bebop: enable etesync service

flake.nix

@@ -86,6 +86,8 @@
             ./modules/wiki.nix
             ./modules/outline.nix
             ./modules/vaultwarden.nix
+            ./modules/hledger.nix
+            ./modules/etesync.nix
 
             # Host-specific config
             nixos-hardware.nixosModules.raspberry-pi-4

hosts/hermes/emacs.nix

@@ -109,5 +109,7 @@ in
     exercism
 
     godot
+
+    hledger
   ];
 }

hosts/hermes/secrets/nginx.age

@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 dy7D9w /y+iQkyo1Mw9cYtvxxkTAeQnKu4ZRSuZJEf5AEuVwUM
+uleDS7+fc4Gup8DmfzMeTpriD4uwV/uUaLAnv2yk5Gs
+-> 7-grease
+zvI/VoBqbQm3wvHAm7ClrjIxjDCnXwsUyv+slwHDXxLG1bgcpWvSTl8634WlCMOM
+ZhG38M09XA7DA2t7XsS12vIXabjYQsqwX00KRGBC6ZsRAxYCNCI/IezTeWLiA1U
+--- gnG3C6wGVSXWq/0M/ty+s2mL2Os6nAzXagE+pVtlW5U
+Ž7
rG‘/ÿöÊŸ<C38A>ƒVC§!™.CòE:ŸûeÛ›;îåþÌâ4šH¦?F-V{iÀêË6°´sêàK,Ö¤(/‚K.µ<>–	<09>6“

hosts/hermes/secrets/secrets.nix

@@ -17,4 +17,5 @@ in
   "vaultwarden_smtp.age".publicKeys = [ ageKey ];
   "outline_gmail.age".publicKeys = [ ageKey ];
   "gandalf_mail.age".publicKeys = [ ageKey ];
+  "nginx.age".publicKeys = [ ageKey ];
 }

modules/etesync.nix

@@ -0,0 +1,39 @@
+{ ... }:
+{
+  services = {
+    etesync-dav = {
+      enable = true;
+      port = 37358;
+      openFirewall = false;
+      host = "0.0.0.0";
+      apiUrl = "https://etesync.bhankas.org/";
+    };
+
+    nginx = {
+      enable = true;
+      virtualHosts = {
+        "etesync.bhankas.org" = {
+          addSSL = true;
+          enableACME = true;
+          locations."/" = {
+            proxyPass = "http://127.0.0.1:37358";
+            proxyWebsockets = false;
+            extraConfig =
+              "proxy_set_header Host $host;"
+            ;
+          };
+        };
+      };
+    };
+  };
+
+  security.acme = {
+    acceptTerms = true;
+    certs = {
+      "etesync.bhankas.org" = {
+        email = "admin@bhankas.org";
+        dnsResolver = "1.1.1.1:53";
+      };
+    };
+  };
+}

modules/hledger.nix

@@ -0,0 +1,52 @@
+{ ... }:
+{
+  services = {
+    hledger-web = {
+      enable = true;
+      host = "0.0.0.0";
+      port = 7777;
+      baseUrl = "https://ledger.bhankas.org";
+      stateDir = "/var/lib/hledger";
+      capabilities = {
+        view = true;
+        add = true;
+        manage = true;
+      };
+      journalFiles = [
+        ".hledger.journal"
+      ];
+      extraOptions = [
+        "--forecast"
+      ];
+    };
+
+    nginx = {
+      enable = true;
+      virtualHosts = {
+        "ledger.bhankas.org" = {
+          addSSL = true;
+          enableACME = true;
+          locations."/" = {
+            proxyPass = "http://127.0.0.1:7777";
+            proxyWebsockets = false;
+            extraConfig =
+              "proxy_set_header Host $host;\n"
+              + "auth_basic \"Username and Password Required\";\n"
+              + "auth_basic_user_file /run/agenix/nginx;"
+            ;
+          };
+        };
+      };
+    };
+  };
+
+  security.acme = {
+    acceptTerms = true;
+    certs = {
+      "ledger.bhankas.org" = {
+        email = "admin@bhankas.org";
+        dnsResolver = "1.1.1.1:53";
+      };
+    };
+  };
+}