feat: mailserver

system/modules/actual.nix

@@ -0,0 +1,36 @@
+{
+  fqdn ? null,
+}:
+{ config, ... }:
+let
+  inherit (builtins) toString;
+  finalFqdn = if fqdn != null then fqdn else config.networking.fqdn;
+in
+{
+  services.actual = {
+    enable = true;
+    settings = {
+      port = 31000;
+      hostname = "127.0.0.1";
+      serverFiles = "/var/lib/actual/server-files";
+      userFiles = "/var/lib/actual/user-files";
+      loginMethod = "openid";
+    };
+  };
+
+  services.actual-budget-api = {
+    enable = true;
+    listenPort = 31001;
+    listenHost = "127.0.0.1";
+    serverURL = "https://${finalFqdn}";
+  };
+
+  services.nginx.virtualHosts."${finalFqdn}" = {
+    enableACME = true;
+    forceSSL = true;
+
+    locations."/api/".proxyPass =
+      "http://localhost:${toString config.services.actual-budget-api.listenPort}/";
+    locations."/".proxyPass = "http://localhost:${toString config.services.actual.settings.port}";
+  };
+}