From e7e82ae2d6486d5c66d9cc7d5600dc020c98e556 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Felix=20Schr=C3=B6ter?= <dev@felschr.com>
Date: Wed, 22 Dec 2021 13:03:14 +0100
Subject: [PATCH] feat: add paperless

---
 rpi4.nix               |  2 ++
 services/paperless.nix | 22 ++++++++++++++++++++++
 2 files changed, 24 insertions(+)
 create mode 100644 services/paperless.nix

diff --git a/rpi4.nix b/rpi4.nix
index 61a6737..480236d 100644
--- a/rpi4.nix
+++ b/rpi4.nix
@@ -26,6 +26,7 @@ in with builtins; {
     ./services/home-assistant.nix
     ./services/owntracks.nix
     ./services/miniflux.nix
+    ./services/paperless.nix
   ];
 
   nixpkgs.config.allowUnfree = true;
@@ -71,6 +72,7 @@ in with builtins; {
       "mqtt.felschr.com"
       "owntracks.felschr.com"
       "etebase.felschr.com"
+      "paperless.felschr.com"
     ];
   };
 
diff --git a/services/paperless.nix b/services/paperless.nix
new file mode 100644
index 0000000..9f0111c
--- /dev/null
+++ b/services/paperless.nix
@@ -0,0 +1,22 @@
+{ config, pkgs, ... }:
+
+let port = 28981;
+in {
+  services.paperless-ng = {
+    enable = true;
+    inherit port;
+    passwordFile = "/etc/nixos/secrets/paperless";
+    extraConfig = { PAPERLESS_OCR_LANGUAGE = "deu+eng"; };
+  };
+
+  services.nginx = {
+    virtualHosts."paperless.felschr.com" = {
+      enableACME = true;
+      forceSSL = true;
+      locations."/" = {
+        proxyPass = "http://localhost:${toString port}";
+        proxyWebsockets = true;
+      };
+    };
+  };
+}