Add selfhosted services

2026-06-30 04:26:40 +03:00
parent f212c874b5
commit 13e407847f
78 changed files with 2346 additions and 690 deletions
@@ -0,0 +1,30 @@
+{ config, ... }:
+let
+  cfg = config.selfhosted.homarr;
+  poCfg = config.selfhosted.pocket-id;
+  oidpDomain = "https://${poCfg.subdomain}.${config.sops.placeholder."domains/serv"}";
+in
+{
+  sops.secrets = {
+    "homarr/enc_key" = { };
+    "homarr/client_id" = { };
+    "homarr/client_secret" = { };
+    "homarr/nextauth_secret" = { };
+  };
+
+  sops.templates."homarr.env" = {
+    content = ''
+      SECRET_ENCRYPTION_KEY=${config.sops.placeholder."homarr/enc_key"}
+      NEXTAUTH_SECRET=${config.sops.placeholder."homarr/nextauth_secret"}
+      AUTH_PROVIDERS=oidc
+      AUTH_OIDC_CLIENT_ID=${config.sops.placeholder."homarr/client_id"}
+      AUTH_OIDC_CLIENT_SECRET=${config.sops.placeholder."homarr/client_secret"}
+      AUTH_OIDC_ISSUER=${oidpDomain}
+      AUTH_OIDC_CLIENT_NAME="Pocket ID"
+      AUTH_OIDC_SCOPE_OVERWRITE=openid email profile groups
+      AUTH_OIDC_GROUPS_ATTRIBUTE=groups
+      AUTH_LOGOUT_REDIRECT_URL=${oidpDomain}
+      AUTH_OIDC_AUTO_LOGIN=true
+    '';
+  };
+}