Skip to content

freshrss

Example

nix
{config, ...}: {
  freshrss = {
    enable = true;
    oidc = {
      enable = true;
      clientSecretHash = "$pbkdf2-sha512$...";
      clientSecretFile = config.sops.secrets."freshrss/authelia/client_secret".path;
      cryptoKeyFile = config.sops.secrets."freshrss/authelia/crypto_key".path;
    };
  };
}

Stack Options

nps.stacks.freshrss.adminProvisioning.apiPasswordFile

Path to a file containing the admin API password

Type
plaintext
absolute path
Default
nix
null
Declaration

nps.stacks.freshrss.adminProvisioning.email

Email address for the admin user

Type
plaintext
string
Declaration

nps.stacks.freshrss.adminProvisioning.enable

Whether to automatically create an admin user on the first run. If set to false, you will be prompted to create an admin user when visiting the FreshRSS web interface for the first time. This only affects the first run of the container.

If you want to use OIDC login, disable this option. The first logged in OIDC user will be admin in that case. See https://freshrss.github.io/FreshRSS/en/admins/16_OpenID-Connect.html

Type
plaintext
boolean
Default
nix
false
Declaration

nps.stacks.freshrss.adminProvisioning.passwordFile

Path to a file containing the admin user password

Type
plaintext
absolute path
Default
nix
null
Declaration

nps.stacks.freshrss.adminProvisioning.username

Username for the admin user

Type
plaintext
string
Default
nix
"admin"
Declaration

nps.stacks.freshrss.containers.freshrss

Alias of {option}services.podman.containers.freshrss.

Type
plaintext
submodule
Declaration

nps.stacks.freshrss.enable

Whether to enable freshrss.

Type
plaintext
boolean
Default
nix
false
Example
nix
true
Declaration

nps.stacks.freshrss.oidc.clientSecretFile

The file containing the client secret for the OIDC client that will be registered in Authelia.

Type
plaintext
string
Declaration

nps.stacks.freshrss.oidc.clientSecretHash

The hashed client_secret. Will be set in the Authelia client config. For examples on how to generate a client secret, see

https://www.authelia.com/integration/openid-connect/frequently-asked-questions/#client-secret

Type
plaintext
string
Declaration

nps.stacks.freshrss.oidc.cryptoKeyFile

Opaque key used for internal encryption.

Type
plaintext
string
Declaration

nps.stacks.freshrss.oidc.enable

Whether to enable OIDC login with Authelia. This will register an OIDC client in Authelia and setup the necessary configuration.

The first user created with OIDC login on initial setup will be admin. Make sure to follow the 'Initial Setup Process' instructions at https://freshrss.github.io/FreshRSS/en/admins/16_OpenID-Connect.html

For details, see:

Type
plaintext
boolean
Default
nix
false
Declaration

nps.stacks.freshrss.oidc.userGroup

Users of this group will be able to log in

Type
plaintext
string
Default
nix
"freshrss_user"
Declaration