add readeck

hosts/freun.dev/secrets.nix

@@ -6,6 +6,7 @@
         "gotosocial"
         "hastebin-tokens"
         "immich"
+        "readeck"
         "storage-box-credentials"
         "vaultwarden"
       ]

hosts/freun.dev/services.nix

@@ -105,6 +105,18 @@ in
       enable = true;
       subdomain = "bin";
     };
-  };
 
+    readeck = {
+      enable = true;
+      subdomain = "read";
+      settings.email = {
+        host = smtp.host;
+        port = smtp.port;
+        username = smtp.username;
+        encryption = "starttls";
+        from = smtp.from;
+        from_noreply = smtp.from;
+      };
+    };
+  };
 }

modules/services/default.nix

@@ -14,5 +14,6 @@
     ./gotosocial.nix
     ./hastebin.nix
     ./workout-sync.nix
+    ./readeck.nix
   ];
 }

modules/services/readeck.nix

@@ -0,0 +1,38 @@
+{ lib, inputs, config, pkgs, ... }:
+let
+  cfg = config.services.readeck;
+  secrets = config.age.secrets;
+  fqdn = "${cfg.subdomain}.${config.networking.domain}";
+  pkgsUnstable = inputs.nixpkgs-unstable.legacyPackages.${pkgs.system};
+in
+{
+  imports = [
+    "${inputs.nixpkgs-unstable}/nixos/modules/services/web-apps/readeck.nix"
+  ];
+
+  options.services.readeck = {
+    subdomain = lib.mkOption {
+      type = lib.types.str;
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    services.readeck = {
+      package = pkgsUnstable.readeck;
+      environmentFile = secrets.readeck.path;
+      settings = {
+        server.port = lib.mkDefault 8090;
+      };
+    };
+
+    modules.services.webserver = {
+      enable = lib.mkDefault true;
+      vHosts.${fqdn} = {
+        proxyBuffering = false;
+        locations."/" = {
+          proxyPort = cfg.settings.server.port;
+        };
+      };
+    };
+  };
+}

secrets/secrets.nix

@@ -16,4 +16,5 @@ in
   "storage-box-credentials.age".publicKeys = users ++ [ freun-dev ];
   "vaultwarden.age".publicKeys = users ++ [ freun-dev ];
   "smtp-password.age".publicKeys = users ++ [ freun-dev ];
+  "readeck.age".publicKeys = users ++ [ freun-dev ];
 }