modules/nixos/bundles/server.nix

@@ -12,6 +12,7 @@
     "immich"
     "jellyfin"
     "karakeep"
+    "kavita"
     "lidarr"
     "miniflux"
     "nginx"

modules/nixos/features/kavita.nix

@@ -0,0 +1,25 @@
+{
+  config,
+  ...
+}:
+let
+  port = 5015;
+in
+{
+  services = {
+    kavita = {
+      enable = true;
+      dataDir = "/srv/kavita";
+      settings.Port = port;
+      tokenKeyFile = config.age.secrets.kavita.path;
+    };
+
+    nginx.virtualHosts."kavita.fi33.buzz" = {
+      forceSSL = true;
+      useACMEHost = "fi33.buzz";
+      locations."/".proxyPass = "http://localhost:${toString port}";
+    };
+  };
+
+  age.secrets.kavita.file = ../../../secrets/kavita.age;
+}

secrets/secrets.nix

@@ -20,6 +20,7 @@ in
   "copyparty-will.age".publicKeys = users;
   "immich.age".publicKeys = users;
   "jellyfin.age".publicKeys = users;
+  "kavita.age".publicKeys = users;
   "lidarr.age".publicKeys = users;
   "miniflux-creds.age".publicKeys = users;
   "paperless.age".publicKeys = users;