Update to 2021-12-01 19:13

roles/miniflux/templates/miniflux.conf.j2

@@ -0,0 +1,19 @@
+DATABASE_URL="host={{ miniflux_db_server }} port={{ miniflux_db_port }} user={{ miniflux_db_user }} password='{{ miniflux_db_pass }}' dbname={{ miniflux_db_name }} sslmode=disable"
+LISTEN_ADDR=0.0.0.0
+PORT={{ miniflux_port }}
+BASE_URL={{ miniflux_public_url }}
+RUN_MIGRATIONS=1
+CREATE_ADMIN=1
+ADMIN_USERNAME=admin
+ADMIN_PASSWORD={{ miniflux_admin_pass | quote }}
+PROXY_IMAGES=all
+POLLING_FREQUENCY=15
+BATCH_SIZE=50
+{% if miniflux_oidc %}
+OAUTH2_PROVIDER=oidc
+OAUTH2_CLIENT_ID={{ miniflux_oidc_id | quote }}
+OAUTH2_CLIENT_SECRET={{ miniflux_oidc_secret | quote }}
+OAUTH2_REDIRECT_URL={{ miniflux_oidc_callback_url }}
+OAUTH2_OIDC_DISCOVERY_ENDPOINT={{ miniflux_oidc_disco_url }}
+OAUTH2_USER_CREATION=1
+{% endif %}

roles/miniflux/templates/miniflux.service.j2

@@ -0,0 +1,23 @@
+[Unit]
+Description=Miniflux Feed Reader
+After=network.target postgresql.service
+
+[Service]
+Type=notify
+EnvironmentFile={{ miniflux_root_dir }}/etc/miniflux.conf
+User={{ miniflux_user }}
+ExecStart={{ miniflux_root_dir }}/bin/miniflux
+Restart=always
+NoNewPrivileges=true
+PrivateDevices=true
+ProtectControlGroups=true
+ProtectHome=true
+ProtectKernelModules=true
+ProtectKernelTunables=true
+ProtectSystem=strict
+RestrictRealtime=true
+ReadWritePaths=/run
+PrivateTmp=true
+
+[Install]
+WantedBy=multi-user.target

roles/miniflux/templates/post-backup.j2

@@ -0,0 +1,3 @@
+#!/bin/bash -e
+
+rm -f {{ miniflux_root_dir }}/backup/*

roles/miniflux/templates/pre-backup.j2

@@ -0,0 +1,12 @@
+#!/bin/sh
+
+set -eo pipefail
+
+PGPASSWORD='{{ miniflux_db_pass }}' /usr/pgsql-14/bin/pg_dump \
+  --clean \
+  --create \
+  --username={{ miniflux_db_user | quote }} \
+  --host={{ miniflux_db_server | quote }} \
+  {{ miniflux_db_name | quote }} | \
+  zstd -c > {{ miniflux_root_dir }}/backup/{{ miniflux_db_name | quote }}.sql.zst
+