fix(box): wallabag is working again!!!

hosts/profiles/wallabag/default.nix

@@ -1,10 +1,10 @@
 { self, pkgs, config, lib, ... }:
 
 {
-  # age.secrets.wallabag-password.file = "${self}/secrets/wallabag-password.age";
-  # age.secrets.wallabag-secret.file = "${self}/secrets/wallabag-secret.age";
-  # age.secrets.wallabag-password.owner = "wallabag";
-  # age.secrets.wallabag-secret.owner = "wallabag";
+  age.secrets.wallabag-password.file = "${self}/secrets/wallabag-password.age";
+  age.secrets.wallabag-secret.file = "${self}/secrets/wallabag-secret.age";
+  age.secrets.wallabag-password.owner = "wallabag";
+  age.secrets.wallabag-secret.owner = "wallabag";
   services.postgresql = {
     enable = true;
     package = pkgs.postgresql_15;
@@ -18,74 +18,20 @@
       }
     ];
     authentication = ''
-      local wallabag all md5
+      local wallabag all peer
     '';
   };
 
   services.wallabag = {
     enable = true;
-    hostName = "read.mossnet.lan";
+    domain = "read.mossnet.lan";
+    virtualHost.enable = true;
     package = pkgs.my-wallabag;
-    dataDir = "/var/lib/wallabag";
-    conf = ''
-      # This file is a "template" of what your parameters.yml file should look like
-      parameters:
-          database_driver: pdo_pgsql
-          database_host: localhost
-          database_port: ~
-          database_name: wallabag
-          database_user: wallabag
-          database_password: wallabag 
-          # For SQLite, database_path should be "%kernel.project_dir%/data/db/wallabag.sqlite"
-          database_path: ~
-          database_table_prefix: wallabag_
-          database_socket: null
-          # with PostgreSQL and SQLite, you must set "utf8"
-          database_charset: utf8
-
-          domain_name: http://read.mossnet.lan
-          server_name: "mossnet wallabag instance"
-
-          mailer_dsn: null://
-          locale: en
-
-          # A secret key that's used to generate certain security-related tokens
-          secret: SAFGOECRIlfal89oe6u0(*^dsaaih961
-
-          # two factor stuff
-          twofactor_auth: false
-          twofactor_sender: no-reply@wallabag.org
-
-          # fosuser stuff
-          fosuser_registration: false
-          fosuser_confirmation: true
-
-          # how long the access token should live in seconds for the API
-          fos_oauth_server_access_token_lifetime: 3600
-          # how long the refresh token should life in seconds for the API
-          fos_oauth_server_refresh_token_lifetime: 1209600
-
-          from_email: ops@sealight.xyz
-
-          rss_limit: 50
-
-          # RabbitMQ processing
-          rabbitmq_host: localhost
-          rabbitmq_port: 5672
-          rabbitmq_user: guest
-          rabbitmq_password: guest
-          rabbitmq_prefetch_count: 10
-
-          # Redis processing
-          redis_scheme: tcp
-          redis_host: localhost
-          redis_port: 6379
-          redis_path: null
-          redis_password: null
-
-          # sentry logging
-          sentry_dsn: ~
-    '';
+    # Systemd now defaults to /var/lib?
+    # dataDir = "/var/lib/wallabag";
+    parameters = {
+      "env(SECRET_FILE)" = config.age.secrets.wallabag-secret.path;
+      secret = "%env(file:resolve:SECRET_FILE)%";
+    };
   };
-  # networking.firewall.allowedTCPPorts = [ 8080 ];
 }