lew/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: shlink addition

Browse source
This commit is contained in:
Lewis Wynne 2026-04-08 00:32:28 +01:00
parent e0b3ace95f
commit 47e28d0c04
4 changed files with 103 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

76
hosts/lab/shlink.nix Normal file
View file

@ -0,0 +1,76 @@
{ config, pkgs, ... }:
{
sops.secrets.shlink-api-key = {
sopsFile = ../../secrets/shlink.yaml;
};
sops.templates.shlink-env = {
content = ''
INITIAL_API_KEY=${config.sops.placeholder.shlink-api-key}
'';
owner = "podman";
};
services.postgresql = {
enable = true;
ensureDatabases = [ "shlink" ];
ensureUsers = [{
name = "shlink";
ensureDBOwnership = true;
}];
authentication = pkgs.lib.mkOverride 10 ''
local all all trust
host sameuser all 127.0.0.1/32 trust
host sameuser all ::1/128 trust
'';
};
services.caddy.virtualHosts."ily.rs" = {
extraConfig = ''
redir / https://wynne.rs permanent
reverse_proxy localhost:8080
encode zstd gzip
'';
};
services.caddy.virtualHosts."links.ily.rs" = {
extraConfig = ''
import tinyauth
reverse_proxy localhost:8081
encode zstd gzip
'';
};
virtualisation.oci-containers.containers.shlink = {
image = "shlinkio/shlink:5.0.1";
podman.user = "podman";
ports = [ "127.0.0.1:8080:8080" ];
environment = {
DEFAULT_DOMAIN = "ily.rs";
IS_HTTPS_ENABLED = "true";
DB_DRIVER = "postgres";
DB_HOST = "host.containers.internal";
DB_NAME = "shlink";
DB_USER = "shlink";
PORT = "8080";
SHELL_VERBOSITY = "3";
};
environmentFiles = [ config.sops.templates.shlink-env.path ];
};
# Workaround for NixOS/nixpkgs#410857 until backport of #475089 lands
systemd.services.podman-shlink = {
after = [ "postgresql-setup.service" ];
requires = [ "postgresql-setup.service" ];
serviceConfig.Delegate = true;
};
virtualisation.oci-containers.containers.shlink-web-client = {
image = "shlinkio/shlink-web-client:4.7.0";
podman.user = "podman";
ports = [ "127.0.0.1:8081:8080" ];
};
# Workaround for NixOS/nixpkgs#410857 until backport of #475089 lands
systemd.services.podman-shlink-web-client.serviceConfig.Delegate = true;
}