nas: add paperless

modules/services/nas/paperless.nix

@@ -0,0 +1,39 @@
+#
+# System notifications
+#
+
+{ config, lib, pkgs, ... }:
+
+{
+  services.paperless = {
+    enable = true;
+    domain = "paperless.home.opel-online.de";
+    passwordFile = config.age.secrets."services/paperless/pwFile".path;
+#    environmentFile = config.age.secrets."services/paperless/environment".path;
+    configureTika = true;
+    configureNginx = true;
+    settings = {
+      PAPERLESS_OCR_LANGUAGE = "deu+eng";
+      PAPERLESS_OCR_USER_ARGS = {
+        optimize = 1;
+        pdfa_image_compression = "lossless";
+      };
+    };
+  };
+
+#  services.nginx = {
+#    virtualHosts = {
+#      "vault.home.opel-online.de" = {
+#        useACMEHost = "home.opel-online.de";
+#        forceSSL = true;
+#        locations."/".proxyPass = "http://127.0.0.1:${toString config.services.vaultwarden.config.ROCKET_PORT}";
+#      };
+#    };
+#  };
+
+  age.secrets."services/paperless/pwFile" = {
+      file = ../../../secrets/services/paperless/pwFile.age;
+      owner = "paperless";
+  };
+
+}

secrets/secrets.nix

@@ -78,6 +78,7 @@ in
         "services/gitea/homerunner-token.age".publicKeys = homerunners ++ users;
         "services/gitea/serverrunner-token.age".publicKeys = serverrunners ++ users;
         "services/vaultwarden/environment.age".publicKeys = homeServices ++ users;
+        "services/paperless/pwFile.age".publicKeys = homeServices ++ users;
         "services/acme/opel-online.age".publicKeys = homeServices ++ users;
         "keys/nixremote.age".publicKeys = buildClients ++ users;
         "keys/nixservepriv.age".publicKeys = buildServer ++ users;

secrets/services/paperless/pwFile.age

@@ -0,0 +1,23 @@
+age-encryption.org/v1
+-> ssh-ed25519 0HRtjQ VXL0uR1pGE0jy2yyh4sfPAmcWixg4WH+SlZofrNrwFw
+Onp98kfyVRN3AQmmTeFnNIobyVElH+LuL98fyMX7r1M
+-> ssh-ed25519 NNXygQ luAZgAeAteKM0Ot8R/9TyOSjmtLoIo4goqJG+slbESw
+UmUO/oczJACbxYW5TTvGEj9cOZAZWNLZPaqrZm3PAY8
+-> ssh-rsa VtjGpQ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+-> piv-p256 grR75w AgF5/hbp1fXzVWfyoKyiXer9FiUevRaciJ3dXplFdAcU
+PaK3Ew5wp+UgHZ7qyejdUvR2ApAuT/jNeXiHy09gvV4
+-> piv-p256 RQguQQ AoYM8az53+oaFoRsv1pyFrne790vcUROTkN8/ul5nuX7
+UtW0GRfJZRy202cmNbvEFdTmXfOw8BQblepZbUy6dGs
+--- NG0ZJUpSLj2Oca6xNXwaiXDacJgiY+ZFNc60kua0RWY
+Jž-"ÚwÐÿÄ)ÍÜ¢$ µÄÒ~