nixos-config/nixos/machines/chungus/trilium.nix

{ config, ... }:
{
  services.trilium-server = {
    enable = true;
    dataDir = "/srv/trilium";
    instanceName = "chungus";
    host = "10.23.42.28";
    #noAuthentication = true;
    nginx = {
      enable = true;
      hostName = "trilium.${config.networking.hostName}.private";
    };
  };

  services.nginx.virtualHosts."${config.services.trilium-server.nginx.hostName}".extraConfig = ''
    allow ${config.tinc.private.subnet};
    deny all;
  '';

}