+phishboard

flake.lock

@@ -1294,6 +1294,26 @@
         "type": "github"
       }
     },
+    "phishboard": {
+      "inputs": {
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1784207158,
+        "narHash": "sha256-Y8ZUZMBA/EZCt9qIFhZBC/39O+BofLjclmLyrFkCPLU=",
+        "ref": "refs/heads/master",
+        "rev": "514ee9a2e3541db65f6934a425d291de9782e7ce",
+        "revCount": 1,
+        "type": "git",
+        "url": "https://git.az-gruppe.com/AZ-Intec-GmbH/phishboard.git"
+      },
+      "original": {
+        "type": "git",
+        "url": "https://git.az-gruppe.com/AZ-Intec-GmbH/phishboard.git"
+      }
+    },
     "pyproject-build-systems": {
       "inputs": {
         "nixpkgs": [
@@ -1402,6 +1422,7 @@
         "nixpkgs": "nixpkgs_7",
         "nixpkgs-unstable": "nixpkgs-unstable",
         "nur": "nur_2",
+        "phishboard": "phishboard",
         "zugferd-service": "zugferd-service"
       }
     },

flake.nix

@@ -66,6 +66,10 @@
       url = "git+https://git.az-gruppe.com/AZ-Intec-GmbH/AZess";
       inputs.nixpkgs.follows = "nixpkgs";
     };
+    phishboard = {
+      url = "git+https://git.az-gruppe.com/AZ-Intec-GmbH/phishboard.git";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
   };
 
   outputs = {
@@ -168,6 +172,7 @@
           inputs.azion-scheduler.nixosModules.default
           inputs.zugferd-service.nixosModules.default
           inputs.azess.nixosModules.default
+          inputs.phishboard.nixosModules.default
         ];
       };
     };

hosts/AZ-PRM-1/secrets.nix

@@ -56,6 +56,9 @@ in {
           group = "postgres";
           mode = "0600";
         };
+        phishboard-env = {
+          file = ../../secrets/phishboard-env.age;
+        };
         smb-autoablage = {
           file = ../../secrets/smb-autoablage.age;
         };

hosts/AZ-PRM-1/services/default.nix

@@ -9,6 +9,7 @@
     ./n8n.nix
     ./netbird.nix
     ./pgadmin.nix
+    ./phishboard.nix
     ./postgres.nix
     ./printing.nix
     ./traefik.nix

hosts/AZ-PRM-1/services/phishboard.nix

@@ -0,0 +1,32 @@
+{
+  config,
+  inputs,
+  pkgs,
+  ...
+}: let
+  serviceName = "phishboard";
+  servicePort = config.m3ta.ports.get serviceName;
+in {
+  services.phishboard = {
+    enable = true;
+    package = inputs.phishboard.packages.${pkgs.stdenv.hostPlatform.system}.default;
+    host = "127.0.0.1";
+    port = servicePort;
+    environmentFile = config.age.secrets.phishboard-env.path;
+  };
+
+  services.traefik.dynamicConfigOptions.http = {
+    services.${serviceName}.loadBalancer.servers = [
+      {url = "http://localhost:${toString servicePort}/";}
+    ];
+
+    routers.${serviceName} = {
+      rule = "Host(`pb.l.az-gruppe.com`)";
+      tls = {
+        certResolver = "ionos";
+      };
+      service = serviceName;
+      entrypoints = "websecure";
+    };
+  };
+}

hosts/common/ports.nix

@@ -19,6 +19,7 @@
       netbird = 3038;
       azion-scheduler = 3039;
       azion-scheduler-proxy = 3049;
+      phishboard = 3055;
 
       metabase = 3013;
       baserow = 3050;

secrets.nix

@@ -45,6 +45,7 @@ in {
   "secrets/snipe-it-db-password.age".publicKeys = systems ++ users;
   "secrets/snipe-it-mail-password.age".publicKeys = systems ++ users;
   "secrets/pgadmin-pw.age".publicKeys = systems ++ users;
+  "secrets/phishboard-env.age".publicKeys = systems ++ users;
   "secrets/vaultwarden-env.age".publicKeys = systems ++ users;
   "secrets/vaultwarden-db.age".publicKeys = systems ++ users;
   "secrets/zammad-pw.age".publicKeys = systems ++ users;