40 lines
998 B
Nix
40 lines
998 B
Nix
{ config, lib, ... }:
|
|
|
|
let
|
|
cfg = config.services.rss-bridge;
|
|
domain = config.networking.domain;
|
|
subdomain = cfg.reverseProxy.subdomain;
|
|
fqdn = if (cfg.reverseProxy.enable && subdomain != "") then "${subdomain}.${domain}" else domain;
|
|
|
|
inherit (lib)
|
|
mkIf
|
|
;
|
|
|
|
inherit (lib.utils)
|
|
mkReverseProxyOption
|
|
;
|
|
in
|
|
{
|
|
options.services.rss-bridge = {
|
|
reverseProxy = mkReverseProxyOption "RSS-Bridge" "rss-bridge";
|
|
};
|
|
|
|
config = mkIf cfg.enable {
|
|
services.rss-bridge = {
|
|
webserver = if cfg.reverseProxy.enable then "nginx" else null;
|
|
virtualHost = if cfg.reverseProxy.enable then fqdn else null;
|
|
config = {
|
|
system.enabled_bridges = [ "*" ];
|
|
};
|
|
};
|
|
|
|
systemd.tmpfiles.rules = [ "d ${cfg.dataDir} 0755 ${cfg.user} ${cfg.group} -" ];
|
|
|
|
services.nginx.virtualHosts = mkIf cfg.reverseProxy.enable {
|
|
"${fqdn}" = {
|
|
enableACME = cfg.reverseProxy.forceSSL;
|
|
forceSSL = cfg.reverseProxy.forceSSL;
|
|
};
|
|
};
|
|
};
|
|
}
|