constants.nix

@@ -21,6 +21,10 @@ rec {
       fqdn = "git." + domain;
       port = 3456;
     };
+    jirafeau = rec {
+      subdomain = "f";
+      fqdn = subdomain + "." + domain;
+    };
     miniflux = {
       fqdn = "rss." + domain;
       port = 8085;

flake.lock

@@ -2519,11 +2519,11 @@
         "stylix": "stylix_3"
       },
       "locked": {
-        "lastModified": 1777741303,
-        "narHash": "sha256-zSzzDpJdKhzQbShaAJ+J97kllAQ4nttFr4VMoln2LJo=",
+        "lastModified": 1777750263,
+        "narHash": "sha256-3c085GHJBwd/t9bA7V0vGzh7PQDOeGHn3TgtURs2K7k=",
         "ref": "release-25.11",
-        "rev": "e801c318a76d147e167ec97342d4d86b302681b8",
-        "revCount": 35,
+        "rev": "a0a39253f4cea70bf7e22da5e5644df9707dfb95",
+        "revCount": 46,
         "type": "git",
         "url": "https://git.sid.ovh/sid/synix.git"
       },

hosts/rx4/services/default.nix

@@ -12,6 +12,7 @@
     outputs.nixosModules.tailscale
 
     ./forgejo.nix
+    ./jirafeau.nix
     ./miniflux.nix
     ./netdata.nix
     ./nginx.nix

hosts/rx4/services/jirafeau.nix

@@ -0,0 +1,20 @@
+{
+  inputs,
+  constants,
+  pkgs,
+  ...
+}:
+
+{
+  imports = [ inputs.synix.nixosModules.jirafeau ];
+
+  services.jirafeau = {
+    enable = true;
+    package = pkgs.synix.jirafeau;
+    reverseProxy = {
+      enable = true;
+      subdomain = constants.services.jirafeau.subdomain;
+      forceSSL = false;
+    };
+  };
+}

hosts/sid/services/nginx.nix

@@ -35,6 +35,13 @@ in
       address = constants.hosts.rx4.ip;
       port = constants.services.forgejo.port;
     };
+    virtualHosts."${constants.services.jirafeau.fqdn}" = {
+      enableACME = ssl;
+      forceSSL = ssl;
+      locations."/" = {
+        proxyPass = "http://${constants.hosts.rx4.ip}";
+      };
+    };
     virtualHosts."${constants.services.miniflux.fqdn}" = mkVirtualHost {
       inherit ssl;
       address = constants.hosts.rx4.ip;