refactor

nixos/viridian/services/default.nix

@@ -1,15 +0,0 @@
-{...}: {
-  imports = [
-    ./traefik
-    ./crowdsec
-    ./minecraft
-    ./borgbackup.nix
-    ./forgejo.nix
-    ./lighttpd.nix
-    ./mpd.nix
-    ./samba.nix
-    ./grafana.nix
-    ./mysql.nix
-    ./prometheus.nix
-  ];
-}

nixos/viridian/services/paperless-ngx/default.nix

@@ -0,0 +1,37 @@
+{config, ...}: let
+  dir = "/srv/services/paperless-ngx";
+in {
+  age.secrets.paperless-ngx = {
+    rekeyFile = ./password.age;
+  };
+
+  services.paperless = {
+    enable = true;
+    port = 28981;
+    dataDir = "${dir}";
+    mediaDir = "${dir}/media";
+    settings = {
+      PAPERLESS_ADMIN_USER = "sajenim";
+    };
+    passwordFile = config.age.secrets.paperless-ngx.path;
+  };
+
+  services.traefik.dynamicConfigOptions.http.routers = {
+    paperless-ngx = {
+      rule = "Host(`docs.kanto.dev`)";
+      entryPoints = [
+        "websecure"
+      ];
+      middlewares = [
+        "internal"
+      ];
+      service = "paperless-ngx";
+    };
+  };
+
+  services.traefik.dynamicConfigOptions.http.services = {
+    paperless-ngx.loadBalancer.servers = [
+      {url = "http://127.0.0.1:${toString config.services.paperless.port}";}
+    ];
+  };
+}

nixos/viridian/services/paperless-ngx/password.age

@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> piv-p256 hdSnGw A4P0oT5qK/bG8ieEixFW/SCouhantxg3dSjiGG1MEuns
+cDorIZ44RmsUsiiybnr1y8WZtv/3kFPi86QkpGURqTY
+-> FNP4c-grease
+LThbpY1sc7XzQgputWt3ULuLwemBilYrOEZMTAj+/xkxyQg5HwSIhBS1XYzvMc2K
+ld/o3JfDaXVLEz0Vk59TClXeOGITp7Ki
+--- 572BrDug9qmAG7G0mC5bOZ/h1UD4y2m1ceDhy1qQh3U
+/›¬vØ‘k)Ùë­h’Œ ˆ™æûËÇx^QyAeK}låÆg~¯k> l*p