{ config, inputs, ... }: let sopsFolder = inputs.nix-secrets + "/sops"; in { sops.secrets."freshrss/pass" = { sopsFile = "${sopsFolder}/services.yaml"; owner = "freshrss"; }; services.freshrss = { enable = true; baseUrl = "https://rss.wanderingcrow.net"; webserver = "caddy"; virtualHost = config.services.freshrss.baseUrl; passwordFile = config.sops.secrets."freshrss/pass".path; }; }