feat: test

This commit is contained in:
Nick 2025-06-08 22:42:51 -05:00
parent 5e554583da
commit 974662b4e2

View file

@ -8,65 +8,65 @@ let
host = "${service.subdomain}.${web.domains.url0}";
in
{
services = {
# jellyfin = {
# enable = true;
# openFirewall = true;
# user = user0;
# };
# jellyseerr = {
# openFirewall = true;
# enable = true;
# };
caddy = {
virtualHosts = {
"${host}" = {
extraConfig = ''
redir /.well-known/carddav /remote.php/dav/ 301
redir /.well-known/caldav /remote.php/dav/ 301
# services = {
# jellyfin = {
# enable = true;
# openFirewall = true;
# user = user0;
# };
# jellyseerr = {
# openFirewall = true;
# enable = true;
# };
# caddy = {
# virtualHosts = {
# "${host}" = {
# extraConfig = ''
# redir /.well-known/carddav /remote.php/dav/ 301
# redir /.well-known/caldav /remote.php/dav/ 301
reverse_proxy ${localhost}:${toString service.ports.port1}
# reverse_proxy ${localhost}:${toString service.ports.port1}
tls ${service.ssl.cert} ${service.ssl.key}
'';
};
};
};
};
# tls ${service.ssl.cert} ${service.ssl.key}
# '';
# };
# };
# };
# };
fileSystems =
let
settings = {
fsType = "none";
options = [
"bind"
];
depends = [
ceres.storage0.mount
];
};
in
{
"/var/lib/${service.name}" = {
device = service.paths.path0;
} // settings;
"/var/cache/${service.name}" = {
device = "${service.paths.path1}";
} // settings;
};
# fileSystems =
# let
# settings = {
# fsType = "none";
# options = [
# "bind"
# ];
# depends = [
# ceres.storage0.mount
# ];
# };
# in
# {
# "/var/lib/${service.name}" = {
# device = service.paths.path0;
# } // settings;
# "/var/cache/${service.name}" = {
# device = "${service.paths.path1}";
# } // settings;
# };
systemd.tmpfiles.rules = [
"Z ${service.paths.path0} 0755 ${user0} ${service.name} -"
"Z ${service.paths.path1} 0755 ${user0} ${service.name} -"
];
# systemd.tmpfiles.rules = [
# "Z ${service.paths.path0} 0755 ${user0} ${service.name} -"
# "Z ${service.paths.path1} 0755 ${user0} ${service.name} -"
# ];
networking = {
firewall = {
allowedTCPPorts = [
service.ports.port0
service.ports.port1
service.ports.port2
];
};
};
# networking = {
# firewall = {
# allowedTCPPorts = [
# service.ports.port0
# service.ports.port1
# service.ports.port2
# ];
# };
# };
}