os/mixin/i2p: init

os/mixin/i2p.nix

@@ -0,0 +1,42 @@
+{
+  config,
+  lib,
+  ...
+}: let
+  secret = "i2pd/radicle";
+in {
+  sops.secrets.${secret} = {
+    format = "binary";
+    owner = "i2pd";
+    group = "i2pd";
+    path = "/var/lib/i2pd/radicle-keys.dat";
+  };
+
+  services.i2pd = {
+    enable = true;
+    enableIPv6 = true;
+    proto = {
+      socksProxy.enable = true;
+      http.enable = true;
+    };
+
+    inTunnels = {
+      http = let
+        port = 80;
+      in {
+        inherit port;
+        enable = true;
+        inPort = port;
+        type = "http";
+      };
+      radicle = let
+        port = 58776;
+      in {
+        inherit port;
+        enable = true;
+        inPort = port;
+        type = "server";
+      };
+    };
+  };
+}

os/mixin/radicle.nix

@@ -34,6 +34,10 @@ in {
         db.journalMode = "wal";
         workers = 32;
         relay = "always";
+        i2p = lib.mkIf (config.services.i2pd.enable && config.services.i2pd.proto.socksProxy.enable) {
+          mode = "proxy";
+          address = "127.0.0.1:4447";
+        };
         onion = lib.mkIf config.services.tor.enable {
           mode = "proxy";
           address = "127.0.0.1:9050";