feat: add vikunja

config/endpoints.nix

@@ -1,91 +1,7 @@
 let
-  net = import ./network.nix;
+  local = import ./endpoints/local.nix;
-  services = import ./services.nix;
+  web = import ./endpoints/web.nix;
-  web = import ../intermediate/web.nix;
+  matrix = import ./endpoints/matrix.nix;
+  vikunja = import ./endpoints/vikunja.nix;
 in
-[
+local ++ web ++ matrix ++ vikunja ++ []
-  {
-    type = "web";
-    domain = net.devices.remote_proxy.domain;
-    endpoint = "/";
-    force_ssl = true;
-    port = 443;
-    content = web.storePayloads.home;
-  }
-  {
-    type = "proxy";
-    domain = net.devices.remote_proxy.domain;
-    endpoint = "/_matrix/";
-    force_ssl = true;
-    port = 443;
-    content = {
-      type = "service";
-      ip = net.devices.pi.ip;
-      port = services.continuwuity.port;
-      proxyWebsockets = true;
-    };
-  }
-  {
-    type = "proxy";
-    domain = net.devices.remote_proxy.domain;
-    endpoint = "/_matrix/";
-    force_ssl = true;
-    port = 8448;
-    content = {
-      type = "service";
-      ip = net.devices.pi.ip;
-      port = services.continuwuity.port;
-      proxyWebsockets = true;
-    };
-  }
-  {
-    type = "inline";
-    domain = net.devices.remote_proxy.domain;
-    endpoint = "/.well-known/matrix/server";
-    force_ssl = true;
-    port = 443;
-    content = {
-      contentType = "application/json";
-      status = 200;
-      body = ''{"m.server":"${net.devices.remote_proxy.domain}:443"}'';
-    };
-  }
-  {
-    type = "inline";
-    domain = net.devices.remote_proxy.domain;
-    endpoint = "/.well-known/matrix/client";
-    force_ssl = true;
-    port = 443;
-    content = {
-      contentType = "application/json";
-      status = 200;
-      body = ''{"m.homeserver":{"base_url":"https://${net.devices.remote_proxy.domain}"}}'';
-    };
-  }
-  {
-    type = "proxy";
-    domain = "torrent.${net.local_domain}";
-    endpoint = "/";
-    force_ssl = false;
-    port = 80;
-    content = {
-      type = "service";
-      ip = net.devices.pi.ip;
-      port = services.qbittorrent.port;
-      proxyWebsockets = false;
-    };
-  }
-  {
-    type = "proxy";
-    domain = "wiki.${net.local_domain}";
-    endpoint = "/";
-    force_ssl = false;
-    port = 80;
-    content = {
-      type = "service";
-      ip = net.devices.pi.ip;
-      port = services.kiwix.port;
-      proxyWebsockets = true;
-    };
-  }
-]

config/endpoints/local.nix

@@ -0,0 +1,32 @@
+let
+  net = import ../network.nix;
+  services = import ../services.nix;
+in
+[
+  {
+    type = "proxy";
+    domain = "torrent.${net.local_domain}";
+    endpoint = "/";
+    force_ssl = false;
+    port = 80;
+    content = {
+      type = "service";
+      ip = net.devices.pi.ip;
+      port = services.qbittorrent.port;
+      proxyWebsockets = false;
+    };
+  }
+  {
+    type = "proxy";
+    domain = "wiki.${net.local_domain}";
+    endpoint = "/";
+    force_ssl = false;
+    port = 80;
+    content = {
+      type = "service";
+      ip = net.devices.pi.ip;
+      port = services.kiwix.port;
+      proxyWebsockets = true;
+    };
+  }
+]

config/endpoints/matrix.nix

@@ -0,0 +1,56 @@
+let
+  net = import ../network.nix;
+  services = import ../services.nix;
+in
+[
+  {
+    type = "proxy";
+    domain = net.devices.remote_proxy.domain;
+    endpoint = "/_matrix/";
+    force_ssl = true;
+    port = 443;
+    content = {
+      type = "service";
+      ip = net.devices.pi.ip;
+      port = services.continuwuity.port;
+      proxyWebsockets = true;
+    };
+  }
+  {
+    type = "proxy";
+    domain = net.devices.remote_proxy.domain;
+    endpoint = "/_matrix/";
+    force_ssl = true;
+    port = 8448;
+    content = {
+      type = "service";
+      ip = net.devices.pi.ip;
+      port = services.continuwuity.port;
+      proxyWebsockets = true;
+    };
+  }
+  {
+    type = "inline";
+    domain = net.devices.remote_proxy.domain;
+    endpoint = "/.well-known/matrix/server";
+    force_ssl = true;
+    port = 443;
+    content = {
+      contentType = "application/json";
+      status = 200;
+      body = ''{"m.server":"${net.devices.remote_proxy.domain}:443"}'';
+    };
+  }
+  {
+    type = "inline";
+    domain = net.devices.remote_proxy.domain;
+    endpoint = "/.well-known/matrix/client";
+    force_ssl = true;
+    port = 443;
+    content = {
+      contentType = "application/json";
+      status = 200;
+      body = ''{"m.homeserver":{"base_url":"https://${net.devices.remote_proxy.domain}"}}'';
+    };
+  }
+]

config/endpoints/vikunja.nix

@@ -0,0 +1,19 @@
+let
+  net = import ../network.nix;
+  services = import ../services.nix;
+in
+[
+  {
+    type = "proxy";
+    domain = "vikunja.${net.devices.remote_proxy.domain}";
+    endpoint = "/";
+    force_ssl = true;
+    port = 443;
+    content = {
+      type = "service";
+      ip = net.devices.pi.ip;
+      port = services.vikunja.port;
+      proxyWebsockets = true;
+    };
+  }
+]

config/endpoints/web.nix

@@ -0,0 +1,14 @@
+let
+  net = import ../network.nix;
+  web = import ../../intermediate/web.nix;
+in
+[
+  {
+    type = "web";
+    domain = net.devices.remote_proxy.domain;
+    endpoint = "/";
+    force_ssl = true;
+    port = 443;
+    content = web.storePayloads.home;
+  }
+]

config/services.nix

@@ -29,4 +29,8 @@ rec {
     trusted_servers = [ "matrix.org" ];
   };
 
+  vikunja = {
+    port = 8081;
+  };
+
 }

services/default.nix

@@ -9,5 +9,6 @@
     ./unbound.nix
     ./autossh.nix
     ./continuwuity.nix
+    ./vikunja.nix
     ];
 }

services/vikunja.nix

@@ -0,0 +1,14 @@
+{ config, pkgs, ... }:
+
+let 
+  net = import ../config/network.nix;
+  services = import ../config/services.nix;
+in
+{
+  services.vikunja = {
+    enable = true;
+    frontendHostname = "vikunja.${net.local_domain}";
+    frontendScheme = "http";
+    port = services.vikunja.port;
+  };
+}