containers: add rconfig

options/custom/containers/rconfig.nix

@@ -0,0 +1,50 @@
+{
+  config,
+  inputs,
+  lib,
+  ...
+}:
+with lib; let
+  cfg = config.custom.containers.rconfig;
+in {
+  options.custom.containers.rconfig = {
+    enable = mkEnableOption "rconfig";
+  };
+
+  config = mkIf cfg.enable {
+    age.secrets = let
+      secret = filename: {
+        file = "${inputs.self}/secrets/${filename}";
+      };
+    in {
+      "${config.custom.profile}/rconfig/.env" = secret "${config.custom.profile}/rconfig/.env";
+      "${config.custom.profile}/rconfig/db.env" = secret "${config.custom.profile}/rconfig/db.env";
+    };
+
+    #?? arion-rconfig pull
+    environment.shellAliases.arion-rconfig = "sudo arion --prebuilt-file ${config.virtualisation.arion.projects.rconfig.settings.out.dockerComposeYaml}";
+
+    virtualisation.arion.projects.rconfig.settings.services = {
+      # https://v6docs.rconfig.com/
+      # https://github.com/rconfig/rconfig6docker
+      # https://github.com/rconfig/rconfig6docker/blob/main/docker-compose.yml
+      rconfig.service = {
+        container_name = "rconfig";
+        depends_on = ["db"];
+        env_file = [config.age.secrets."${config.custom.profile}/rconfig/.env".path];
+        image = "rconfig/rconfigv6:1.0.0";
+        ports = ["8118:80/tcp"];
+        restart = "unless-stopped";
+        volumes = ["${config.custom.containers.directory}/rconfig/data:/var/www/html/rconfig/storage"];
+      };
+
+      db.service = {
+        container_name = "rconfig-db";
+        env_file = [config.age.secrets."${config.custom.profile}/rconfig/db.env".path];
+        image = "mariadb:11.7";
+        restart = "unless-stopped";
+        volumes = ["${config.custom.containers.directory}/rconfig/db:/var/lib/mysql"];
+      };
+    };
+  };
+}

profiles/server/default.nix

@@ -26,6 +26,7 @@
       openwebui.enable = true;
       oryx.enable = true;
       #// owncast.enable = true;
+      #// rconfig.enable = true;
       redlib.enable = true;
       searxng.enable = true;
       stremio.enable = true;

secrets/secrets.nix

@@ -86,6 +86,8 @@ in {
   "server/nextcloud/.env".publicKeys = server;
   "server/nextcloud/db.env".publicKeys = server;
   "server/oryx/.env".publicKeys = server;
+  "server/rconfig/.env".publicKeys = server;
+  "server/rconfig/db.env".publicKeys = server;
   "server/searxng/.env".publicKeys = server;
   "server/users/myned.pass".publicKeys = server;
   "server/users/root.pass".publicKeys = server;

secrets/server/rconfig/db.env

@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 8E6j8Q iPpbSM08pQ4e7wzlMK204HQHUoVnN8BkuwFMl2tw21Q
+twIs+ogcoTtQz4uGlJP5irSTr87BOMfMV0RSxtuaBoM
+-> ssh-ed25519 sfxzoQ KPG6LZuzfxQf9P7Aa+x8sHbfAgU2ENMwgxxC0oahiEE
+Va46j/FIibY3o2OGnam4b62JVClBK9pOAIoyPyWorjE
+-> ssh-ed25519 iw6hqg uqiI7silrRJvebXvcCEZYWlWCkv109ZZtXikQWkT9SY
+wnfnD08Cw5b2rFt/c5c18+xOAP/tjR5ZvwyYIbDZMss
+--- tOn+UOFSUmi2o0jn36ZltXSIPT2AfJWAdxKBVA+X810
+Ö«ŠRX²›Ö«]íÿ:¹	«
›ã»ˆêž˜Àm46*¤ËZÃ'T«”i’û†UpÊö9¥H6²KšFÅ´ïG<7F>Qä*™ãnf£DÀm•§íEn›Ð£–Ž"C6©ÁÃÚ;V/е±V ±.ž&Î¥rÿÝ	eA2£¯ÍÙõÓ'Õºd 5×tÓ™Kìq<C3AC>™S†<53>F›E„÷N1¨ë]ªf®å”¸œZeN­!Ÿd†ù ¼ßòüÿ1€Üi|ò­<EFBFBD>Má¼ü©¸ÜO8TÎyÄ›<C384>ÚKAg©:pz‰