From b2760865a812e649d79dbe173a292edd4802f1a6 Mon Sep 17 00:00:00 2001
From: Skyler Grey <minion@freshlybakedca.ke>
Date: Sat, 19 Jul 2025 17:24:45 +0000
Subject: [PATCH] feat(teal): add spindle

We're planning to move to tangled.sh, let's add a CI runner to teal

Co-Authored-By: Samuel Shuert <me@thecoded.prof>
---
 npins/sources.json       | 12 ++++++++++++
 systems/teal/default.nix |  1 +
 systems/teal/spindle.nix | 30 ++++++++++++++++++++++++++++++
 3 files changed, 43 insertions(+)
 create mode 100644 systems/teal/spindle.nix

diff --git a/npins/sources.json b/npins/sources.json
index 7b76f271..1310aeff 100644
--- a/npins/sources.json
+++ b/npins/sources.json
@@ -299,6 +299,18 @@
       "url": "https://github.com/eewanco/scriptfs/archive/82d7e4865c9a8e40bc717c8745d052420365069c.tar.gz",
       "hash": "sha256-WLuOt8zemooHDzK+zWJNBicKu8bg0wXyAGvZIH/po6o="
     },
+    "tangled": {
+      "type": "Git",
+      "repository": {
+        "type": "Git",
+        "url": "https://tangled.sh/@tangled.sh/core/"
+      },
+      "branch": "master",
+      "submodules": false,
+      "revision": "12edeeaabb4c7dc9086d0ec935947d4349eead66",
+      "url": null,
+      "hash": "sha256-XBTvHxAdfckP/n68IzVvGod3k+MvvaUVGkcTn4mVsQY="
+    },
     "treefmt-nix": {
       "type": "Git",
       "repository": {
diff --git a/systems/teal/default.nix b/systems/teal/default.nix
index eb04cd38..f31773ad 100644
--- a/systems/teal/default.nix
+++ b/systems/teal/default.nix
@@ -15,6 +15,7 @@
     ./midnight.nix
     ./secrets.nix
     ./silverbullet.nix
+    ./spindle.nix
     ./stalwart.nix
     ./tailscale.nix
     ./vaultwarden.nix
diff --git a/systems/teal/spindle.nix b/systems/teal/spindle.nix
new file mode 100644
index 00000000..e6b28c1c
--- /dev/null
+++ b/systems/teal/spindle.nix
@@ -0,0 +1,30 @@
+# SPDX-FileCopyrightText: 2025 FreshlyBakedCake
+#
+# SPDX-License-Identifier: MIT
+
+{ project, ... }:
+{
+  imports = [ project.inputs.tangled.result.nixosModules.spindle ];
+
+  services.nginx.virtualHosts."spindle.freshlybakedca.ke" = {
+    addSSL = true;
+    enableACME = true;
+    acmeRoot = null;
+
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:1032";
+      recommendedProxySettings = true;
+    };
+  };
+
+  services.tangled-spindle = {
+    enable = true;
+    server = {
+      listenAddr = "127.0.0.1:1032";
+      hostname = "spindle.freshlybakedca.ke";
+      jetstreamEndpoint = "wss://jetstream1.us-east.bsky.network/subscribe";
+      owner = "did:plc:k2zmz2l3hvfr44tmlhewol2j";
+    };
+    pipelines.stepTimeout = "2h";
+  };
+}