From c8feb7e24e2241d79fb17aa3fb8ee587b03c6973 Mon Sep 17 00:00:00 2001
From: Joe Mou <dev@mou.fo>
Date: Fri, 4 Apr 2025 18:40:49 -0400
Subject: Miniflux RSS aggregator

Have not allocated the mf.mou.fo subdomain yet while testing the app.
BASE_URL seems nonessential, but at least fixes the API endpoint given.

To create the initial admin user:
$ sudo -u miniflux env DATABASE_URL='user=miniflux host=/run/postgresql dbname=miniflux' miniflux -create-admin

The UI is quite clunky. In particular it is very easy to get lost
navigating between article list and detail views. It would also be nice
to force opening articles on the external site (for Phoronix). Fetching
original content (instead of using the RSS content) is nice though.

To integrate with oauth2-proxy, probably need to set AUTH_PROXY_HEADER.
---
 hostnix/elmo/configuration.nix |  1 +
 hostnix/elmo/rss.nix           | 26 ++++++++++++++++++++++++++
 2 files changed, 27 insertions(+)
 create mode 100644 hostnix/elmo/rss.nix

(limited to 'hostnix/elmo')

diff --git a/hostnix/elmo/configuration.nix b/hostnix/elmo/configuration.nix
index f414cda..ac5873d 100644
--- a/hostnix/elmo/configuration.nix
+++ b/hostnix/elmo/configuration.nix
@@ -12,6 +12,7 @@
     ./media.nix
     ./oidc.nix
     ./privacy-frontends.nix
+    ./rss.nix
     ./syncthing.nix
     ./system.nix
     ./usenet.nix
diff --git a/hostnix/elmo/rss.nix b/hostnix/elmo/rss.nix
new file mode 100644
index 0000000..f343d83
--- /dev/null
+++ b/hostnix/elmo/rss.nix
@@ -0,0 +1,26 @@
+{ lib, ... }:
+
+{
+  services.miniflux = {
+    enable = true;
+    config = {
+      BASE_URL = "http://mf.elmo.mou.fo";
+      CREATE_ADMIN = 0;
+      LISTEN_ADDR = "/run/miniflux/miniflux.sock";
+    };
+  };
+
+  # https://github.com/NixOS/nixpkgs/issues/177284
+  systemd.services.miniflux.serviceConfig.RuntimeDirectoryMode = lib.mkForce "0755";
+
+  # TODO allocate a subdomain
+  services.nginx.virtualHosts."mf.elmo.mou.fo" = {
+    # TODO enableACME = true;
+    # TODO forceSSL = true;
+    locations."/" = {
+      proxyPass = "http://unix:/run/miniflux/miniflux.sock";
+    };
+  };
+
+  # TODO services.oauth2-proxy.nginx.virtualHosts = { "mf.mou.fo" = {}; };
+}
-- 
cgit v1.3.1