added freshrss feed reader.

configs/nixos/freshrss.nix

@@ -0,0 +1,33 @@
+{
+  inputs,
+  config,
+  pkgs,
+  lib,
+  ...
+}: let
+  cfg = config.services.freshrss;
+in {
+  services.freshrss={
+    enable=true;
+    database.type="sqlite";
+    webserver="nginx";
+    baseUrl="https://rss.venberg.xyz";
+    virtualHost = "rss.venberg.xyz";
+    passwordFile = config.sops.secrets.freshrss-password.path;
+    defaultUser="gabe";
+  };
+
+  services.nginx.virtualHosts.${cfg.virtualHost}= {
+    enableACME = true;
+    forceSSL = true;
+  };
+  # host.restic.backups.freshrss = {
+  #   paths = [
+  #   TODO
+  #   ];
+  #   preBackupCommands = "TODO";
+  #   postBackupCommands = "TODO";
+  # };
+
+  imports = [./nginx.nix];
+}

configs/nixos/homepage.nix

@@ -120,6 +120,14 @@ in {
               description = "Online file browser";
             };
           }
+          {
+            FreshRSS = {
+              icon = "sh-freshrss.svg";
+              href = "https://rss.venberg.xyz";
+              siteMonitor = "https://rss.venberg.xyz";
+              description = "Feed reader";
+            };
+          }
         ];
       }
       {

flake.lock

@@ -125,10 +125,10 @@
     "nix-secrets": {
       "flake": false,
       "locked": {
-        "lastModified": 1750408645,
+        "lastModified": 1759838094,
-        "narHash": "sha256-P8N+hborKdnsgV2AXeSAE9kFjJGOfcfTqaoWFBCv1vk=",
+        "narHash": "sha256-eLz+Xa+SEDBjevKYPIccrd8IoK8N/3ewJC0bNi4Pwx4=",
         "ref": "refs/heads/main",
-        "rev": "d598f5e89b16577f3b364c06d8f273dc4d38f04b",
+        "rev": "8172f0d3fefccac5568ac115a37ba9785dae3915",
         "shallow": true,
         "type": "git",
         "url": "ssh://forgejo@git.venberg.xyz/Gabe/nix-secrets.git"

hosts/cirrus/default.nix

@@ -22,6 +22,7 @@ inputs.nixpkgs.lib.nixosSystem {
     ../../configs/nixos/radicale.nix
     ../../configs/nixos/forgejo.nix
     ../../configs/nixos/homepage.nix
+    ../../configs/nixos/freshrss.nix
     ({
       config,
       pkgs,
@@ -58,6 +59,10 @@ inputs.nixpkgs.lib.nixosSystem {
             format = "binary";
             owner = config.services.nginx.user;
           };
+          freshrss-password = {
+            sopsFile = "${inputs.nix-secrets}/freshrss.yaml";
+            owner = config.services.freshrss.user;
+          };
         };
       };
       home-manager.users.${config.host.details.user} = {