From 58b8aa9e5b70fbeb748f013d87b8ac682f900a8f Mon Sep 17 00:00:00 2001
From: Alexander Kassouni <alex@kassouni.net>
Date: Fri, 23 Oct 2026 14:37:14 -0700
Subject: linkding: serve bookmarks at links.kassouni.net

Add the linkding module behind an nginx reverse proxy with ACME TLS,
and enable recommendedProxySettings so proxied vhosts get sane headers.
---
 nix/linkding.nix | 17 +++++++++++++++++
 nix/web.nix      |  1 +
 2 files changed, 18 insertions(+)
 create mode 100644 nix/linkding.nix

(limited to 'nix')

diff --git a/nix/linkding.nix b/nix/linkding.nix
new file mode 100644
index 0000000..744fe19
--- /dev/null
+++ b/nix/linkding.nix
@@ -0,0 +1,17 @@
+{ config, ... }: let
+  domain = "links.kassouni.net";
+in {
+  services.linkding = {
+    enable = true;
+    environmentFile = "/var/lib/linkding/creds.env";
+    settings.LD_CSRF_TRUSTED_ORIGINS = "https://${domain}";
+  };
+
+  services.nginx.virtualHosts.${domain} = {
+    forceSSL = true;
+    enableACME = true;
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:${toString config.services.linkding.port}";
+   };
+  };
+}
diff --git a/nix/web.nix b/nix/web.nix
index 0013d4f..82a0dfb 100644
--- a/nix/web.nix
+++ b/nix/web.nix
@@ -5,6 +5,7 @@ in {
     enable = true;
     recommendedGzipSettings = true;
     recommendedOptimisation = true;
+    recommendedProxySettings = true;
     recommendedTlsSettings = true;
 
     virtualHosts = {
-- 
cgit v1.3.1