feat(todo): added desktop application for TODO: Planify

lib/default.nix

@@ -2,10 +2,11 @@
 with lib;
 let
   dotfilesPath = ./../dotfiles;
+  secretDir = ./../secrets;
 in
 attrsets.mapAttrs'
   (n: v: {
     name = strings.removeSuffix ".nix" n;
-    value = import (./. + "/${n}") { inherit lib pkgs dotfilesPath privateRepo unstable inputs system; };
+    value = import (./. + "/${n}") { inherit lib pkgs dotfilesPath privateRepo unstable inputs system secretDir; };
   })
   (builtins.readDir ./.)

lib/desktop.nix

@@ -1,9 +1,9 @@
-{ pkgs, lib, unstable, ... }:
+{ pkgs, lib, unstable, secretDir, ... }:
 with lib;
 with lib.my;
 let
   mkDesktopApp = config: dotfiles: name: desktopName: import (./../modules/desktop/submodules + "/${name}.nix") {
-    inherit pkgs dotfiles config unstable lib desktopName;
+    inherit pkgs dotfiles config unstable lib desktopName secretDir;
   };
 in
 {

lib/hosts.nix

@@ -1,4 +1,4 @@
-{ lib, system, pkgs, unstable, privateRepo, inputs, dotfilesPath, ... }:
+{ lib, system, pkgs, unstable, privateRepo, inputs, dotfilesPath, secretDir, ... }:
 with lib;
 with lib.my;
 let
@@ -39,8 +39,7 @@ in
       inherit system;
 
       specialArgs = {
-        inherit pkgs unstable lib dotfiles isDevMode inputs privateRepo system hostname desktopName;
-        secretDir = ./../secrets;
+        inherit pkgs unstable lib dotfiles isDevMode inputs privateRepo system hostname desktopName secretDir;
         templateDir = ./../templates;
       };
 

modules/desktop/submodules/todo.nix

@@ -0,0 +1,40 @@
+{ lib, unstable, secretDir, ... }:
+with lib;
+with lib.my;
+let
+  port = 5232;
+  certPath = (secretDir + "/certificate.pem");
+  keyPath = (secretDir + "/privatekey.pem");
+in
+{
+  autostart = autostart.mkAutostart { programs = [ "planify" ]; pkg = unstable; };
+
+  config = {
+    networking.firewall.interfaces.eno1.allowedTCPPorts = [ port ];
+
+    services = {
+      accounts-daemon.enable = true;
+      passSecretService.enable = true;
+      radicale = {
+        enable = true;
+        settings = {
+          server = {
+            hosts = [ "0.0.0.0:${builtins.toString port}" ];
+            ssl = true;
+            certificate = builtins.toString certPath;
+            key = builtins.toString keyPath;
+          };
+          auth = {
+            type = "htpasswd";
+            htpasswd_filename = "/var/lib/radicale/users";
+            htpasswd_encryption = "bcrypt";
+          };
+        };
+      };
+    };
+
+    security.pki.certificateFiles = [ certPath ];
+
+    home-manager.users.wittano.home.packages = with unstable; [ planify ];
+  };
+}