Harald Hoyer
06d26311fd
Lays the groundwork for Sparda-Bank Südwest transaction sync via direct FinTS (no third-party data proxy). aqbanking-cli in the system PATH, persistent state at /var/lib/firefly-aqbanking, sops slot for the online-banking PIN. Initial enrollment must be done interactively on the host; systemd timer for automated fetches comes in a follow-up.
65 lines
1.6 KiB
Nix
65 lines
1.6 KiB
Nix
{ config, pkgs, ... }:
|
|
let
|
|
domain = "firefly.hoyer.world";
|
|
importDomain = "firefly-import.hoyer.world";
|
|
aqHome = "/var/lib/firefly-aqbanking";
|
|
inbox = "/var/lib/firefly-iii-data-importer/inbox";
|
|
vhostBase = {
|
|
enableACME = false;
|
|
useACMEHost = "internal.hoyer.world";
|
|
forceSSL = true;
|
|
};
|
|
in
|
|
{
|
|
sops.secrets = {
|
|
"firefly/app_key" = {
|
|
sopsFile = ../../../.secrets/sgx/firefly.yaml;
|
|
owner = "firefly-iii";
|
|
};
|
|
"firefly/sparda_pin" = {
|
|
sopsFile = ../../../.secrets/sgx/firefly.yaml;
|
|
owner = "firefly-iii-data-importer";
|
|
};
|
|
};
|
|
|
|
environment.systemPackages = [ pkgs.aqbanking ];
|
|
|
|
systemd.tmpfiles.rules = [
|
|
"d ${aqHome} 0700 firefly-iii-data-importer firefly-iii-data-importer -"
|
|
"d ${inbox} 0700 firefly-iii-data-importer firefly-iii-data-importer -"
|
|
];
|
|
|
|
services = {
|
|
firefly-iii = {
|
|
enable = true;
|
|
enableNginx = true;
|
|
virtualHost = domain;
|
|
settings = {
|
|
APP_ENV = "production";
|
|
APP_KEY_FILE = config.sops.secrets."firefly/app_key".path;
|
|
SITE_OWNER = "harald.hoyer@gmail.com";
|
|
TZ = "Europe/Berlin";
|
|
DEFAULT_LANGUAGE = "de_DE";
|
|
DEFAULT_LOCALE = "de_DE";
|
|
TRUSTED_PROXIES = "**";
|
|
LOG_CHANNEL = "stack";
|
|
};
|
|
};
|
|
|
|
firefly-iii-data-importer = {
|
|
enable = true;
|
|
enableNginx = true;
|
|
virtualHost = importDomain;
|
|
settings = {
|
|
FIREFLY_III_URL = "https://${domain}";
|
|
VANITY_URL = "https://${importDomain}";
|
|
TZ = "Europe/Berlin";
|
|
};
|
|
};
|
|
|
|
nginx.virtualHosts = {
|
|
${domain} = vhostBase;
|
|
${importDomain} = vhostBase;
|
|
};
|
|
};
|
|
}
|