Add readeck service.

machines/lebesgue/config/configuration.nix

@@ -10,6 +10,12 @@
       hashedPasswordFile = config.sops.secrets.admin-password.path;
     };
 
+    services.readeck = {
+      enable = true;
+      domain = "https://bookmarks.foehammer.me";
+      envFile = config.sops.secrets.readeck-env.path;
+    };
+
     services.goatcounter = {
       enable = true;
     };

machines/lebesgue/config/routing.nix

@@ -18,6 +18,12 @@
           reverse_proxy :${toString config.foehammer.services.goatcounter.port}
         '';
       };
+
+      "bookmarks.foehammer.me" = {
+        extraConfig = ''
+          reverse_proxy :${toString config.foehammer.services.readeck.port}
+        '';
+      };
     };
   };
 }

machines/lebesgue/config/secrets.nix

@@ -14,6 +14,8 @@
 
       vaultwarden-env = {};
 
+      readeck-env = {};
+
       restic-env = {owner = "restic";};
       restic-password = {owner = "restic";};
       restic-repository = {owner = "restic";};

machines/lebesgue/config/state.nix

@@ -9,6 +9,7 @@
       "/var/log"
       "/var/lib/nixos"
       "/var/lib/docker"
+      "/var/lib/private/readeck"
       "/var/lib/authelia-main"
       "/var/lib/caddy/.local/share/caddy"
       "/var/lib/vaultwarden"