+phishboard

hosts/AZ-PRM-1/secrets.nix

@@ -56,6 +56,9 @@ in {
           group = "postgres";
           mode = "0600";
         };
+        phishboard-env = {
+          file = ../../secrets/phishboard-env.age;
+        };
         smb-autoablage = {
           file = ../../secrets/smb-autoablage.age;
         };

hosts/AZ-PRM-1/services/default.nix

@@ -9,6 +9,7 @@
     ./n8n.nix
     ./netbird.nix
     ./pgadmin.nix
+    ./phishboard.nix
     ./postgres.nix
     ./printing.nix
     ./traefik.nix

hosts/AZ-PRM-1/services/phishboard.nix

@@ -0,0 +1,32 @@
+{
+  config,
+  inputs,
+  pkgs,
+  ...
+}: let
+  serviceName = "phishboard";
+  servicePort = config.m3ta.ports.get serviceName;
+in {
+  services.phishboard = {
+    enable = true;
+    package = inputs.phishboard.packages.${pkgs.stdenv.hostPlatform.system}.default;
+    host = "127.0.0.1";
+    port = servicePort;
+    environmentFile = config.age.secrets.phishboard-env.path;
+  };
+
+  services.traefik.dynamicConfigOptions.http = {
+    services.${serviceName}.loadBalancer.servers = [
+      {url = "http://localhost:${toString servicePort}/";}
+    ];
+
+    routers.${serviceName} = {
+      rule = "Host(`pb.l.az-gruppe.com`)";
+      tls = {
+        certResolver = "ionos";
+      };
+      service = serviceName;
+      entrypoints = "websecure";
+    };
+  };
+}

hosts/common/ports.nix

@@ -19,6 +19,7 @@
       netbird = 3038;
       azion-scheduler = 3039;
       azion-scheduler-proxy = 3049;
+      phishboard = 3055;
 
       metabase = 3013;
       baserow = 3050;