fix(nix): configure freshrss

nix/hosts/chaewon/nw.nix

@@ -106,6 +106,14 @@
         '';
         locations."/".proxyPass = "http://localhost:3000";
       };
+      "localhost:8040" = {
+        listen = [
+          {
+            addr = "0.0.0.0";
+            port = 8040;
+          }
+        ];
+      };
     };
   };
 }

nix/hosts/chaewon/sys.nix

@@ -96,6 +96,17 @@
     passwordFile = config.age.secrets.paperless-password.path;
   };
 
+  services.freshrss = {
+    enable = true;
+    baseUrl = "http://localhost:8040";
+    virtualHost = "localhost:8040";
+    defaultUser = "admin";
+    passwordFile = config.age.secrets.freshrss-password.path;
+    database.type = "sqlite";
+    webserver = "nginx";
+    authType = "none";
+  };
+
   system.stateVersion = "23.11";
   home-manager.users.priime = { pkgs, ... }: { imports = [ ./home.nix ]; };
 }

nix/modules/secrets.nix

@@ -4,5 +4,6 @@
     forgejo-runner-token.file = ../../secrets/forgejo-runner-token.age;
     readeck-secret-key.file = ../../secrets/readeck-secret-key.age;
     paperless-password.file = ../../secrets/paperless-password.age;
+    freshrss-password.file = ../../secrets/freshrss-password.age;
   };
 }

secrets/freshrss-password.age

@@ -0,0 +1,11 @@
+-----BEGIN AGE ENCRYPTED FILE-----
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IEIrN21jdyBwZm1K
+TlhxUkVyMWJaLytRWEdmVVo3bVUvZHZlSllaZktLMlJnbVpub1ZVCjdSOE83cktE
+ZHRhT2U3cjNIY3RVUlJPZFpxeVJzLzdaQzdPTU5qUG9RUEkKLT4gc3NoLWVkMjU1
+MTkgN045S1hnIFNwUW56dVFJMEMyZ3NZVTNtNmVwNGpTRkoybGlZU1FOVWJlb3Uw
+RTAvM1UKeHpXckFWRXR5LzZpSlU2VXdDVHVoMUp2cTJ2cTRnaXdLQXFrZlo3THhO
+dwotPiBwdD5LdEktZ3JlYXNlIGNTV14gKF4kZwovSXJ4d2pkbjZDWmFnVjlIcWVu
+dFdlYkNvNjZRVjE2STVLMVIxaXNxT0EKLS0tIGpEbFQ0dXZOY2UwdjZvRnZGd3Bu
+VWpaRWQzN29Says5MlFxS1FmSm9wQm8K020A6tJrnOw1BhUdTELLCtY0DvvOUqnu
+vhir8ojUzN35a9hejeoLYWXRMWI0S9Nssg5r5A==
+-----END AGE ENCRYPTED FILE-----

secrets/secrets.nix

@@ -6,4 +6,5 @@ in
   "forgejo-runner-token.age".publicKeys = [ main chaewon ];
   "readeck-secret-key.age".publicKeys = [ main chaewon ];
   "paperless-password.age".publicKeys = [ main chaewon ];
+  "freshrss-password.age".publicKeys = [ main chaewon ];
 }