From 143f1dafacacba93b81240b36d1a427b35860d22 Mon Sep 17 00:00:00 2001
From: Will Holdsworth <me@fi33.buzz>
Date: Mon, 2 Mar 2026 21:46:01 +1100
Subject: [PATCH] feat(send): install

---
 modules/nixos/bundles/server.nix |  1 +
 modules/nixos/features/send.nix  | 28 ++++++++++++++++++++++++++++
 2 files changed, 29 insertions(+)
 create mode 100644 modules/nixos/features/send.nix

diff --git a/modules/nixos/bundles/server.nix b/modules/nixos/bundles/server.nix
index 2795aca..2d34890 100644
--- a/modules/nixos/bundles/server.nix
+++ b/modules/nixos/bundles/server.nix
@@ -23,6 +23,7 @@
     "radarr"
     "radicale"
     "readarr"
+    "send"
     "sonarr"
     "vaultwarden"
     # keep-sorted end
diff --git a/modules/nixos/features/send.nix b/modules/nixos/features/send.nix
new file mode 100644
index 0000000..defb025
--- /dev/null
+++ b/modules/nixos/features/send.nix
@@ -0,0 +1,28 @@
+let
+  port = 5020;
+  certloc = "/var/lib/acme/fi33.buzz";
+in
+{
+  services = {
+    send = {
+      enable = true;
+      inherit port;
+      baseUrl = "https://send.fi33.buzz";
+      environment = {
+        DEFAULT_EXPIRE_SECONDS = 360;
+        EXPIRE_TIMES_SECONDS = "360";
+        DOWNLOAD_COUNTS = "1";
+        MAX_DOWNLOADS = 1;
+        MAX_EXPIRE_SECONDS = 1024;
+        MAX_FILE_SIZE = 134217728;
+      };
+    };
+
+    caddy.virtualHosts."send.fi33.buzz".extraConfig = ''
+      reverse_proxy localhost:${toString port}
+      tls ${certloc}/cert.pem ${certloc}/key.pem {
+        protocols tls1.3
+      }
+    '';
+  };
+}