From 07355b181709b0de4761a209fa331dbf5f362699 Mon Sep 17 00:00:00 2001
From: SebastianStork <git@sstork.dev>
Date: Tue, 17 Mar 2026 22:53:39 +0100
Subject: [PATCH 1/3] scrutiny: Init module

---
 modules/nixos/web-services/scrutiny.nix | 38 +++++++++++++++++++++++++
 1 file changed, 38 insertions(+)
 create mode 100644 modules/nixos/web-services/scrutiny.nix

diff --git a/modules/nixos/web-services/scrutiny.nix b/modules/nixos/web-services/scrutiny.nix
new file mode 100644
index 0000000..e0f1610
--- /dev/null
+++ b/modules/nixos/web-services/scrutiny.nix
@@ -0,0 +1,38 @@
+{ config, lib, ... }:
+let
+  cfg = config.custom.web-services.scrutiny;
+in
+{
+  options.custom.web-services.scrutiny = {
+    enable = lib.mkEnableOption "";
+    domain = lib.mkOption {
+      type = lib.types.nonEmptyStr;
+      default = "";
+    };
+    port = lib.mkOption {
+      type = lib.types.port;
+      default = 8466;
+    };
+  };
+
+  config = lib.mkIf cfg.enable {
+    services.scrutiny = {
+      enable = true;
+      settings.web.listen = {
+        host = "127.0.0.1";
+        inherit (cfg) port;
+      };
+    };
+
+    systemd.services.scrutiny.enableStrictShellChecks = false;
+
+    custom = {
+      services.caddy.virtualHosts.${cfg.domain}.port = cfg.port;
+
+      meta.sites.${cfg.domain} = {
+        title = "Scrutiny";
+        icon = "sh:scrutiny";
+      };
+    };
+  };
+}

From 19ebf53f8b53358be6cfa9f95672856d76b39617 Mon Sep 17 00:00:00 2001
From: SebastianStork <git@sstork.dev>
Date: Tue, 17 Mar 2026 22:53:51 +0100
Subject: [PATCH 2/3] srv-core: Enable scrutiny

---
 hosts/srv-core/configuration.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/hosts/srv-core/configuration.nix b/hosts/srv-core/configuration.nix
index e912bac..9ec0fae 100644
--- a/hosts/srv-core/configuration.nix
+++ b/hosts/srv-core/configuration.nix
@@ -77,6 +77,11 @@
         enable = true;
         domain = "search.${config.custom.networking.overlay.domain}";
       };
+
+      scrutiny = {
+        enable = true;
+        domain = "scrutiny.${config.custom.networking.overlay.domain}";
+      };
     };
   };
 }

From 7fd21d8cde2afb0ddf0da4d702a9be825fea7508 Mon Sep 17 00:00:00 2001
From: SebastianStork <git@sstork.dev>
Date: Tue, 17 Mar 2026 23:22:16 +0100
Subject: [PATCH 3/3] scrutiny: Persist data directory

---
 modules/nixos/web-services/scrutiny.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/modules/nixos/web-services/scrutiny.nix b/modules/nixos/web-services/scrutiny.nix
index e0f1610..e0be952 100644
--- a/modules/nixos/web-services/scrutiny.nix
+++ b/modules/nixos/web-services/scrutiny.nix
@@ -29,6 +29,8 @@ in
     custom = {
       services.caddy.virtualHosts.${cfg.domain}.port = cfg.port;
 
+      persistence.directories = [ "/var/lib/scrutiny" ];
+
       meta.sites.${cfg.domain} = {
         title = "Scrutiny";
         icon = "sh:scrutiny";