Committing to save progress, will revert in next commit

host/configuration.nix

@@ -12,6 +12,7 @@
     ./../nixosModules/nextcloud.nix
     ./../nixosModules/wakapi.nix
     ./../nixosModules/eko.nix
+    ./../nixosModules/wallabag.nix
   ];
 
   boot.loader.grub = {
@@ -54,6 +55,7 @@
   nextcloud.enable = false;
   wakapi.enable = true;
   eko.enable = true;
+  wallabag.enable = true;
 
   # Automatically pull this config from git
   autoUpdate.enable = true;

nixosModules/actual-budget.nix

@@ -19,6 +19,7 @@
     # Make sure acme module is active for the "kyren.codes" ssl cert
     acme.enable = true;
 
+    services.nginx.enable = true;
     services.nginx.virtualHosts."budget.kyren.codes" = {
       useACMEHost = "kyren.codes";
       forceSSL = true;

nixosModules/eko.nix

@@ -16,7 +16,10 @@
       ];
     };
 
-    # Make sure the "eko" user has access to /srv/eko
+    environment.sessionVariables = rec {
+      WALLABAG_DATA = "$HOME/wallabag";
+    };
+
     systemd.tmpfiles.rules = [
       "d /srv/eko 0750 eko eko"
     ];

nixosModules/gitea.nix

@@ -15,6 +15,7 @@
     # Make sure acme module is active for the "kyren.codes" ssl cert
     acme.enable = true;
 
+    services.nginx.enable = true;
     services.nginx.virtualHosts."git.kyren.codes" = {
       useACMEHost = "kyren.codes";
       forceSSL = true;

nixosModules/nextcloud.nix

@@ -19,6 +19,7 @@
     # Make sure acme module is active for the "kyren.codes" ssl cert
     acme.enable = true;
 
+    services.nginx.enable = true;
     services.nginx.virtualHosts.${config.services.nextcloud.hostName} = {
       forceSSL = true;
       useACMEHost = "kyren.codes";

nixosModules/wallabag.nix

@@ -0,0 +1,19 @@
+{ pkgs, lib, config, ... }: {
+
+  options = {
+    wallabag.enable = lib.mkEnableOption "enables wallabag";
+  };
+
+  config = lib.mkIf config.wallabag.enable {
+    users.groups.wallabag = { };
+    users.users.wallabag = {
+      createHome = false;
+      isNormalUser = true;
+      group = "wallabag";
+      openssh.authorizedKeys.keys = [
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIO7P9K9D5RkBk+JCRRS6AtHuTAc6cRpXfRfRMg/Kyren"
+      ];
+    };
+
+  };
+}