mirror of
https://github.com/Swarsel/.dotfiles.git
synced 2025-12-06 17:17:22 +01:00
3a272b1fe6
This commit completely restructures the flake. Hosts are now seperate from profile configuration files in hosts/[system]. Nixos and Darwin configurations will be built when present in the respective folders in hosts/
50 lines
1.2 KiB
Nix
50 lines
1.2 KiB
Nix
{ lib, config, ... }:
|
|
{
|
|
config = lib.mkIf config.swarselsystems.server.paperless {
|
|
|
|
users.users.paperless = {
|
|
extraGroups = [ "users" ];
|
|
};
|
|
|
|
|
|
sops.secrets.paperless_admin = { owner = "paperless"; };
|
|
|
|
services.paperless = {
|
|
enable = true;
|
|
mediaDir = "/Vault/Eternor/Paperless";
|
|
dataDir = "/Vault/data/paperless";
|
|
user = "paperless";
|
|
port = 28981;
|
|
passwordFile = config.sops.secrets.paperless_admin.path;
|
|
address = "127.0.0.1";
|
|
settings = {
|
|
PAPERLESS_OCR_LANGUAGE = "deu+eng";
|
|
PAPERLESS_URL = "https://scan.swarsel.win";
|
|
PAPERLESS_OCR_USER_ARGS = builtins.toJSON {
|
|
optimize = 1;
|
|
invalidate_digital_signatures = true;
|
|
pdfa_image_compression = "lossless";
|
|
};
|
|
};
|
|
};
|
|
|
|
services.nginx = {
|
|
virtualHosts = {
|
|
"scan.swarsel.win" = {
|
|
enableACME = true;
|
|
forceSSL = true;
|
|
acmeRoot = null;
|
|
locations = {
|
|
"/" = {
|
|
proxyPass = "http://localhost:28981";
|
|
extraConfig = ''
|
|
client_max_body_size 0;
|
|
'';
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
};
|
|
|
|
}
|