio.loadBalancer.servers = [{url = "http://100.69.79.81:9005";}];
           woodpecker.loadBalancer.servers = [{url = "http://100.82.146.40:8200";}];
+          miniflux.loadBalancer.servers = [{url = "http://100.121.201.47:9000";}];
         };
       };
     };

hosts/yuki/services/default.nix

@@ -8,6 +8,5 @@
     ./wallos.nix
     ./homepage.nix
     ./searxng.nix
-    ./miniflux.nix
   ];
 }

hosts/yuki/services/traefik.nix

@@ -45,11 +45,6 @@ _: {
             entrypoints = ["web"];
             service = "hass";
           };
-          miniflux = {
-            rule = "Host(`news.internal.flake.sh`)";
-            entrypoints = ["web"];
-            service = "miniflux";
-          };
         };
         services = {
           stash.loadBalancer.servers = [{url = "http://localhost:9999";}];
@@ -59,7 +54,6 @@ _: {
           wallos.loadBalancer.servers = [{url = "http://localhost:8282";}];
           searxng.loadBalancer.servers = [{url = "http://localhost:8100";}];
           hass.loadBalancer.servers = [{url = "http://localhost:8123";}];
-          miniflux.loadBalancer.servers = [{url = "http://localhost:9000";}];
         };
       };
     };

secrets/secrets.yaml

@@ -1,7 +1,7 @@
 foundry-username: ENC[AES256_GCM,data:YYZ5Q6UlWPqbH8iYhqoR6pYFmQ3NAjY=,iv:pRjblo74gqbYYJTy/edn1bOsEKjHyvmXPwp6D/t6vxE=,tag:G5Xt+dVT51pU6kYdDra0Rw==,type:str]
 foundry-password: ENC[AES256_GCM,data:c6cO1vV/thC7U1ha/1FiVVzk0KtvUnTRgJ9ysyO35uYhVK2ggyLUMAqBaXUduf4CXQ==,iv:jdnuyZyoaLN4waGI9MlU0coWg1adDIShrQykfuBq3UM=,tag:HNkaY/8k7JKQVCjjPlkO/w==,type:str]
 cloudflare-api-key: ENC[AES256_GCM,data:ZEYzFht24xogGov/Dkk9MQm0CZ/GPHvVgC7manQ2hOp1ljUOPrlHlShnNZnXctkv0VSwkQUARddCFQbAno79bUM=,iv:V54QifTBvy+5Q5JErfv2IRW0wpBn7q9KozAogy94gwU=,tag:1tz/0lNHLUTiYOH4V1jkDA==,type:str]
-gluetun: ENC[AES256_GCM,data:yL+LOPpwU+CAtbjc7YWbNUOTpDhq4mH3aJOl3hPYxgbFUba6NVJQ73mFt7BF+PXeqA/ilbZJW3GbCfAoXWLDP3qzFYqs9XeEV/FhHznkVHB88xdr+Fbv7cuCEa7PnnYbSiwr/R68EZLsGSr+u99+uu1TH6ABXG9nJna0bkwkTfx6ui/Yc2GndWS+Ew==,iv:rYdMasJS1LqMGvMYFyAdEkoTLtOHrZHGcfBOvbn63bg=,tag:YNcP/pvgKHPYNhAwVGdFHw==,type:str]
+gluetun: ENC[AES256_GCM,data:0IYaty4Pdu5mRqJ8rWTywH3N++yV/Xbdd/WsnVwCPegrybnS7ikhe4wRxSuKSC5YiH2ouZghTLvJUQ9VNg+oPlTC2hhAsmCMd5gPFBHNuFFpSeTQ+DHkPFQJvZ3sOgRTKwh5yME/un+ARsbxQyyzKBH0G4ZG0+8I7tayptStkB4i+daSUPolTWDnGw==,iv:uPn6U6qO8+w92dqyTHOrzD1O4m15UfRAWT2nlAQFZVs=,tag:15g/1CSOKJ8Vfuu6pvsoeg==,type:str]
 authelia-jwt: ENC[AES256_GCM,data:cAn2uZeSGjG2FqTFgZkupcSutCZLvZXCNBsxuUQvGX4=,iv:1OTDQzQwaPTmnTEB4TfnxU6l8CdBAlHfqFThE8QZa6A=,tag:KJ6aYDczHFajhLJHemfIQw==,type:str]
 authelia-sek: ENC[AES256_GCM,data:yWhAvl1AuEcrUCFAv2vcz6A8BLEIMIz9sqbFRAriHpw=,iv:i887EZgqGtRfFs6mHHAJry0XfQzvrTaDliz8PRh7oLs=,tag:dmn2GSG8gZk9CVXMNmH1Dw==,type:str]
 searxng-secret: ENC[AES256_GCM,data:SSvspQVRp79zJq0hzaqzuJIWFtVUoaqHGH9PXUViiXb9UKJM34t82o2J5K69RcOSBL7HadqmxcT4Eh8e8ZUJnquD7rrPdWb2Ih4zS7MmG94=,iv:wrQNNU7CjzfePNe1tWEXmN30vC0jTp+PtgfI3/XH22g=,tag:QAt/QL846hLLIMLQZUM3mQ==,type:str]
@@ -10,6 +10,7 @@ minio: ENC[AES256_GCM,data:ePCaN1wRnZheBsjEcAPizfGtZskS9rPxfP1kvvQvR+i3TGfwvAx2V
 attic: ENC[AES256_GCM,data:/zVpQw2yYqWWLhZnFCB17YZqcZs2Fn0L37aW1vK2Gj9npsHcOqV3d3Q7SkXSd+DIh68ECEWVoEovWgflm12fwUwXcU2yWofdfgIkO1DS9+9YRtPFPDIKwSE8YQS2V0r0IjV7KFppCrUSLZ2ehMGL/qzvQNdzVla0UsUKgqS0NjY29gcxdO4N5eJlBS/7KM297ulqu3InFdBI0rnO6t2iv37xBv5SEajPOWnaLpTYsm/aIwupJmCjwHb3WFv1NkyC+QAgCgUzNiufVwuVRrLT0fF+p1qDGjYG7Q+dwd+2K8k+MqeJNLw=,iv:k1Dg7/o2zulAX0K7IpRuwkWu+dxWRQ9H1p88MBmOapo=,tag:aDIx4hmWGiFgaEhz2Gz9lw==,type:str]
 woodpecker-server: ENC[AES256_GCM,data:rI6Su65xSXGwy+wI9koVi1oL4RCSr5VEf8txJohzaPQRlyg03wZZzLCe1SSzEFsivYlL5B2XKAuVdYrkW5n5/XUENwxgPwrv7Vm3ufRfItj6+44VjV1mK8STmGnzkqglY7j71uX/+aVeqQwDM8uwWHCiT89kNTSd5ebrWzjIQ01DZ/ojPRZOZBLRE0rafA==,iv:1CuaRP0d9t8WkvMbUhDTi0hn+MqVL428Bu3r/fobK40=,tag:8KlR5EWU+cdDV5oLB8hHpA==,type:str]
 woodpecker-agent-secret: ENC[AES256_GCM,data:DQoIOciEqDcaUYTTYFeIocmUUFB+ASstMA0ver4QiM/1n8G3udFL0OR6QRO1wx3bAlPCD4rrfiw1vYgAFj8xFg==,iv:X4goTnTQof1+OHj8nq6VAyCe+M7p2hLa4nDvm/hXw7U=,tag:3KbuBYTqU2hD3GB3r1siZw==,type:str]
+miniflux: ENC[AES256_GCM,data:H5YA60nFQkUVBhLrNjQY7E5hhBPjjQEqQ6PJB5ZNj1KNKtUSWt+rzFt+Hce5JrNmmj7aZjmj9upuzPjRFdva/T9ZyRHm,iv:Ju6bElSOsj62L+5ANKEmE866sCy9IOP5V9P020tl9bU=,tag:ntDj4d+2fGOE443tPZj80Q==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -25,8 +26,8 @@ sops:
             YWNQcURKMSs2U0pOa3E0cTdCZ3RnalkKGayA7DBUQS+kn+6OYVBc6oTunF0qeZdt
             5b9DLHgh0HRWFm09XGSOog8K315d93Wzblw1My1/dXeEQX/ryinqUQ==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-01-23T20:24:07Z"
+    lastmodified: "2024-01-26T02:19:14Z"
-    mac: ENC[AES256_GCM,data:8Lj/939tJY4vOOuTN6OVN3VqTdKWCYmveibtbYIgdVSm8omNIoEWwZzmfZtKQ+GBIhV9TiI6ZbiBAq+6HaRB1FvnsuPK3o/UCXoOb8s+MKQsKRqHB0gWO75/Zuh3WX2+3SMSe3cq30jMiWj2ChSvqOsimzqdyiM3JJwn5dgZRbo=,iv:T7QJgPcrT80LpvrMllpHgC6/hRxb2h377GTcyjhknbY=,tag:tumGwP/iAvkMnnHc+o5+Pw==,type:str]
+    mac: ENC[AES256_GCM,data:XRxttmSvlgl25HbaVywymRtayA35vQr8HqUlzHA8V8CpbCGdI1Xm5fHJSsaCfCCOdPtHqiLMDm6H8VWvBL2hFw/T6faqTqwagyninqt1D0yV3FuCuO4zFM/7tjnrYS/S314LTHA24TbU/sZFB1U4W6ADWaLuLDTt+w19910kfD8=,iv:8jPOXLTPAK2Iz+sLrz3uS5MhQvO53fJv5LIVdAzN35E=,tag:2QMN/8N9s1hc/j+VJdamZg==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.8.1