From ac37501dbd6e816d727028464901a2f72677cb8a Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Wed, 14 Jan 2026 10:58:39 +0100
Subject: ...

---
 hosts/vidhar/vikunja/default.nix | 26 +++++++++++++++++++++++---
 hosts/vidhar/vikunja/vikunja_env | 18 ++++++++++++++++++
 2 files changed, 41 insertions(+), 3 deletions(-)
 create mode 100644 hosts/vidhar/vikunja/vikunja_env

(limited to 'hosts')

diff --git a/hosts/vidhar/vikunja/default.nix b/hosts/vidhar/vikunja/default.nix
index a53f7f18..aa3b368f 100644
--- a/hosts/vidhar/vikunja/default.nix
+++ b/hosts/vidhar/vikunja/default.nix
@@ -1,4 +1,4 @@
-{ lib, ... }:
+{ config, lib, ... }:
 
 {
   config = {
@@ -7,13 +7,33 @@
       frontendScheme = "https";
       frontendHostname = "vikunja.yggdrasil.li";
       settings = {
-        service.interface = lib.mkForce "[2a03:4000:52:ada:4:1::]:3456";
-        service.enableregistration = false;
+        service = {
+          interface = lib.mkForce "[2a03:4000:52:ada:4:1::]:3456";
+          enableregistration = false;
+          publicurl = with config.services.vikunja; "${frontendScheme}://${frontendHostname}/";
+        };
+
+        mailer = {
+          enabled = true;
+          host = "mailsub.bouncy.email";
+          port = 466;
+          username = "vikunja";
+          fromemail = "vikunja@bouncy.email";
+          forcessl = true;
+        };
       };
       database = {
         host = "/run/postgresql";
         type = "postgres";
       };
+      environmentFiles = [
+        config.sops.secrets."vikunja_env".path
+      ];
+    };
+
+    sops.secrets."vikunja_env" = {
+      format = "binary";
+      sopsFile = ./vikunja_env;
     };
 
     services.postgresql = {
diff --git a/hosts/vidhar/vikunja/vikunja_env b/hosts/vidhar/vikunja/vikunja_env
new file mode 100644
index 00000000..d9ff0296
--- /dev/null
+++ b/hosts/vidhar/vikunja/vikunja_env
@@ -0,0 +1,18 @@
+{
+	"data": "ENC[AES256_GCM,data:/3vSwdctF6pm1Rxp5v2EEgh3ZWxXoH0O8WX+EqHdp81gOQNUE+ozM7DROrNunVIrrg==,iv:k8/tPOoaT72cEUQVlFQ34ZlNQMQR+eMCUXteVGxIZP4=,tag:9CAh67Ckcxwho4esHGPHlg==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"recipient": "age1rmmhetcmllq0ahl5qznlr0eya2zdxwl9h6y5wnl97d2wtyx5t99sm2u866",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA4dFhNeUtOTVVFUzRRc2R2\nL2dXSC84TDMrVzM2bTltOFBZL0xHVk45NjM4CklHdWhBOE50VlFqVDRXK2hmSXEr\nWTUzVFlqbDB3alhzY0RSbUhwSnVYc1kKLS0tIDczZms4VVRZcmp2NG8wRjF5K0xn\nTGxjYkUzaFJXczVIQVVKSitRZ3dYZ3cKBoKJ0/9eFSEdSUyeMRkn7sXXYq9gDLRE\nHN5+T0Bk8jK40NEnhqwwiL0D4OITTcAeL7XVjKyt9sksJPedtWGToA==\n-----END AGE ENCRYPTED FILE-----\n"
+			},
+			{
+				"recipient": "age1qffdqvy9arld9zd5a5cylt0n98xhcns5shxhrhwjq5g4qa844ejselaa4l",
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOK2RLZDU4RS9JcklXTTNw\nMnhWL05UOENuYXdaZ0dIYTVSNjQyMkVTSkNjCmk1WTJoSTFwV1J5dzhYSjZhcjZD\nOGNRVm44b09BWnlUZWNsRjB1dFpLWGcKLS0tIEFEK1VaQnZPcXdEc1VaVTVuWFEx\nUnV6Z0NuUEw2M2V3ektBMURMTDdGbGcKdtpxGm4Fa77ooi+Xezkcb6y+VfZP3pUF\nwAMutvW+/Be+U4+rvwrGSYQ4/fDQNxX50O7S08atfW2EV7soELF38A==\n-----END AGE ENCRYPTED FILE-----\n"
+			}
+		],
+		"lastmodified": "2026-01-14T08:00:06Z",
+		"mac": "ENC[AES256_GCM,data:foWtFQ8MGUbIn8zAnlY4wAWVI/ojzx9gr6TvDHZythtTbGOU9dHLoNRy7fZQdwZu7sJvTQxdmzU3CfUcwIhv6M9sZeVJYs6O8X0yeTN68EqkTX2WMW4xr+I+DEeEIxoU6FI1ZSzKijImcPsygooFGZ9SQoiRLKWcxvWVYVbt7Oc=,iv:HJ2X1wJ4ZAHEbXi2QPjckTdmcdXtECzijYlmwyBokNU=,tag:kYGAD9oQYurv4zTt6Ow1MA==,type:str]",
+		"version": "3.11.0"
+	}
+}
-- 
cgit v1.2.3