NixOS-Config/nixos/server/package-configs/writefreely/default.nix

{
  config,
  pkgs,
  ...
}: {
  sops.secrets."writefreely".mode = "0440";
  sops.secrets."writefreely".owner = config.users.users.writefreely.name;
  sops.secrets."writefreelymysql".mode = "0440";
  sops.secrets."writefreelymysql".owner = config.users.users.writefreely.name;
  services.writefreely = {
    enable = true;
    host = "writefreely.gladtherescake.eu";
    nginx.enable = true;
    nginx.forceSSL = true;
    acme.enable = true;
    database = {
      type = "mysql";
      createLocally = true;
      passwordFile = config.sops.secrets."writefreelymysql".path;
    };
    admin = {
      initialPasswordFile = config.sops.secrets."writefreely".path;
      name = "GLaDTheresCake";
    };
    settings = {
      server.port = 15763;
    };
  };
}