From 1499edc4dbbb79a1506ce9243520aa93a68b31ec Mon Sep 17 00:00:00 2001
From: Lucas Sta Maria <lucas@priime.dev>
Date: Mon, 18 Aug 2025 13:34:37 +0000
Subject: [PATCH] fix(nix): add paperless configuration

---
 nix/hosts/chaewon/sys.nix      |  6 ++++++
 nix/modules/secrets.nix        |  1 +
 secrets/paperless-password.age | 12 ++++++++++++
 secrets/secrets.nix            |  1 +
 4 files changed, 20 insertions(+)
 create mode 100644 secrets/paperless-password.age

diff --git a/nix/hosts/chaewon/sys.nix b/nix/hosts/chaewon/sys.nix
index 8a0442f..2a3d994 100644
--- a/nix/hosts/chaewon/sys.nix
+++ b/nix/hosts/chaewon/sys.nix
@@ -89,6 +89,12 @@
     };
   };
 
+  services.paperless = {
+    enable = true;
+    port = 8050;
+    passwordFile = config.age.secrets.paperless-password.path;
+  };
+
   system.stateVersion = "23.11";
   home-manager.users.priime = { pkgs, ... }: { imports = [ ./home.nix ]; };
 }
diff --git a/nix/modules/secrets.nix b/nix/modules/secrets.nix
index 77ff5bd..c7ec697 100644
--- a/nix/modules/secrets.nix
+++ b/nix/modules/secrets.nix
@@ -3,5 +3,6 @@
   age.secrets = {
     forgejo-runner-token.file = ../../secrets/forgejo-runner-token.age;
     readeck-secret-key.file = ../../secrets/readeck-secret-key.age;
+    paperless-password.file = ../../secrets/paperless-password.age;
   };
 }
diff --git a/secrets/paperless-password.age b/secrets/paperless-password.age
new file mode 100644
index 0000000..63b4f9c
--- /dev/null
+++ b/secrets/paperless-password.age
@@ -0,0 +1,12 @@
+-----BEGIN AGE ENCRYPTED FILE-----
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IEIrN21jdyAxZHFC
+NXN1MUNpNVhkLys3MkNhaVhyVmtDdU1aZWYzcGJ5STRqcVlYMlhVClh1b013Um1u
+ajVhOGo5R1VBdXBoZUVudkxqTlpyVG9IcHFlbGtPcndDbk0KLT4gc3NoLWVkMjU1
+MTkgN045S1hnIEpqdm9rby9DRXhoZWJsbVhrUkxXSityTEk5SUFBK3hTclFMT3R6
+a0FRd00KeTUxK3dMNlVQZGxSQjNtRmg5TWdGbng4bWpLM0V0dTRuSGhIMElHNVQr
+RQotPiBGKCJ3QH0vLWdyZWFzZSAuXWsjOQpqL2N1Nk8raTA1WWdGRDdqT2lWWC9r
+S01YNEpoTms3NUhBL1A0dk1icSttV0I3NWJ2cERZVG9XdHRMSlRTZk5CCmNYZDh1
+RVM3VnJZCi0tLSBVbi9PVXlUSjNLaHpGaHdtYWFCcTNySElZdTVUZUcxV01Jd2FE
+SnJHajdvCpJRMMu+TXKuuIeGMrj7k+qca3TbaKUUHxTEo9joJKfuzZz8E5sVh7PA
+E5HBouNpfnS2d2t/by100fCBOuL/OzqMyZ9dkwet5hICQQGfBHTLkoc=
+-----END AGE ENCRYPTED FILE-----
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 4a383b0..929b0b8 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -5,4 +5,5 @@ in
 {
   "forgejo-runner-token.age".publicKeys = [ main chaewon ];
   "readeck-secret-key.age".publicKeys = [ main chaewon ];
+  "paperless-password.age".publicKeys = [ main chaewon ];
 }