From 635b4f295ab6af02053a0efca9cb2d002b9c17ff Mon Sep 17 00:00:00 2001
From: Ingolf Wagner <contact@ingolf-wagner.de>
Date: Mon, 15 May 2023 18:35:35 +0200
Subject: [PATCH] add trilium

---
 nixos/machines/chungus/configuration.nix |  2 +-
 nixos/machines/chungus/trilium.nix       | 16 +++++++++++-----
 2 files changed, 12 insertions(+), 6 deletions(-)

diff --git a/nixos/machines/chungus/configuration.nix b/nixos/machines/chungus/configuration.nix
index c597796..ae3865c 100644
--- a/nixos/machines/chungus/configuration.nix
+++ b/nixos/machines/chungus/configuration.nix
@@ -40,7 +40,7 @@
     ./syncthing.nix
 
     ./kiosk.nix
-    #./trilium.nix
+    ./trilium.nix
 
   ];
 
diff --git a/nixos/machines/chungus/trilium.nix b/nixos/machines/chungus/trilium.nix
index 59de5ac..6c70c12 100644
--- a/nixos/machines/chungus/trilium.nix
+++ b/nixos/machines/chungus/trilium.nix
@@ -5,10 +5,16 @@
     dataDir = "/srv/trilium";
     instanceName = "chungus";
     host = "10.23.42.28";
-    noAuthentication = true;
-    #nginx = {
-    #  enable = true;
-    #  hostName = "trilium.${config.networking.hostName}.private";
-    #};
+    #noAuthentication = true;
+    nginx = {
+      enable = true;
+      hostName = "trilium.${config.networking.hostName}.private";
+    };
   };
+
+  services.nginx.virtualHosts."${config.services.trilium-server.nginx.hostName}".extraConfig = ''
+    allow ${config.tinc.private.subnet};
+    deny all;
+  '';
+
 }