thrall: Enable hledger web interface

This commit is contained in:
Alexander Kobjolke 2023-04-17 00:29:44 +02:00
parent 407d1d2ad0
commit df600c917c
3 changed files with 33 additions and 5 deletions

View file

@ -38,6 +38,12 @@ in {
mailPass.file = ../../secrets/mailPass.age;
paperless-mail.file = ../../secrets/paperless-mail.age;
wireguard-thrall.file = ../../secrets/wireguard-thrall.age;
hledger-web = {
file = ../../secrets/hledger-web.htaccess.age;
mode = "440";
owner = "nginx";
group = "nginx";
};
};
# The global useDHCP flag is deprecated, therefore explicitly set to false here.
@ -228,6 +234,17 @@ in {
proxyWebsockets = true;
};
};
# hledger
"ledger.failco.de" = {
forceSSL = true;
enableACME = true;
basicAuthFile = config.age.secrets.hledger-web.path;
locations."/" = {
proxyPass = "http://127.0.0.1:3003/";
proxyWebsockets = true;
};
};
};
services.gitea = {
@ -303,7 +320,6 @@ in {
loginAccounts = {
"me@failco.de" = {
# nix-shell -p mkpasswd --run 'mkpasswd -sm sha512crypt'
# nix run github:ryantm/agenix -- -i <identity> -e password.age
hashedPasswordFile = config.age.secrets.mailPass.path;
aliases = [ "lx@failco.de" "alex@failco.de" ];