From de76a63ff1af9d0fcc3941d689cab23ca0794b2a Mon Sep 17 00:00:00 2001
From: Tasia Iso <tasiaiso@proton.me>
Date: Sun, 13 Oct 2024 18:49:45 +0200
Subject: [PATCH] wallabag 1

---
 hosts/vulpecula-vps/configuration.nix |  2 ++
 hosts/vulpecula-vps/wallabag.nix      |  7 +++++++
 hosts/yaseen/configuration.nix        | 29 +++++++++++++++++++++++++++
 3 files changed, 38 insertions(+)
 create mode 100644 hosts/vulpecula-vps/wallabag.nix

diff --git a/hosts/vulpecula-vps/configuration.nix b/hosts/vulpecula-vps/configuration.nix
index cc44b7d..81c7236 100644
--- a/hosts/vulpecula-vps/configuration.nix
+++ b/hosts/vulpecula-vps/configuration.nix
@@ -69,6 +69,8 @@ in {
     };
   };
 
+  virtualisation.docker.enable = true;
+
   # change when ppl can make their own website
   security.acme = {
     acceptTerms = true;
diff --git a/hosts/vulpecula-vps/wallabag.nix b/hosts/vulpecula-vps/wallabag.nix
new file mode 100644
index 0000000..91f1664
--- /dev/null
+++ b/hosts/vulpecula-vps/wallabag.nix
@@ -0,0 +1,7 @@
+{config,...}: {
+  services.nginx.virtualHosts."wallabag.vulpecula.zone" = {
+    addSSL = true;
+    enableACME = true;
+    locations."/".proxyPass = "http://localhost:62106";
+  };
+}
diff --git a/hosts/yaseen/configuration.nix b/hosts/yaseen/configuration.nix
index bf6a58c..b9401d5 100644
--- a/hosts/yaseen/configuration.nix
+++ b/hosts/yaseen/configuration.nix
@@ -49,6 +49,7 @@ in {
     inputs.agenix.nixosModules.default
     ../../common/components/wifi-secrets.nix
 
+    inputs.thymis.nixosModules.thymis-controller
     # Personal modules
     # ../../modules/nixos/tildefriends.nix
     ./yubikey.nix
@@ -234,6 +235,34 @@ in {
   # wifi mac-address-blacklist = "";
   # wifisec auth-alg = "open";
 
+  # services.thymis-controller = {
+  #   enable = true;
+  #   system-binfmt-aarch64-enable = true; # enables emulation of aarch64 binaries, default is true on x86_64, needed for building aarch64 images on x86_64
+  #   system-binfmt-x86_64-enable = false; # enables emulation of x86_64 binaries, default is false
+  #   repo-path = "/var/lib/thymis/repository"; # directory where the controller will store the repository holding the project
+  #   database-url = "sqlite:////var/lib/thymis/thymis.sqlite"; # URL of the database
+  #   base-url = "https://yaseen/"; # base URL of the controller, how it will be accessed from the outside
+  #   auth-basic = true; # whether to enable authentication using a basic username/password
+  #   auth-basic-username = "admin"; # username for basic authentication
+  #   auth-basic-password-file = "/var/lib/thymis/auth-basic-password"; # file containing the password for basic authentication
+  #   # content will be automatically generated if it does not exist
+  #   listen-host = "127.0.0.1"; # host on which the controller listens for incoming connections
+  #   listen-port = 33100; # port on which the controller listens for incoming connections
+  #   nginx-vhost-enable = false; # whether to enable the Nginx virtual host
+  #   nginx-vhost-name = "thymis"; # name of the Nginx virtual host
+  # };
+  # # Configure the Nginx virtual host
+  # services.nginx = {
+  #   enable = true;
+  #   virtualHosts."thymis" = {
+  #     serverName = "yaseen";
+  #     enableACME = true;
+  #     forceSSL = true;
+  #   };
+  # };
+  # security.acme.defaults.email = "tasiaiso@proton.me";
+
+  security.acme.acceptTerms = true;
   # https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion
   system.stateVersion = "23.11";
 }