initial commit

modules/nixos/rss-bridge/default.nix

@@ -0,0 +1,40 @@
+{ config, lib, ... }:
+
+let
+  cfg = config.services.rss-bridge;
+  domain = config.networking.domain;
+  subdomain = cfg.reverseProxy.subdomain;
+  fqdn = if (cfg.reverseProxy.enable && subdomain != "") then "${subdomain}.${domain}" else domain;
+
+  inherit (lib)
+    mkIf
+    ;
+
+  inherit (lib.utils)
+    mkReverseProxyOption
+    mkVirtualHost
+    ;
+in
+{
+  options.services.rss-bridge = {
+    reverseProxy = mkReverseProxyOption "RSS-Bridge" "rss-bridge";
+  };
+
+  config = mkIf cfg.enable {
+    services.rss-bridge = {
+      webserver = if cfg.reverseProxy.enable then "nginx" else null;
+      virtualHost = if cfg.reverseProxy.enable then fqdn else null;
+      config = {
+        system.enabled_bridges = [ "*" ];
+      };
+    };
+
+    systemd.tmpfiles.rules = [ "d ${cfg.dataDir} 0755 ${cfg.user} ${cfg.group} -" ];
+
+    services.nginx.virtualHosts = mkIf cfg.reverseProxy.enable {
+      "${cfg.virtualHost}" = mkVirtualHost {
+        ssl = cfg.reverseProxy.forceSSL;
+      };
+    };
+  };
+}