scrutiny: Persist data directory

hosts/srv-core/configuration.nix

@@ -77,6 +77,11 @@
         enable = true;
         domain = "search.${config.custom.networking.overlay.domain}";
       };
+
+      scrutiny = {
+        enable = true;
+        domain = "scrutiny.${config.custom.networking.overlay.domain}";
+      };
     };
   };
 }

modules/nixos/web-services/scrutiny.nix

@@ -0,0 +1,40 @@
+{ config, lib, ... }:
+let
+  cfg = config.custom.web-services.scrutiny;
+in
+{
+  options.custom.web-services.scrutiny = {
+    enable = lib.mkEnableOption "";
+    domain = lib.mkOption {
+      type = lib.types.nonEmptyStr;
+      default = "";
+    };
+    port = lib.mkOption {
+      type = lib.types.port;
+      default = 8466;
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    services.scrutiny = {
+      enable = true;
+      settings.web.listen = {
+        host = "127.0.0.1";
+        inherit (cfg) port;
+      };
+    };
+
+    systemd.services.scrutiny.enableStrictShellChecks = false;
+
+    custom = {
+      services.caddy.virtualHosts.${cfg.domain}.port = cfg.port;
+
+      persistence.directories = [ "/var/lib/scrutiny" ];
+
+      meta.sites.${cfg.domain} = {
+        title = "Scrutiny";
+        icon = "sh:scrutiny";
+      };
+    };
+  };
+}