rebmit/nixos-config
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

services/miniflux: init

Browse source
This commit is contained in:
Lu Wang 2024-12-17 16:32:59 +08:00
parent acc70f889e
commit 9ac31f00fa
Signed by: rebmit
SSH key fingerprint: SHA256:3px8QV1zEerIrEWHaqtH5rR9kjetyRST5EipOPrd+bU
4 changed files with 26 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
nixos/hosts/suwako-vie0/default.nix
View file

@ -10,6 +10,7 @@
++ (with profiles; [
services.caddy
services.keycloak
services.miniflux
services.ntfy
services.postgresql
])

1
nixos/modules/networking/ports.nix
View file

@ -18,6 +18,7 @@ in
enthalpy-gost = 3000;
ntfy = 4000;
keycloak = 4010;
miniflux = 4020;
# public ports
enthalpy-ipsec = 13000;

23
nixos/profiles/services/miniflux/default.nix Normal file
View file

@ -0,0 +1,23 @@
{ config, ... }:
{
services.miniflux = {
enable = true;
config = rec {
BASE_URL = "https://miniflux.rebmit.moe";
LISTEN_ADDR = "127.0.0.1:${toString config.networking.ports.miniflux}";
CREATE_ADMIN = 0;
OAUTH2_PROVIDER = "oidc";
OAUTH2_CLIENT_ID = "miniflux";
OAUTH2_REDIRECT_URL = "${BASE_URL}/oauth2/oidc/callback";
OAUTH2_OIDC_PROVIDER_NAME = "keycloak.rebmit.moe";
OAUTH2_OIDC_DISCOVERY_ENDPOINT = "https://keycloak.rebmit.moe/realms/rebmit";
OAUTH2_USER_CREATION = 1;
};
};
services.caddy.virtualHosts."miniflux.rebmit.moe" = {
extraConfig = ''
reverse_proxy ${config.services.miniflux.config.LISTEN_ADDR}
'';
};
}

1
zones/rebmit.moe.nix
View file

@ -23,6 +23,7 @@ dns.lib.toString "rebmit.moe" {
subdomains = {
keycloak.CNAME = [ "suwako-vie0.rebmit.link." ];
matrix.CNAME = [ "suwako-vie0.rebmit.link." ];
miniflux.CNAME = [ "suwako-vie0.rebmit.link." ];
ntfy.CNAME = [ "suwako-vie0.rebmit.link." ];
};
}