From 393b0f08f42168f9451e1e2916f6cbfa770543e6 Mon Sep 17 00:00:00 2001
From: Jan Kremer <mail@jankremer.eu>
Date: Fri, 20 Feb 2026 11:26:24 +0100
Subject: [PATCH] Add paperless

---
 modules/nixos/default.nix           |  1 +
 modules/nixos/paperless.nix         | 16 ++++++++++++++++
 modules/secrets/paperless-admin.age |  8 ++++++++
 modules/secrets/secrets.nix         |  1 +
 4 files changed, 26 insertions(+)
 create mode 100644 modules/nixos/paperless.nix
 create mode 100644 modules/secrets/paperless-admin.age

diff --git a/modules/nixos/default.nix b/modules/nixos/default.nix
index 378b7dd..a30a033 100644
--- a/modules/nixos/default.nix
+++ b/modules/nixos/default.nix
@@ -5,6 +5,7 @@
     ./immich.nix
     ./jellyfin.nix
     # ./minecraft.nix
+    ./paperless.nix
     ./samba.nix
     ./tailscale.nix
   ];
diff --git a/modules/nixos/paperless.nix b/modules/nixos/paperless.nix
new file mode 100644
index 0000000..ed67c8d
--- /dev/null
+++ b/modules/nixos/paperless.nix
@@ -0,0 +1,16 @@
+{ config, ... }:
+{
+  age.secrets.paperless-admin.file = ../secrets/paperless-admin.age;
+
+  services.paperless = {
+    enable = true;
+    passwordFile = config.age.secrets.paperless-admin.path;
+    consumptionDirIsPublic = true;
+    dataDir = "/mnt/paperless";
+    # port = 28981;
+
+    settings = {
+      PAPERLESS_OCR_LANGUAGE = "deu+eng";
+    };
+  };
+}
diff --git a/modules/secrets/paperless-admin.age b/modules/secrets/paperless-admin.age
new file mode 100644
index 0000000..84df40c
--- /dev/null
+++ b/modules/secrets/paperless-admin.age
@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 2otpcg GyPxcB3gWYPbM9fYYHj6RpxRd2xPdEaVvSzA9YDG3SA
+YxWkWHddFNVORq/t8ZITPXoe0xdMrzIfMObZuQk4arI
+-> ssh-ed25519 40YjXQ ULSs0h71Dc/Lnjlxpde0b6WE35rqjDE25tpqeomJwSs
+dZblDf3QNumI6J3YIDR3/fpCzvwWGY4DfVKysYo9zZE
+--- 6qJ87GFgPpqhA7j9EZtO3A3smAuUC+ltIk8ZMicQ+pQ
+��R���:(?���K���0��xA�C�>�F�O�\
+����(��,س��4�8�]
\ No newline at end of file
diff --git a/modules/secrets/secrets.nix b/modules/secrets/secrets.nix
index fbd1246..a00b39a 100644
--- a/modules/secrets/secrets.nix
+++ b/modules/secrets/secrets.nix
@@ -9,5 +9,6 @@ in
 {
   "copyparty-jan.age".publicKeys = all;
   "forgejo-runner-token.age".publicKeys = all;
+  "paperless-admin.age".publicKeys = all;
   "tailscale.age".publicKeys = all;
 }