ghost: enabled writefreely

hosts/ghost.nix

@@ -78,6 +78,16 @@
     extraConfig.SINGLE_USER_MODE = "true";
   };
 
+  services.writefreely = {
+    enable = true;
+    acme.enable = true;
+    nginx.enable = true;
+    nginx.forceSSL = true;
+    host = "blog.lelgenio.xyz";
+    admin.name = "lelgenio";
+    admin.initialPasswordFile = config.age.secrets.ghost-writefreely.path;
+  };
+
   services.nginx.virtualHosts.${config.services.nextcloud.hostName} = {
     forceSSL = true;
     enableACME = true;

secrets/secrets.nix

@@ -8,4 +8,5 @@ in
   "lelgenio-cachix.age".publicKeys = [ main_ssh_public_key ];
   "monolith-nix-serve-privkey.age".publicKeys = [ main_ssh_public_key ];
   "ghost-nextcloud.age".publicKeys = [ main_ssh_public_key ];
+  "ghost-writefreely.age".publicKeys = [ main_ssh_public_key ];
 }

system/secrets.nix

@@ -11,10 +11,16 @@
     secrets.monolith-nix-serve-privkey.file =
       ../secrets/monolith-nix-serve-privkey.age;
     secrets.ghost-nextcloud = {
-      file = ../secrets/monolith-nix-serve-privkey.age;
+      file = ../secrets/ghost-nextcloud.age;
       mode = "400";
       owner = "nextcloud";
       group = "nextcloud";
     };
+    secrets.ghost-writefreely = {
+      file = ../secrets/ghost-writefreely.age;
+      mode = "400";
+      owner = "writefreely";
+      group = "writefreely";
+    };
   };
 }