make miniflux module (broken)

hosts/chmura/services/default.nix

@@ -5,10 +5,10 @@ _: {
         #./discord-autodelete.nix
         ./firefox-syncserver.nix
         ./forgejo.nix
-        #./freshrss.nix
         #./grafana.nix
         ./i2pd.nix
         #./minecraft.nix
+        ./miniflux.nix
         ./ntfy-sh.nix
         ./owncast.nix
         ./plausible.nix

hosts/chmura/services/freshrss.nix

@@ -1,22 +0,0 @@
-_: {
-    services.freshrss = {
-        enable = true;
-        baseUrl = "http://f.jacekpoz.pl";
-        database = {
-            port = 7425;
-            tableprefix = "freshrss";
-            type = "pgsql";
-        };
-        defaultUser = "jacek";
-        language = "pl";
-        #passwordFile = "/run/secrets/freshrss";
-        virtualHost = null;
-    };
-
-    services.caddy = {
-        enable = true;
-        virtualHosts."f.jacekpoz.pl".extraConfig = ''
-            reverse_proxy * localhost:4834
-        '';
-    };
-}

hosts/chmura/services/miniflux.nix

@@ -0,0 +1,24 @@
+{
+    config,
+    ...
+}: let
+    port = "4834";
+in {
+    age.secrets.miniflux-admin-credentials.file = ../../../secrets/miniflux-admin-credentials.age;
+
+    services.miniflux = {
+        enable = true;
+        adminCredentialsFile = config.age.secrets.miniflux-admin-credentials.path;
+        config = {
+            PORT = port;
+            BASE_URL = "https://rss.jacekpoz.pl/";
+        };
+    };
+
+    services.caddy = {
+        enable = true;
+        virtualHosts."rss.jacekpoz.pl".extraConfig = ''
+            reverse_proxy * localhost:${port}
+        '';
+    };
+}

secrets/secrets.nix

@@ -20,4 +20,5 @@ in {
     "plausible-secret-keybase.age".publicKeys = niks ++ chmura ++ del;
     "plausible-admin-password.age".publicKeys = niks ++ chmura ++ del;
     "yubikey-u2f-keys.age".publicKeys = niks ++ chmura ++ del;
+    "miniflux-admin-credentials.age".publicKeys = niks ++ chmura ++ del;
 }