rope/nixos
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

services: add Flatnotes note-sharing at notes.nordhammer.it

Browse source 
Replaces Vesktop for quick cross-device note-passing. Uses Flatnotes
with auth disabled so Authelia is the only login required.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
rope 2026-05-17 14:19:52 +01:00
parent 43c251b90d
commit db413ad808
4 changed files with 23 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
common.nix
View file

@ -41,6 +41,7 @@
./services/sabnzbd.nix ./services/sabnzbd.nix
./services/forgejo-runner.nix ./services/forgejo-runner.nix
./services/code-server.nix ./services/code-server.nix
./services/memos.nix
]; ];
### Make build time quicker ### Make build time quicker

1
services/authelia.nix
View file

@ -82,6 +82,7 @@ in
{ domain = "profilarr.nordhammer.it"; policy = "one_factor"; } { domain = "profilarr.nordhammer.it"; policy = "one_factor"; }
{ domain = "sabnzbd.nordhammer.it"; policy = "one_factor"; } { domain = "sabnzbd.nordhammer.it"; policy = "one_factor"; }
{ domain = "code.nordhammer.it"; policy = "one_factor"; } { domain = "code.nordhammer.it"; policy = "one_factor"; }
{ domain = "notes.nordhammer.it"; policy = "one_factor"; }
]; ];
}; };

20
services/memos.nix Normal file
View file

@ -0,0 +1,20 @@
# services/memos.nix — Lightweight self-hosted notes at notes.nordhammer.it
# Uses Flatnotes with auth disabled — Authelia is the only gate.
{ config, lib, ... }:
{
config = lib.mkIf (config.networking.hostName == "FredOS-Mediaserver") {
virtualisation.oci-containers.containers.flatnotes = {
image = "dullage/flatnotes:latest";
ports = [ "127.0.0.1:5230:8080" ];
volumes = [ "/var/lib/flatnotes:/app/data" ];
environment = {
FLATNOTES_AUTH_TYPE = "none";
};
};
systemd.tmpfiles.rules = [
"d /var/lib/flatnotes 0750 root root -"
];
};
}

1
services/nginx.nix
View file

@ -115,6 +115,7 @@ in
"profilarr.nordhammer.it" = protectedProxy 6868; "profilarr.nordhammer.it" = protectedProxy 6868;
"sabnzbd.nordhammer.it" = protectedProxy 8085; "sabnzbd.nordhammer.it" = protectedProxy 8085;
"code.nordhammer.it" = protectedProxy 4444; "code.nordhammer.it" = protectedProxy 4444;
"notes.nordhammer.it" = protectedProxy 5230;
# --- Local-only: serves update history JSON to Homepage's customapi widget --- # --- Local-only: serves update history JSON to Homepage's customapi widget ---
"homepage-updates.local" = { "homepage-updates.local" = {