rest server

modules/hosts/soteria/soteria.nix

@@ -47,8 +47,8 @@ in
           ];
           lifetime = "12h";
           renew.onCalendar = "*:3/15";
-          renew.reloadUnits = [ "forgejo.service" ];
-          certReaders = [ config.services.forgejo.user "postgres" ];
+          renew.reloadUnits = [ "forgejo.service" "restic-rest-server.service" ];
+          certReaders = [ config.services.forgejo.user "restic" ];
         };
         forgejo = {
           enable = true;
@@ -57,11 +57,25 @@ in
           port = 443;
         };
 
+        networking.firewall.allowedTCPPorts = [ 8000 ];
+        services.restic.server = {
+          enable = true;
+          privateRepos = true;
+          listenAddress = "0.0.0.0:8000";
+          extraFlags = [
+            "--no-auth"
+            "--tls"
+            "--tls-cert=${config.mtls.certFile}"
+            "--tls-key=${config.mtls.keyFile}"
+          ];
+        };
+
         loginText.extraServiceStatus = {
           Docker = "docker";
           "mTLS Renewal" = "mtls-renew.timer";
           Forgejo = "forgejo.service";
           "Forgejo Backup" = "forgejo-dump.timer";
+          "Restic REST Server" = "restic-rest-server.service";
         };
 
         step-ssh-host.hostname = hostname;
@@ -79,6 +93,7 @@ in
         environment.systemPackages = [
           inputs.self.packages.${pkgs.stdenv.hostPlatform.system}.janus-ca
           inputs.self.packages.${pkgs.stdenv.hostPlatform.system}.my-neovim
+          inputs.self.packages.${pkgs.stdenv.hostPlatform.system}.jsl-zsh
         ];
       })
     ];