add miniflux

hosts/hopper/profiles/lab/caddy.nix

@@ -43,6 +43,7 @@ in {
       navidrome = mkPublicEntry "navidrome" "${bridge}:${toString config.services.navidrome.settings.Port}";
       vaultwarden = mkPublicEntry "vw" "${bridge}:${toString config.services.vaultwarden.config.ROCKET_PORT}";
       abs = mkPublicEntry "abs" "${bridge}:${toString config.services.audiobookshelf.port}";
+      miniflux = mkPublicEntry "rss" "${bridge}:18632";
 
       navidrome2 = mkPrivateEntry "navidrome" "${bridge}:${toString config.services.navidrome.settings.Port}";
       slskd = mkPrivateEntry "slskd" "localhost:${toString config.services.slskd.settings.web.port}";

hosts/hopper/profiles/lab/default.nix

@@ -9,6 +9,7 @@
     ./glances.nix
     ./homepage.nix
     ./minecraft.nix
+    ./miniflux.nix
     ./navidrome
     ./prometheus.nix
     ./restic.nix

hosts/hopper/profiles/lab/homepage.nix

@@ -79,6 +79,12 @@ in {
               icon = "vaultwarden";
             };
           }
+          {
+            "miniflux" = {
+              href = "https://rss.${domain}";
+              icon = "miniflux";
+            };
+          }
         ];
       }
     ];

hosts/hopper/profiles/lab/miniflux.nix

@@ -0,0 +1,14 @@
+{
+  vars,
+  config,
+  ...
+}: {
+  services.miniflux = {
+    enable = true;
+    adminCredentialsFile = config.sops.secrets.miniflux.path;
+    config = {
+      BASE_URL = "https://miniflux.${vars.domain}";
+      LISTEN_ADDR = "${config.vpnNamespaces."wg".bridgeAddress}:18632";
+    };
+  };
+}

hosts/hopper/profiles/lab/vpn-namespace.nix

@@ -11,6 +11,7 @@
       config.services.audiobookshelf.port
       config.services.navidrome.settings.Port
       config.services.glances.port
+      18632
     ];
   in {
     extraCommands = builtins.concatStringsSep "\n" (map

hosts/hopper/profiles/persistent.nix

@@ -8,6 +8,7 @@
       "/var/log"
       "/var/lib/nixos"
       "/var/lib/bluetooth"
+      "/var/lib/postgresql"
     ];
     files = [
       "/etc/machine-id"