nixos-config/machines/read/miniflux/default.nix

{ config, ... }:
{
  services.miniflux = {
    enable = true;
    config = {
      BASE_URL = "https://read.datarift.nl";
      POLLING_SCHEDULER = "entry_frequency";
      CLEANUP_ARCHIVE_UNREAD_DAYS = -1;
      CLEANUP_ARCHIVE_READ_DAYS = -1;
      OAUTH2_PROVIDER = "oidc";
      OAUTH2_REDIRECT_URL = "https://read.datarift.nl/oauth2/oidc/callback";
      OAUTH2_OIDC_DISCOVERY_ENDPOINT = "https://id.datarift.nl/realms/datarift";
      WEBAUTHN = 1;
      METRICS_COLLECTOR = 1;
      METRICS_ALLOWED_NETWORKS = "100.64.0.0/10,127.0.0.0/8";
    };
    adminCredentialsFile = config.sops.secrets.miniflux-env.path;
  };
}