init miniflux

Signed-off-by: Hadi <[email protected]>
2026-10-05 11:18:24 +02:00 · 2026-09-20 12:34:40 +02:00
parent 326dca4b51
commit e4a8a48b41
3 changed files with 47 additions and 2 deletions
@@ -0,0 +1,43 @@
+{
+  config,
+  lib,
+  ...
+}: let
+  inherit (import ./mk-container.nix {inherit lib config;}) mkContainer;
+  domain = config.var.domain;
+in {
+  imports = [
+    (mkContainer {
+      name = "miniflux";
+      hostIp = "10.233.8.1";
+      containerIp = "10.233.8.2";
+      internet = true;
+      bindMounts = {
+        "/run/secrets/miniflux-admin-credentials" = {
+          hostPath = config.sops.secrets.miniflux-admin-credentials.path;
+          isReadOnly = true;
+        };
+      };
+      nixosConfig = {...}: {
+        services.miniflux = {
+          enable = true;
+          createDatabaseLocally = true;
+          config = {
+            LISTEN_ADDR = "0.0.0.0:8080";
+            BASE_URL = "https://miniflux.${domain}";
+          };
+          adminCredentialsFile = "/run/secrets/miniflux-admin-credentials";
+        };
+        networking.firewall.allowedTCPPorts = [8080];
+        system.stateVersion = "24.05";
+      };
+    })
+  ];
+
+  sops.secrets.miniflux-admin-credentials = {
+    owner = "root";
+    mode = "0400";
+  };
+
+  services.cloudflared.tunnels."${config.var.tunnelId}".ingress."miniflux.${domain}" = "http://10.233.8.2:8080";
+}