bebop: Add and enable Kavita (book server)

flake.nix

@@ -76,7 +76,7 @@
             # Modules and module config
             ./modules/mail.nix
             ./modules/monitoring/monitoring.nix
-            # ./modules/calibre.nix
+            ./modules/books.nix
             ./modules/paperless.nix
             ./modules/outline.nix
             ./modules/plausible.nix

hosts/hermes/secrets/kavita_token_key.age

@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 dy7D9w eu5CDQVOL6jSH6U70nvjziQX4lfjVkP9F4L5+UjPzUk
+7L3SR+4nN0TYvOd3McVMAkWl1HeghPp1R7jUn0KNTgM
+-> 9B-grease 9w
+jJesiMHkj62fbPEoFNXw3wf2rBwkFrR4IkhBNAZz5a+xgo0WTQA8jHES8Km7SCAO
+EGgjPk4
+--- 6IkMv6eVmhIgCIcZOBNK6OnN9NySySgSR2QgEmxFwc0
+6b\Ä·Þb¨—òâ'~¿¨gšÒOþ"A8¶Œœ¿h§N¨¾Ãﹶ¶Í‘Tñï¶L¾xž»¬˜°´˜L¯àõ)ñ>‹{+žud

modules/books.nix

@@ -0,0 +1,36 @@
+{ ... }:
+{
+  services = {
+    kavita = {
+      enable = true;
+      dataDir = "/var/lib/books";
+      tokenKeyFile = "/run/agenix/kavita_token_key";
+      port = 5000;
+      ipAddresses = [
+        "0.0.0.0"
+        "::"
+      ];
+    };
+
+    nginx.virtualHosts = {
+      "books.bhankas.org" = {
+        addSSL = true;
+        enableACME = true;
+        locations."/" = {
+          proxyPass = "http://127.0.0.1:5000";
+          proxyWebsockets = false;
+          extraConfig =
+            "proxy_set_header Host $host;"
+          ;
+        };
+      };
+    };
+  };
+
+  security.acme.certs = {
+    "books.bhankas.org" = {
+      email = "admin@bhankas.org";
+      dnsResolver = "1.1.1.1:53";
+    };
+  };
+}