Hippocampus: Anki Sync Server

machines/hippocampus/servers/public/anki.nix

@@ -1,24 +1,18 @@
 {config, pkgs, ...}:
 
 {
-  systemd.services.ankisync = {
+  sops.secrets.anki = { };
-    enable = false;
+  services.anki-sync-server = {
-    wantedBy = ["network-online.target"];
+    enable = true;
-    script = ''
+    users.david = {
-      ${pkgs.anki-bin}/bin/anki --syncserver
+      username = "David";
-    '';
+      passwordFile = config.sops.secrets.anki.path;
-    serviceConfig = {
-      Type = "simple";
-      DynamicUser = true;
-      PrivateTmp = true;
-      StateDirectory = "foo";
-      StateDirectoryMode = "0750";
     };
   };
   services.caddy.virtualHosts = {
     "anki.syzygial.cc" = {
       extraConfig = ''
-        reverse_proxy 127.0.0.1:4000
+        reverse_proxy 127.0.0.1:${config.services.anki-sync-server.port}
       '';
     };
   };