refactor(firefly-iii): move from docker to nixos module

diogotcorreia · Dec 30, 2024 · fcd0c03 · fcd0c03
1 parent b89ad11
commit fcd0c03
Show file tree

Hide file tree

Showing 3 changed files with 45 additions and 19 deletions.
diff --git a/hosts/hera/firefly-iii.nix b/hosts/hera/firefly-iii.nix
@@ -7,15 +7,18 @@
   ...
 }: let
   domainApp = "firefly3.hera.diogotc.com";
-  portApp = 8005;
   domainDataImporter = "firefly3-csv.hera.diogotc.com";
 
   cronAutoDataImporter = "23:58";
   configPathAutoDataImporter = "/persist/firefly-auto-import-configs";
-in {
-  # TODO move docker containers to NixOS services
 
+  dbUser = config.services.firefly-iii.user;
+in {
   age.secrets = {
+    fireflyAppKey = {
+      owner = config.services.firefly-iii.user;
+      file = secrets.host.fireflyAppKey;
+    };
     fireflyAutoDataImporterEnv.file = secrets.host.fireflyAutoDataImporterEnv;
     fireflyAutoDataImporterHealthchecksUrl = {
       owner = config.services.firefly-iii-data-importer.user;
@@ -24,6 +27,19 @@ in {
     fireflyDataImporterEnv.file = secrets.host.fireflyDataImporterEnv;
   };
 
+  services.firefly-iii = {
+    enable = true;
+    package = pkgs.firefly-iii;
+    group = config.services.caddy.group;
+    virtualHost = domainApp;
+    settings = {
+      APP_ENV = "production";
+      APP_KEY_FILE = config.age.secrets.fireflyAppKey.path;
+      SITE_OWNER = "firefly-iii.${config.networking.hostName}@diogotc.com";
+      DB_CONNECTION = "pgsql";
+    };
+  };
+
   services.firefly-iii-data-importer = {
     enable = true;
     package = pkgs.firefly-iii-data-importer;
@@ -35,6 +51,17 @@ in {
     };
   };
 
+  services.postgresql = {
+    ensureUsers = [
+      {
+        name = dbUser;
+        ensureDBOwnership = true;
+        ensureClauses.login = true;
+      }
+    ];
+    ensureDatabases = [dbUser];
+  };
+
   # The data-importer module does not allow for variables to be passed in bulk, so we do this little hack
   systemd.services.firefly-iii-data-importer-setup.serviceConfig.EnvironmentFile = [
     # Contains variables:
@@ -148,7 +175,10 @@ in {
       enableACME = true;
       extraConfig = ''
         import NEBULA
-        reverse_proxy localhost:${toString portApp}
+        encode zstd gzip
+        root * ${config.services.firefly-iii.package}/public
+        php_fastcgi unix/${config.services.phpfpm.pools.firefly-iii.socket}
+        file_server
       '';
     };
     ${domainDataImporter} = {
@@ -164,22 +194,12 @@ in {
   };
 
   modules.impermanence.directories = [
+    config.services.firefly-iii.dataDir
     config.services.firefly-iii-data-importer.dataDir
   ];
 
-  modules.services.restic = {
-    paths = [
-      "/tmp/firefly_db.sql"
-      "${config.my.homeDirectory}/firefly-3"
-      configPathAutoDataImporter
-    ];
-
-    backupPrepareCommand = ''
-      ${pkgs.coreutils}/bin/install -b -m 600 /dev/null /tmp/firefly_db.sql
-      ${pkgs.docker}/bin/docker compose -f ${config.my.homeDirectory}/firefly-3/docker-compose.yml exec -T fireflyiiidb sh -c 'exec mysqldump --host=fireflyiiidb --user=$MYSQL_USER --password=$MYSQL_PASSWORD $MYSQL_DATABASE' > /tmp/firefly_db.sql
-    '';
-    backupCleanupCommand = ''
-      ${pkgs.coreutils}/bin/rm /tmp/firefly_db.sql
-    '';
-  };
+  modules.services.restic.paths = [
+    "${config.services.firefly-iii.dataDir}/storage/upload"
+    configPathAutoDataImporter
+  ];
 }
diff --git a/secrets/hera/fireflyAppKey.age b/secrets/hera/fireflyAppKey.age
@@ -0,0 +1,5 @@
+age-encryption.org/v1
+-> ssh-ed25519 HaxQeg GKHtaciq9FNvC9M5GMFsR/T1qlnj1Y1Vrqkrr2jLuzY
+DhWOU28AbgZsfd5y2WMpxX9doRZwz9hNU+CNjlvtoOs
+--- CXO6Q06qDt94fOpdrb+jFaKEP4NCzTd7c1HOV5farjs
+��ⱏ&=����̤t�?��x*"�P���Z���5���"��3�\2Ȱ��R���g������Cr

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
@@ -104,6 +104,7 @@ in
       "autoUpgradeHealthchecksUrl"
       "cloudflareToken"
       "diskstationSambaCredentials"
+      "fireflyAppKey"
       "fireflyAutoDataImporterEnv"
       "fireflyAutoDataImporterHealthchecksUrl"
       "fireflyDataImporterEnv"