memos add

nixosModules/server/default.nix

@@ -8,6 +8,7 @@
     # ./open-webui.nix
     ../software/beets
     ./calibre-web.nix
+    ./memos.nix
     ./immich.nix
     ./mealie.nix
     ./miniflux.nix

nixosModules/server/memos.nix

@@ -0,0 +1,19 @@
+{
+  config,
+  xlib,
+  ...
+}:
+{
+  services.memos = {
+    enable = true;
+    openFirewall = true;
+    settings = {
+        #MEMOS_MODE = "prod";
+        MEMOS_ADDR = "127.0.0.1";
+        MEMOS_PORT = "5230";
+        #MEMOS_DATA = config.services.memos.dataDir;
+        MEMOS_DRIVER = "sqlite";
+        MEMOS_INSTANCE_URL = "http://localhost:5230";
+    };
+  };
+}

nixosModules/server/nginx.nix

@@ -55,6 +55,20 @@
             }
           ];
         };
+        "localhost:5230" = {
+          forceSSL = false;
+          enableACME = false;
+          listen = [
+            {
+              addr = "100.64.0.0";
+              port = 5230;
+            }
+            {
+              addr = "192.168.1.20";
+              port = 5230;
+            }
+          ];
+        };
       };
     };
   };

nixosModules/vds/nginx.nix

@@ -48,6 +48,18 @@ in
             client_max_body_size 5G;
           '';
         };
+        "memos.zeroq.ru" = {
+          enableACME = true;
+          forceSSL = true;
+          kTLS = true;
+          locations."/" = {
+            proxyPass = "http://${server}:5230";
+            proxyWebsockets = true; # collabora uses websockets
+          };
+          extraConfig = ''
+            client_max_body_size 5G;
+          '';
+        };
         "immich.zeroq.ru" = {
           # 31.57.105.253
           forceSSL = true;