From a6eb2065501f1fd4e6a846fa10fe8c7ef8440f82 Mon Sep 17 00:00:00 2001
From: Lucas Sta Maria <lucas@priime.dev>
Date: Fri, 29 Aug 2025 23:28:23 +0800
Subject: [PATCH] fix(nix): configure freshrss

---
 nix/hosts/chaewon/nw.nix      |  8 ++++++++
 nix/hosts/chaewon/sys.nix     | 11 +++++++++++
 nix/modules/secrets.nix       |  1 +
 secrets/freshrss-password.age | 11 +++++++++++
 secrets/secrets.nix           |  1 +
 5 files changed, 32 insertions(+)
 create mode 100644 secrets/freshrss-password.age

diff --git a/nix/hosts/chaewon/nw.nix b/nix/hosts/chaewon/nw.nix
index 2348b25..6b363f8 100644
--- a/nix/hosts/chaewon/nw.nix
+++ b/nix/hosts/chaewon/nw.nix
@@ -106,6 +106,14 @@
         '';
         locations."/".proxyPass = "http://localhost:3000";
       };
+      "localhost:8040" = {
+        listen = [
+          {
+            addr = "0.0.0.0";
+            port = 8040;
+          }
+        ];
+      };
     };
   };
 }
diff --git a/nix/hosts/chaewon/sys.nix b/nix/hosts/chaewon/sys.nix
index f30389f..54f9fd7 100644
--- a/nix/hosts/chaewon/sys.nix
+++ b/nix/hosts/chaewon/sys.nix
@@ -96,6 +96,17 @@
     passwordFile = config.age.secrets.paperless-password.path;
   };
 
+  services.freshrss = {
+    enable = true;
+    baseUrl = "http://localhost:8040";
+    virtualHost = "localhost:8040";
+    defaultUser = "admin";
+    passwordFile = config.age.secrets.freshrss-password.path;
+    database.type = "sqlite";
+    webserver = "nginx";
+    authType = "none";
+  };
+
   system.stateVersion = "23.11";
   home-manager.users.priime = { pkgs, ... }: { imports = [ ./home.nix ]; };
 }
diff --git a/nix/modules/secrets.nix b/nix/modules/secrets.nix
index c7ec697..9a3f6e1 100644
--- a/nix/modules/secrets.nix
+++ b/nix/modules/secrets.nix
@@ -4,5 +4,6 @@
     forgejo-runner-token.file = ../../secrets/forgejo-runner-token.age;
     readeck-secret-key.file = ../../secrets/readeck-secret-key.age;
     paperless-password.file = ../../secrets/paperless-password.age;
+    freshrss-password.file = ../../secrets/freshrss-password.age;
   };
 }
diff --git a/secrets/freshrss-password.age b/secrets/freshrss-password.age
new file mode 100644
index 0000000..1096b4b
--- /dev/null
+++ b/secrets/freshrss-password.age
@@ -0,0 +1,11 @@
+-----BEGIN AGE ENCRYPTED FILE-----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+-----END AGE ENCRYPTED FILE-----
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 929b0b8..50d0d2f 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -6,4 +6,5 @@ in
   "forgejo-runner-token.age".publicKeys = [ main chaewon ];
   "readeck-secret-key.age".publicKeys = [ main chaewon ];
   "paperless-password.age".publicKeys = [ main chaewon ];
+  "freshrss-password.age".publicKeys = [ main chaewon ];
 }