dots/modules/nixos/features/karakeep.nix
2026-01-17 16:57:51 +11:00

29 lines
578 B
Nix

let
port = 5014;
certloc = "/var/lib/acme/fi33.buzz";
in
{
services = {
karakeep = {
enable = true;
extraEnvironment = {
PORT = toString port;
DISABLE_NEW_RELEASE_CHECK = "true";
};
};
borgmatic.settings.sqlite_databases = [
{
name = "karakeep";
path = "/var/lib/karakeep/db.db";
}
];
caddy.virtualHosts."karakeep.fi33.buzz".extraConfig = ''
reverse_proxy localhost:${toString port}
tls ${certloc}/cert.pem ${certloc}/key.pem {
protocols tls1.3
}
'';
};
}