Add trilium

hosts/magnesium/persistence.nix

@@ -32,6 +32,12 @@
       "/var/lib/hedgedoc"
       "/var/lib/nixos"
       "/var/lib/private/ntfy-sh"
+      {
+        directory = "/var/lib/trilium";
+        user = "trilium";
+        group = "trilium";
+        mode = "u=rwx,g=rx,o=";
+      }
     ];
   };
 }

hosts/magnesium/ports.nix

@@ -10,5 +10,6 @@ custom-utils.validatePortAttrset {
   nginx-http.tcp = 80;
   nginx-https.tcp = 443;
   ntfy.tcp = 12474;
+  trilium.tcp = 12783;
   wireguard-public-ip-tunnel.udp = 51000;
 }

hosts/magnesium/services/default.nix

@@ -6,6 +6,7 @@
     ./hedgedoc.nix
     ./ntfy.nix
     ./public-ip-tunnel.nix
+    ./trilium.nix
     ./webserver.nix
   ];
 }

hosts/magnesium/services/trilium.nix

@@ -0,0 +1,23 @@
+args@{ config, lib, pkgs, custom-utils, ... }:
+
+let
+  ports = import ../ports.nix args;
+  domain = "notes.jalr.de";
+in
+{
+  services.trilium-server = {
+    enable = true;
+    package = pkgs.master.trilium-next-server;
+    host = "127.0.0.1";
+    port = ports.trilium.tcp;
+    nginx = {
+      enable = true;
+      hostName = domain;
+    };
+  };
+
+  services.nginx.virtualHosts."${domain}" = {
+    enableACME = true;
+    forceSSL = true;
+  };
+}