add hledger

hosts/freun-dev/secrets.nix

@@ -41,5 +41,9 @@
         file = ../../secrets/hastebin-tokens.age;
         owner = if (config.services.hastebin.enable) then config.users.users.hastebin.name else "root";
       };
+      hledger-basic-auth = {
+        file = ../../secrets/hledger-basic-auth.age;
+        owner = if (config.services.hledger-web.enable) then "nginx" else "root";
+      };
     };
 }

hosts/freun-dev/services.nix

@@ -375,5 +375,17 @@ in
       enable = true;
       subdomain = "irc";
     };
+
+    hledger-web = {
+      enable = true;
+      subdomain = "ledger";
+      stateDir = "${syncthingDataDir}/ledger";
+      basicAuthFile = secrets.hledger-basic-auth.path;
+      user = config.systemd.services.syncthing.serviceConfig.User;
+      group = config.systemd.services.syncthing.serviceConfig.Group;
+      journalFiles = [
+        "main.ldg"
+      ];
+    };
   };
 }