CrOS/modules/users/overseer/services/trilium.nix

{
  lib,
  config,
  pkgs,
  ...
}:
lib.mkIf config.user.overseer.enable {
  services = {
    restic.backups.notes = {
      user = "root";
      timerConfig = {
        OnCalendar = "daily";
        Persistent = true;
      };
      paths = [
        "/var/lib/trilium/backup"
      ];
      repositoryFile = config.sops.secrets."restic/url".path;
      passwordFile = config.sops.secrets."restic/key".path;
    };

    trilium-server = {
      enable = true;
      package = pkgs.trilium-next-server;
      instanceName = "WanderingCrow";
      port = 8090;
    };

    nginx = {
      enable = true;
      recommendedProxySettings = true;
      virtualHosts = {
        "notes.wanderingcrow.net" = {
          forceSSL = true;
          useACMEHost = "notes.wanderingcrow.net";
          locations."/" = {
            proxyPass = "http://127.0.0.1:8090";
          };
        };
      };
    };
  };
}