TornaxO7: convert note for meilisearch into security warning info

2026-03-24T12:35:17Z

convert note for meilisearch into security warning info

← Older revision		Revision as of 12:35, 24 March 2026
Line 97:		Line 97:
	}}		}}

	{{~~note~~\|		{{Security Warning\|type=info\|
	There's also {{nixos:option\|services.meilisearch.masterKeyFile}} to protect access to the meilisearch instance behind a key.		There's also {{nixos:option\|services.meilisearch.masterKeyFile}} to protect access to the meilisearch instance behind a key.
	You'll need to set the key in MEILI_MASTER_KEY for linkwarden then.		You'll need to set the key in MEILI_MASTER_KEY for linkwarden then.

TornaxO7: Fix note formatting

2026-03-24T12:34:10Z

Fix note formatting

← Older revision		Revision as of 12:34, 24 March 2026
Line 97:		Line 97:
	}}		}}

	{{note		{{note\|
	There's also {{nixos:option\|services.meilisearch.masterKeyFile}} to protect access to the meilisearch instance behind a key.		There's also {{nixos:option\|services.meilisearch.masterKeyFile}} to protect access to the meilisearch instance behind a key.
	You'll need to set the key in MEILI_MASTER_KEY for linkwarden then.		You'll need to set the key in MEILI_MASTER_KEY for linkwarden then.

TornaxO7: creating linkwarden wiki page

2026-03-24T12:33:48Z

creating linkwarden wiki page

New page

[https://linkwarden.app/ Linkwarden] is a self-hosted, open-source collaborative bookmark manager to collect, read, annotate, and fully preserve what matters, all in one place.

== Configuration ==

There's {{nixos:option|services.linkwarden}} nixos module to setup a linkwarden instance.

==== Basic (secrets exposed) ====
{{file|module.nix|nix|
<nowiki>

{ ... }:
{
services.linkwarden = {
enable = true;
host = "127.0.0.1";
port = 8080;
storageLocation = "/var/lib/linkwarden";

# both are required
environment = {
NEXTAUTH_SECRET = "linkwarden nextauth secret";
POSTGRES_PASSWORD = "linkwarden postgres password";
};
};
}

</nowiki>
}}

{{note| NEXTAUTH_SECRET and POSTGRES_PASSWORD are [https://docs.linkwarden.app/self-hosting/installation#2-configure-the-environment-variables required]. }}

{{Security Warning|
This example exposes NEXTAUTH_SECRET and POSTGRES_PASSWORD publicly.
Use {{nixos:option|services.linkwarden.secretFiles}} instead of {{nixos:option|services.linkwarden.environment}} to hide your secrets.
See [[Linkwarden#Basic (secrets hidden)]] for an example.
}}

==== Basic (secrets hidden) ====
{{file|module.nix|nix|
<nowiki>

{ ... }:
{
services.linkwarden = {
enable = true;
host = "127.0.0.1";
port = 8080;
storageLocation = "/var/lib/linkwarden";

# both are required
secretFiles = {
NEXTAUTH_SECRET = "/path/to/linkwarden/nextauth/secret";
POSTGRES_PASSWORD = "/path/to/linkwarden/postgres/secret";
};
};
}

</nowiki>
}}

==== With Meilisearch ====

[https://linkwarden.app/ Linkwarden] also provides [https://docs.linkwarden.app/self-hosting/installation#5-setup-meilisearch-optional meilisearch support]:

{{file|module.nix|nix|
<nowiki>

{ ... }:
{
services = {
linkwarden = {
enable = true;
host = "127.0.0.1";
port = 8080;
storageLocation = "/var/lib/linkwarden";

# both are required
secretFiles = {
NEXTAUTH_SECRET = "/path/to/linkwarden/nextauth/secret";
POSTGRES_PASSWORD = "/path/to/linkwarden/postgres/secret";
};

environment = {
MEILI_HOST = "http://127.0.0.1:3000";
};
};

meilisearch = {
enable = true;
listenAddress = "127.0.0.1";
listenPort = 3000;
};
};
};

</nowiki>
}}

{{note
There's also {{nixos:option|services.meilisearch.masterKeyFile}} to protect access to the meilisearch instance behind a key.
You'll need to set the key in MEILI_MASTER_KEY for linkwarden then.
}}

== See also ==

* [https://docs.linkwarden.app/self-hosting/installation The official self hosting documentation]

Linkwarden - Revision history

TornaxO7: convert note for meilisearch into security warning info

TornaxO7: Fix note formatting

TornaxO7: creating linkwarden wiki page