97 lines
2.9 KiB
Nix
97 lines
2.9 KiB
Nix
{ custom, domain }: { config, ... }:
|
|
let
|
|
ttrssEnvironment = {
|
|
TZ = "Europe/Zurich";
|
|
TTRSS_DB_USER = "ttrss";
|
|
TTRSS_DB_NAME = "ttrssdb";
|
|
TTRSS_DB_HOST = "host.docker.internal";
|
|
TTRSS_SELF_URL_PATH = "https://${domain}/tt-rss";
|
|
TTRSS_SESSION_COOKIE_LIFETIME = "604800";
|
|
TTRSS_PLUGINS = "af_comics, af_readability, auth_internal, hotkeys_swap_jk, nginx_xaccel";
|
|
};
|
|
ttrssService = "${config.virtualisation.oci-containers.backend}-ttrss";
|
|
backupService = "${config.virtualisation.oci-containers.backend}-backup";
|
|
updaterService = "${config.virtualisation.oci-containers.backend}-updater";
|
|
in
|
|
{
|
|
imports = [
|
|
(import "${custom.inputs.self}/modules/nginx-fpm" {
|
|
dataDir = "/var/lib/ttrss/html";
|
|
inherit custom domain;
|
|
})
|
|
"${custom.inputs.self}/modules/postgresql"
|
|
];
|
|
age.secrets.ttrssEnv.file = "${custom.inputs.self}/scrts/ttrss_env.age";
|
|
|
|
services.postgresql = {
|
|
authentication = "host ttrssdb ttrss 172.16.0.0/12 scram-sha-256";
|
|
ensureDatabases = [ "ttrssdb" ];
|
|
ensureUsers = [{
|
|
name = "ttrss";
|
|
ensurePermissions = {
|
|
"DATABASE ttrssdb " = "ALL PRIVILEGES";
|
|
};
|
|
}];
|
|
};
|
|
|
|
virtualisation.oci-containers = {
|
|
backend = "docker";
|
|
containers."ttrss" = {
|
|
image = "ghcr.io/nebucatnetzer/tt-rss-aarch64/ttrss-fpm-pgsql-static";
|
|
autoStart = true;
|
|
environment = ttrssEnvironment;
|
|
environmentFiles = [ config.age.secrets.ttrssEnv.path ];
|
|
ports = [
|
|
"9000:9000"
|
|
];
|
|
volumes = [
|
|
"/var/lib/ttrss/html:/var/www/html"
|
|
];
|
|
extraOptions = [ "--add-host=host.docker.internal:host-gateway" ];
|
|
};
|
|
containers."backup" = {
|
|
image = "ghcr.io/nebucatnetzer/tt-rss-aarch64/ttrss-fpm-pgsql-static";
|
|
autoStart = true;
|
|
environment = ttrssEnvironment;
|
|
environmentFiles = [ config.age.secrets.ttrssEnv.path ];
|
|
volumes = [
|
|
"/var/lib/ttrss/html:/var/www/html"
|
|
"/var/lib/ttrss/backup:/backup"
|
|
];
|
|
cmd = [ "/opt/tt-rss/dcron.sh" "-f" ];
|
|
extraOptions = [ "--add-host=host.docker.internal:host-gateway" ];
|
|
};
|
|
containers."updater" = {
|
|
image = "ghcr.io/nebucatnetzer/tt-rss-aarch64/ttrss-fpm-pgsql-static";
|
|
autoStart = true;
|
|
environment = ttrssEnvironment;
|
|
environmentFiles = [ config.age.secrets.ttrssEnv.path ];
|
|
volumes = [
|
|
"/var/lib/ttrss/html:/var/www/html"
|
|
];
|
|
cmd = [ "/opt/tt-rss/updater.sh" ];
|
|
dependsOn = [ "ttrss" ];
|
|
extraOptions = [ "--add-host=host.docker.internal:host-gateway" ];
|
|
};
|
|
};
|
|
|
|
services.nginx.virtualHosts."${domain}".locations = {
|
|
"/".extraConfig = ''
|
|
try_files $uri $uri/ = 404;
|
|
'';
|
|
"/tt-rss/cache".extraConfig = ''
|
|
aio threads;
|
|
internal;
|
|
'';
|
|
"/tt-rss/backups".extraConfig = ''
|
|
internal;
|
|
'';
|
|
};
|
|
systemd.services.${ttrssService}.after = [ "nginx.service" ];
|
|
systemd.services.postgresql.after = [ "${ttrssService}.service" ];
|
|
}
|
|
|
|
|
|
|
|
|