setup mealie

hosts/freun-dev/secrets.nix

@@ -12,6 +12,7 @@
         "donetick"
         "dnote"
         "octodns"
+        "mealie"
       ]
     ) // {
     smtp-password = {

hosts/freun-dev/services.nix

@@ -176,5 +176,17 @@ in
       subdomain = "dns";
       port = 3006;
     };
+
+    mealie = {
+      enable = true;
+      subdomain = "cook";
+      credentialsFile = secrets.mealie.path;
+      settings = {
+        SMTP_HOST = smtp.host;
+        SMTP_FROM_EMAIL = smtp.from;
+        SMTP_USER = smtp.username;
+        SMTP_PORT = smtp.port;
+      };
+    };
   };
 }

modules/services/default.nix

@@ -19,5 +19,6 @@
     ./dnote.nix
     ./octodns.nix
     ./adguardhome.nix
+    ./mealie.nix
   ];
 }

modules/services/mealie.nix

@@ -0,0 +1,35 @@
+{ lib, config, ... }:
+let
+  cfg = config.services.mealie;
+  fqdn = "${cfg.subdomain}.${config.networking.domain}";
+in
+{
+  options.services.mealie = {
+    subdomain = lib.mkOption {
+      type = lib.types.str;
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    services = {
+      mealie.settings = {
+        BASE_URL = "https://${fqdn}";
+        ALLOW_SIGNUP = true;
+        DB_ENGINE = "postgres";
+        POSTGRES_URL_OVERRIDE = "postgresql://mealie:@mealie?host=/var/run/postgresql";
+        SMTP_FROM_NAME = "Mealie";
+      };
+
+      webserver.vHosts.${fqdn}.locations."/".proxyPort = cfg.port;
+
+      postgresql = {
+        enable = lib.mkDefault true;
+        ensureDatabases = [ "mealie" ];
+        ensureUsers = [{
+          name = "mealie";
+          ensureDBOwnership = true;
+        }];
+      };
+    };
+  };
+}

secrets/mealie.age

@@ -0,0 +1,10 @@
+age-encryption.org/v1
+-> ssh-ed25519 osOCZA aSrfC3yY3hUP30pc7bxAeOQsI+oY5TlWLn5fRTEi0ns
+1HWv0ZLTvzxP9+dE4Kvn2uCeqV9GF9isURPaVtVxelI
+-> ssh-ed25519 DFiohQ BuD0HhnHWUVrykPxwJZ1kPMAUEEbcxQxs0rKTsiR8nE
+nCT+Dh7rTh6EP5c/cBmE9DEFbl2oU3m0TPQv8jZKwuc
+-> ssh-ed25519 PT7ffg pAoyCa+x5wME4MrcI4fLsdy7t8DdzxtViM3b1UJyjQA
+ei7ZxGgqqa3mk5ZBrMFBPHN8Gvk5j1IxWuirX2mYGAI
+--- K2ECMTGRrhkYrsBkcO7z+gl3tdsGLUwtj4QjZ4zdkUc
+MfóîÔ}|¢F<C2A2>ýÌ"ï<€áÂ'j]ÓzI–¼n÷Cí¸½¸ÏpàíÔ_ÜC„Nnžåbt´"21’4‡Waù·¬Móq5O-ãcüè˜æï,<2C>=~yÌs?Ûö6ωª8x-“Äh¥nqf)¸¥=O@8˜N,û"arÓñ8‘‡íÉ=–þ“	o
+ªÐ%ôB(¦-

secrets/secrets.nix

@@ -20,4 +20,5 @@ in
   "donetick.age".publicKeys = users ++ [ freun-dev ];
   "dnote.age".publicKeys = users ++ [ freun-dev ];
   "octodns.age".publicKeys = users ++ [ freun-dev ];
+  "mealie.age".publicKeys = users ++ [ freun-dev ];
 }