zammad: init

flake.nix

@@ -65,6 +65,7 @@
             ./modules/infoscreen.nix
             ./modules/manual.nix
             ./modules/sharepic.nix
+            ./modules/zammad.nix
             {
               sops.defaultSopsFile = ./secrets/quitte.yaml;
             }

modules/zammad.nix

@@ -0,0 +1,29 @@
+{ config, lib, pkgs, ... }:
+let
+  domain = "tickets.${config.networking.domain}";
+in
+{
+  services.zammad = {
+    enable = true;
+    database = {
+      createLocally = true;
+      type = "PostgreSQL";
+    };
+    port = 8085;
+    secretKeyBaseFile = config.sops.secrets."zammad_secret".path;
+  };
+
+  services.nginx.virtualHosts.${domain} = {
+    enableACME = true;
+    forceSSL = true;
+    locations."/" = {
+      proxyPass = "http://localhost:${toString config.services.zammad.port}";
+    };
+    locations."/ws" = {
+      proxyPass = "http://localhost:${toString config.services.zammad.websocketPort}";
+      proxyWebsockets = true;
+    };
+  };
+
+  sops.secrets."zammad_secret".owner = "zammad";
+}