Added a memos instance

2 files changed, 31 insertions, 0 deletions

diff --git a/modules/caddy.nix b/modules/caddy.nix
index f82c7f0..64418c3 100644
--- a/modules/caddy.nix
+++ b/modules/caddy.nix
@@ -37,6 +37,13 @@
         '';
       };
 
+      # Memos - note-taking app
+      "notes.karanj.com" = {
+        extraConfig = ''
+          reverse_proxy 127.0.0.1:5230
+        '';
+      };
+
       # cgit - public read-only git viewer + smart HTTP for git clone/pull.
       # Both cgit browsing and git-http-backend (clone/pull) are served by
       # the same nginx vhost on 8086 - nginx itself routes between them by
diff --git a/modules/memos.nix b/modules/memos.nix
new file mode 100644
index 0000000..bc80e24
--- /dev/null
+++ b/modules/memos.nix
@@ -0,0 +1,24 @@
+{ config, ... }:
+
+# Memos - lightweight, privacy-first note-taking app.
+#
+# Native NixOS module (services.memos, available since this flake's pinned
+# nixpkgs release). Listens on 127.0.0.1:5230; Caddy handles public HTTPS
+# termination. Uses the module's default sqlite driver - no separate
+# database service needed, unlike Miniflux's Postgres.
+#
+# No secrets involved: the first account is created directly in the web UI
+# on first visit to https://notes.karanj.com.
+{
+  services.memos = {
+    enable = true;
+    settings = {
+      MEMOS_MODE = "prod";
+      MEMOS_ADDR = "127.0.0.1";
+      MEMOS_PORT = "5230";
+      MEMOS_DRIVER = "sqlite";
+      MEMOS_DATA = config.services.memos.dataDir;
+      MEMOS_INSTANCE_URL = "https://notes.karanj.com";
+    };
+  };
+}