all repos — nixfiles @ 307c019a8a8845a55c9ba7126ca5567d2d3fe382

System and user configuration, managed by nix and home-manager

linde: install pocket-id

Alan Pearce
commit

307c019a8a8845a55c9ba7126ca5567d2d3fe382

parent

f7ba4f2630a6c2e54da364bd0d08f34eecd14777

3 files changed, 17 insertions(+), 0 deletions(-)

changed files
A secrets/pocket-id.age

Not showing binary file.

M secrets/secrets.nix → secrets/secrets.nix
@@ -19,6 +19,7 @@
     redis-website = [ linde ];
 
     caddy = [ linde ];
+    pocket-id = [ linde ];
     rauthy = [ linde ];
     binarycache = [ linde ];
     forgejo-actions-runner = [ linde ];
M system/hosts/linde.nix → system/hosts/linde.nix
@@ -55,6 +55,7 @@ cifs-jellyfin.file = ../../secrets/cifs-jellyfin.age;
     cifs-paperless.file = ../../secrets/cifs-paperless.age;
     forgejo-actions-runner.file = ../../secrets/forgejo-actions-runner.age;
     ntfy.file = ../../secrets/ntfy.age;
+    pocket-id.file = ../../secrets/pocket-id.age;
     rauthy.file = ../../secrets/rauthy.age;
     readeck.file = ../../secrets/readeck.age;
   };

@@ -622,6 +623,12 @@ }
             reverse_proxy 127.0.0.1:8081
           '';
         };
+        "id.alin.ovh" = {
+          extraConfig = ''
+            encode zstd gzip
+            reverse_proxy 127.0.0.1:1411
+          '';
+        };
         "iam.alin.ovh" = {
           extraConfig = ''
             encode zstd gzip

@@ -913,6 +920,15 @@ ];
 
       PAPERLESS_FILENAME_FORMAT = "{correspondent}/{created} {title} {asn}";
       PAPERLESS_FILENAME_FORMAT_REMOVE_NONE = true;
+    };
+  };
+
+  services.pocket-id = {
+    enable = true;
+    environmentFile = config.age.secrets.pocket-id.path;
+    settings = {
+      APP_URL = "https://id.alin.ovh";
+      TRUST_PROXY = true;
     };
   };