From 49eba2202ce98052c8c2a480a57c8301d93452d8 Mon Sep 17 00:00:00 2001
From: Payas Relekar <payas@relekar.org>
Date: Fri, 7 Jul 2023 21:13:41 +0530
Subject: [PATCH] Add photoprism

---
 flake.nix                           |   1 +
 hosts/hermes/secrets/photoprism.age | Bin 0 -> 415 bytes
 hosts/hermes/secrets/secrets.nix    |   1 +
 modules/photoprism.nix              |  45 ++++++++++++++++++++++++++++
 4 files changed, 47 insertions(+)
 create mode 100644 hosts/hermes/secrets/photoprism.age
 create mode 100644 modules/photoprism.nix

diff --git a/flake.nix b/flake.nix
index cfad935..0307480 100644
--- a/flake.nix
+++ b/flake.nix
@@ -88,6 +88,7 @@
             ./modules/vaultwarden.nix
             ./modules/hledger.nix
             ./modules/etesync.nix
+            ./modules/photoprism.nix
 
             # Host-specific config
             nixos-hardware.nixosModules.raspberry-pi-4
diff --git a/hosts/hermes/secrets/photoprism.age b/hosts/hermes/secrets/photoprism.age
new file mode 100644
index 0000000000000000000000000000000000000000..98297a062c237a4e91c7354c1e401bdf040f68b1
GIT binary patch
literal 415
zcmV;Q0bu@NXJsvAZewzJaCB*JZZ2<fXD@a!3N1b$b8~1dWn?lnH8D9LWO+A4Id>pb
zb#rkyadJUnQ%YuNa8yccH#9XyD?xNvWmRZ5IaxwjVMa`4MpSHcXm<)YX-8sfWK}C^
zV|8U%D{EqJb8LD}OK^F0a6(!{K`~A-c35U+XLM3|V`B;}J|HD0bZA90Q7vb3Wnpt=
zAS_#Cbx{goFm!2UVMa!JS5s6;aYr(4Oma42G-*&pQ#UV9Lr+<AK~h#SO*1e^Pi#?A
zWovY5cw=W*Vo`ZdO-x5cGD<NDQ#WHVW?6bON=SHUIW<s0Npw_IWN|ZgMOAB3Wod18
zaX~gvL{@KRNi|7tH)BaeNkn#faWqkDFJm=CD^Ut9EiE8(S9eQtIc8N$bb59{MtE&6
zNl9vPb6QqJSZi8uS!OVJRyKMvVna1UQEv(#CiPU_&>YKudJcUTk^_o}*DJ5+jk~IS
zjhvg5<Xth$^lf<2_juEW1+1KE9<8$F0$0Rv0G~x#cJzutl~(DoEif@Zsab9JyW5xh
J@J(w{WzHfOm-7Gs

literal 0
HcmV?d00001

diff --git a/hosts/hermes/secrets/secrets.nix b/hosts/hermes/secrets/secrets.nix
index a3b5ae2..0885163 100644
--- a/hosts/hermes/secrets/secrets.nix
+++ b/hosts/hermes/secrets/secrets.nix
@@ -19,4 +19,5 @@ in
   "gandalf_mail.age".publicKeys = [ ageKey ];
   "nginx.age".publicKeys = [ ageKey ];
   "etebase.age".publicKeys = [ ageKey ];
+  "photoprism.age".publicKeys = [ ageKey ];
 }
diff --git a/modules/photoprism.nix b/modules/photoprism.nix
new file mode 100644
index 0000000..50a1d70
--- /dev/null
+++ b/modules/photoprism.nix
@@ -0,0 +1,45 @@
+{ ... }:
+{
+  systemd.tmpfiles.rules = [
+    "f /run/agenix/photoprism 0770 photoprism photoprism -"
+  ];
+
+  services = {
+    photoprism = {
+      enable = true;
+      port = 2342;
+      address = "photo.bhankas.org";
+      passwordFile = "/run/agenix/photoprism";
+      settings = {
+        PHOTOPRISM_ADMIN_USER = "root";
+      };
+    };
+
+    nginx = {
+      enable = true;
+      virtualHosts = {
+        "photo.bhankas.org" = {
+          addSSL = true;
+          enableACME = true;
+          locations."/" = {
+            proxyPass = "http://127.0.0.1:2342";
+            proxyWebsockets = false;
+            extraConfig =
+              "proxy_set_header Host $host;\n"
+            ;
+          };
+        };
+      };
+    };
+  };
+
+  security.acme = {
+    acceptTerms = true;
+    certs = {
+      "photo.bhankas.org" = {
+        email = "admin@bhankas.org";
+        dnsResolver = "1.1.1.1:53";
+      };
+    };
+  };
+}