masive rewriting and setup of server files

modules/servers/mealie.nix

@@ -2,44 +2,41 @@
   lib,
   config,
   proxyReverse,
+  setup,
   ...
 }:
 let
-  port = 9925;
-  domain = "mealie.${config.my.domain}";
-  url = "https://${domain}";
+  cfg = config.my.servers.mealie;
 in
 {
-  options.my.servers.mealie.enable = lib.mkEnableOption "enable";
-  config = lib.mkIf config.my.servers.mealie.enable {
-    sops.secrets.mealie.sopsFile = ../../secrets/env.yaml;
-    virtualisation.oci-containers.containers.mealie = {
-      autoStart = true;
-      image = "ghcr.io/mealie-recipes/mealie:v1.4.0";
-      ports = [ "${toString port}:9000" ];
-      volumes = [ "${config.my.containerData}/mealie:/app/data/" ];
-      environmentFiles = [ config.sops.secrets.mealie.path ];
-      environment = {
-        TZ = "America/Mexico_City";
-        ALLOW_SIGNUP = "true";
-        PUID = "1000";
-        PGID = "100";
-        MAX_WORKERS = "1";
-        WEB_CONCURRENCY = "1";
-        BASE_URL = url;
-        SMTP_HOST = "smtp.gmail.com";
-        SMTP_PORT = "587";
-      };
-      extraOptions = [
-        "--memory=1g" # VA-API (omit for NVENC)
-      ];
-      labels = {
-        "flame.type" = "application";
-        "flame.name" = "Mealie";
-        "flame.url" = url;
-        "flame.icon" = "fridge";
+  disabledModules = [ "services/web-apps/mealie.nix" ];
+  imports = [ ../../pkgs/mealie-service.nix ];
+  options.my.servers.mealie = setup.mkOptions "mealie" "mealie" 9925;
+  config = {
+    networking.firewall.allowedTCPPorts = lib.mkIf (!cfg.isLocal) [ cfg.port ];
+    sops.secrets = lib.mkIf cfg.enable { mealie.sopsFile = ../../secrets/env.yaml; };
+    services = {
+      mealie = lib.mkIf cfg.enable {
+        enable = true;
+        inherit (cfg) port;
+        settings = {
+          TZ = config.my.timeZone;
+          DEFAULT_GROUP = "Home";
+          BASE_URL = cfg.url;
+          API_DOCS = "false";
+          ALLOW_SIGNUP = "false";
+          DB_ENGINE = "postgres";
+          POSTGRES_URL_OVERRIDE = "postgresql://${cfg.name}:@/${cfg.name}?host=${config.my.postgresSocket}";
+          MAX_WORKERS = "1";
+          WEB_CONCURRENCY = "1";
+          SMTP_HOST = "smtp.gmail.com";
+          SMTP_PORT = "587";
+        };
+        credentialsFile = config.sops.secrets.mealie.path;
       };
+      nginx.virtualHosts."${cfg.host}" = lib.mkIf cfg.enableProxy (
+        proxyReverse cfg.hostName cfg.port // { }
+      );
     };
-    services.nginx.virtualHosts."${domain}" = proxyReverse port // { };
   };
 }