linkding: serve bookmarks at links.kassouni.net

Add the linkding module behind an nginx reverse proxy with ACME TLS,
and enable recommendedProxySettings so proxied vhosts get sane headers.

1 files changed, 17 insertions, 0 deletions

diff --git a/nix/linkding.nix b/nix/linkding.nix
new file mode 100644
index 0000000..744fe19
--- /dev/null
+++ b/nix/linkding.nix
@@ -0,0 +1,17 @@
+{ config, ... }: let
+  domain = "links.kassouni.net";
+in {
+  services.linkding = {
+    enable = true;
+    environmentFile = "/var/lib/linkding/creds.env";
+    settings.LD_CSRF_TRUSTED_ORIGINS = "https://${domain}";
+  };
+
+  services.nginx.virtualHosts.${domain} = {
+    forceSSL = true;
+    enableACME = true;
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:${toString config.services.linkding.port}";
+   };
+  };
+}