depot/ops/nixos/bvm-paperless/default.nix

# SPDX-FileCopyrightText: 2022 Luke Granger-Brown <depot@lukegb.com>
#
# SPDX-License-Identifier: Apache-2.0

{ depot, pkgs, config, ... }:
let
  inherit (depot.ops) secrets;
in {
  imports = [
    ../lib/bvm.nix
  ];

  # Networking!
  networking = {
    hostName = "bvm-paperless";
    hostId = "c8d6f81f";

    interfaces.enp1s0 = {
      ipv4.addresses = [{ address = "10.100.0.211"; prefixLength = 23; }];
    };
  };
  my.ip.tailscale = "100.85.236.121";

  services.paperless-ng = {
    enable = true;
    package = pkgs.paperless-ngx;
    address = config.my.ip.tailscale;
    extraConfig = {
      PAPERLESS_ALLOWED_HOSTS = "paperless.int.lukegb.com";
      PAPERLESS_CORS_ALLOWED_HOSTS = "https://paperless.int.lukegb.com";
      PAPERLESS_ENABLE_HTTP_REMOTE_USER = "true";
    };
  };

  system.stateVersion = "22.05";
}