feat: add paperless

services/paperless.nix

@@ -0,0 +1,22 @@
+{ config, pkgs, ... }:
+
+let port = 28981;
+in {
+  services.paperless-ng = {
+    enable = true;
+    inherit port;
+    passwordFile = "/etc/nixos/secrets/paperless";
+    extraConfig = { PAPERLESS_OCR_LANGUAGE = "deu+eng"; };
+  };
+
+  services.nginx = {
+    virtualHosts."paperless.felschr.com" = {
+      enableACME = true;
+      forceSSL = true;
+      locations."/" = {
+        proxyPass = "http://localhost:${toString port}";
+        proxyWebsockets = true;
+      };
+    };
+  };
+}