wallabag: TLS

Signed-off-by: lucasew <lucas59356@gmail.com>
lucasew · Oct 14, 2024 · b7bff8f · b7bff8f
1 parent 5cefb16
commit b7bff8f
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 5 deletions.
diff --git a/flake.lock b/flake.lock
diff --git a/nix/nodes/common/services/ts-proxy.nix b/nix/nodes/common/services/ts-proxy.nix
@@ -42,6 +42,7 @@ in
         type = lib.types.attrsOf (lib.types.submodule ({ name, ...}: {
           options = {
             enableFunnel = lib.mkEnableOption "enable funnel for this endpoint";
+            enableHTTPS = lib.mkEnableOption "enable HTTPS for this endpoint";
 
             addr = lib.mkOption {
               description = "What service to proxy";
@@ -107,7 +108,10 @@ in
             "-n" host.name
             "-s" "${cfg.dataDir}/tsproxy-${host.name}"
 
-          ] ++ (lib.optional host.enableFunnel ["-f"]))}
+          ]
+          ++ (lib.optional host.enableFunnel ["-f"])
+          ++ (lib.optional host.enableHTTPS ["-t"])
+          )}
         '';
       };
     }) cfg.hosts));

diff --git a/nix/nodes/common/services/wallabag.nix b/nix/nodes/common/services/wallabag.nix
@@ -72,6 +72,7 @@ in
     services.ts-proxy.hosts = {
       wallabag = {
         addr = "http://127.0.0.1:${toString config.networking.ports.wallabag.port}";
+        enableHTTPS = true;
       };
     };
     services.nginx.virtualHosts."${cfg.domain}" = {
@@ -219,7 +220,7 @@ in
       database_name = "wallabag";
       database_user = cfg.user;
       database_password = null; # socket authenticates using the user
-      domain_name = "http://" + cfg.domain;
+      domain_name = "https://" + cfg.domain;
       database_table_prefix = "wallabag_";
       database_socket = "/run/postgresql/.s.PGSQL.${toString config.services.postgresql.port}";
       database_charset = "utf8";