feat: massive refactoring...

config/finances-fireflyiii.nix

@@ -0,0 +1,29 @@
+{
+  config,
+  tools,
+  ...
+}:
+let
+  name = "finances";
+  hostname = tools.build_hostname name;
+  ip = tools.build_ip name;
+in
+{
+  services.firefly-iii = {
+    enable = true;
+    enableNginx = true;
+    settings = {
+      SITE_OWNER = config.globals.master.email;
+      DB_CONNECTION = "pgsql";
+      DB_HOST = ip;
+      DB_PORT = 5432;
+      DB_DATABASE = hostname;
+      DB_USERNAME = hostname;
+      DB_PASSWORD = config.my-lxc.finances.db.password;
+      AUTHENTICATION_GUARD = "remote_user_guard";
+      AUTHENTICATION_GUARD_HEADER = "HTTP_REMOTE_EMAIL";
+      AUTHENTICATION_GUARD_EMAIL = "HTTP_REMOTE_EMAIL";
+      APP_KEY_FILE = config.age.secrets.finances-app-key.path;
+    };
+  };
+}