From 98b41e72a1f8a41188933f8dfc7f01be6aecdeaf Mon Sep 17 00:00:00 2001
From: Gabe Venberg <gabevenberg@gmail.com>
Date: Tue, 7 Oct 2025 14:37:47 +0200
Subject: [PATCH] added freshrss feed reader.

---
 configs/nixos/freshrss.nix | 33 +++++++++++++++++++++++++++++++++
 configs/nixos/homepage.nix |  8 ++++++++
 flake.lock                 |  6 +++---
 hosts/cirrus/default.nix   |  5 +++++
 4 files changed, 49 insertions(+), 3 deletions(-)
 create mode 100644 configs/nixos/freshrss.nix

diff --git a/configs/nixos/freshrss.nix b/configs/nixos/freshrss.nix
new file mode 100644
index 0000000..e730307
--- /dev/null
+++ b/configs/nixos/freshrss.nix
@@ -0,0 +1,33 @@
+{
+  inputs,
+  config,
+  pkgs,
+  lib,
+  ...
+}: let
+  cfg = config.services.freshrss;
+in {
+  services.freshrss={
+    enable=true;
+    database.type="sqlite";
+    webserver="nginx";
+    baseUrl="https://rss.venberg.xyz";
+    virtualHost = "rss.venberg.xyz";
+    passwordFile = config.sops.secrets.freshrss-password.path;
+    defaultUser="gabe";
+  };
+
+  services.nginx.virtualHosts.${cfg.virtualHost}= {
+    enableACME = true;
+    forceSSL = true;
+  };
+  # host.restic.backups.freshrss = {
+  #   paths = [
+  #   TODO
+  #   ];
+  #   preBackupCommands = "TODO";
+  #   postBackupCommands = "TODO";
+  # };
+
+  imports = [./nginx.nix];
+}
diff --git a/configs/nixos/homepage.nix b/configs/nixos/homepage.nix
index fa69ea4..c05923c 100644
--- a/configs/nixos/homepage.nix
+++ b/configs/nixos/homepage.nix
@@ -120,6 +120,14 @@ in {
               description = "Online file browser";
             };
           }
+          {
+            FreshRSS = {
+              icon = "sh-freshrss.svg";
+              href = "https://rss.venberg.xyz";
+              siteMonitor = "https://rss.venberg.xyz";
+              description = "Feed reader";
+            };
+          }
         ];
       }
       {
diff --git a/flake.lock b/flake.lock
index 747ae68..9885ef4 100644
--- a/flake.lock
+++ b/flake.lock
@@ -125,10 +125,10 @@
     "nix-secrets": {
       "flake": false,
       "locked": {
-        "lastModified": 1750408645,
-        "narHash": "sha256-P8N+hborKdnsgV2AXeSAE9kFjJGOfcfTqaoWFBCv1vk=",
+        "lastModified": 1759838094,
+        "narHash": "sha256-eLz+Xa+SEDBjevKYPIccrd8IoK8N/3ewJC0bNi4Pwx4=",
         "ref": "refs/heads/main",
-        "rev": "d598f5e89b16577f3b364c06d8f273dc4d38f04b",
+        "rev": "8172f0d3fefccac5568ac115a37ba9785dae3915",
         "shallow": true,
         "type": "git",
         "url": "ssh://forgejo@git.venberg.xyz/Gabe/nix-secrets.git"
diff --git a/hosts/cirrus/default.nix b/hosts/cirrus/default.nix
index b138669..4986a02 100644
--- a/hosts/cirrus/default.nix
+++ b/hosts/cirrus/default.nix
@@ -22,6 +22,7 @@ inputs.nixpkgs.lib.nixosSystem {
     ../../configs/nixos/radicale.nix
     ../../configs/nixos/forgejo.nix
     ../../configs/nixos/homepage.nix
+    ../../configs/nixos/freshrss.nix
     ({
       config,
       pkgs,
@@ -58,6 +59,10 @@ inputs.nixpkgs.lib.nixosSystem {
             format = "binary";
             owner = config.services.nginx.user;
           };
+          freshrss-password = {
+            sopsFile = "${inputs.nix-secrets}/freshrss.yaml";
+            owner = config.services.freshrss.user;
+          };
         };
       };
       home-manager.users.${config.host.details.user} = {