initial commit

services/redis/service.nix

@@ -0,0 +1,28 @@
+{
+  config,
+  lib,
+  sec,
+  ...
+}:
+let
+  inherit (config.machine.redis)
+    port
+    enable
+    ;
+in
+with lib; mkIf enable {
+  sops.secrets = {
+    "redis/password" = { };
+  };
+
+  networking.firewall = {
+    allowedTCPPorts = [ port ];
+  };
+
+  services.redis.servers."default" = {
+    inherit enable;
+    inherit port;
+    bind = null;
+    requirePassFile = sec."redis/password".path;
+  };
+}