nixos-config/profiles/servers/outline.nix

{ config, pkgs, lib, ... }: {
  secrets = let
    default = {
      owner = config.services.outline.user;
      services = [ "outline.service" ];
    };
  in {
    minio-outline = default;
    outline-mail = default;
    outline-oidc = default;
    outline-key = default;
    outline-utils = default;
  };
  services.outline = {
    enable = true;
    port = 3010;
    publicUrl = "https://docs.ataraxiadev.com";
    forceHttps = false;

    storage = {
      accessKey = "outline";
      secretKeyFile = config.secrets.minio-outline.decrypted;
      region = config.services.minio.region;
      uploadBucketUrl = "https://s3.ataraxiadev.com";
      uploadBucketName = "outline";
      # uploadMaxSize = 0;
    };

    oidcAuthentication = {
      authUrl = "https://auth.ataraxiadev.com/application/o/authorize/";
      tokenUrl = "https://auth.ataraxiadev.com/application/o/token/";
      userinfoUrl = "https://auth.ataraxiadev.com/application/o/userinfo/";
      clientId = "tUs7tv85xlK3W4VOw7AQDMYNXqibpV5H8ofR7zix";
      clientSecretFile = config.secrets.outline-oidc.decrypted;
      scopes = [ "openid" "email" "profile" ];
      usernameClaim = "email";
      displayName = "openid";
    };

    smtp = {
      host = "mail.ataraxiadev.com";
      port = 465;
      secure = true;
      username = "outline@ataraxiadev.com";
      passwordFile = config.secrets.outline-mail.decrypted;
      fromEmail = "Outline <no-reply@ataraxiadev.com>";
      replyEmail = "Outline <outline@ataraxiadev.com>";
    };

    secretKeyFile = config.secrets.outline-key.decrypted;
    utilsSecretFile = config.secrets.outline-utils.decrypted;
  };

  persist.state.directories = [
    "/var/lib/redis-outline"
  ];
}