nixos-config/machines/read/miniflux/default.nix

{ config, ... }:
{
  services.miniflux = {
    enable = true;
    config = {
      BASE_URL = "https://read.datarift.nl";
      POLLING_SCHEDULER = "entry_frequency";
      OAUTH2_PROVIDER = "oidc";
      OAUTH2_REDIRCT_URL = "https://read.datarift.nl/oauth2/oidc/callback";
      OAUTH2_OIDC_DISCOVERY_ENDPOINT = "https://id.datarift.nl/realms/datarift/";
      WEBAUTHN = 1;
    };
    adminCredentialsFile = config.sops.secrets.miniflux-env.path;
  };
}