mirror of
https://gitlab.com/upRootNutrition/dotfiles.git
synced 2025-06-15 09:35:12 -05:00
feat: test
This commit is contained in:
parent
955a803673
commit
bb4ee4a2e5
2 changed files with 66 additions and 66 deletions
|
@ -77,7 +77,7 @@ in
|
|||
acme
|
||||
audiobookshelf
|
||||
caddy
|
||||
jellyfin
|
||||
# jellyfin
|
||||
logrotate
|
||||
mastodon
|
||||
minecraft
|
||||
|
|
|
@ -1,72 +1,72 @@
|
|||
# { flake, ... }:
|
||||
# let
|
||||
# inherit (flake.config.people) user0;
|
||||
# inherit (flake.config.machines.devices) ceres;
|
||||
# inherit (flake.config.services.instances) jellyfin web;
|
||||
# service = jellyfin;
|
||||
# localhost = web.localhost.address0;
|
||||
# host = "${service.subdomain}.${web.domains.url0}";
|
||||
# in
|
||||
{ flake, ... }:
|
||||
let
|
||||
inherit (flake.config.people) user0;
|
||||
inherit (flake.config.machines.devices) ceres;
|
||||
inherit (flake.config.services.instances) jellyfin web;
|
||||
service = jellyfin;
|
||||
localhost = web.localhost.address0;
|
||||
host = "${service.subdomain}.${web.domains.url0}";
|
||||
in
|
||||
{
|
||||
# services = {
|
||||
# jellyfin = {
|
||||
# enable = true;
|
||||
# openFirewall = true;
|
||||
# user = user0;
|
||||
# };
|
||||
# jellyseerr = {
|
||||
# openFirewall = true;
|
||||
# enable = true;
|
||||
# };
|
||||
# caddy = {
|
||||
# virtualHosts = {
|
||||
# "${host}" = {
|
||||
# extraConfig = ''
|
||||
# redir /.well-known/carddav /remote.php/dav/ 301
|
||||
# redir /.well-known/caldav /remote.php/dav/ 301
|
||||
services = {
|
||||
jellyfin = {
|
||||
enable = true;
|
||||
openFirewall = true;
|
||||
user = user0;
|
||||
};
|
||||
jellyseerr = {
|
||||
openFirewall = true;
|
||||
enable = true;
|
||||
};
|
||||
caddy = {
|
||||
virtualHosts = {
|
||||
"${host}" = {
|
||||
extraConfig = ''
|
||||
redir /.well-known/carddav /remote.php/dav/ 301
|
||||
redir /.well-known/caldav /remote.php/dav/ 301
|
||||
|
||||
# reverse_proxy ${localhost}:${toString service.ports.port1}
|
||||
reverse_proxy ${localhost}:${toString service.ports.port1}
|
||||
|
||||
# tls ${service.ssl.cert} ${service.ssl.key}
|
||||
# '';
|
||||
# };
|
||||
# };
|
||||
# };
|
||||
# };
|
||||
tls ${service.ssl.cert} ${service.ssl.key}
|
||||
'';
|
||||
};
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
# fileSystems =
|
||||
# let
|
||||
# settings = {
|
||||
# fsType = "none";
|
||||
# options = [
|
||||
# "bind"
|
||||
# ];
|
||||
# depends = [
|
||||
# ceres.storage0.mount
|
||||
# ];
|
||||
# };
|
||||
# in
|
||||
# {
|
||||
# "/var/lib/${service.name}" = {
|
||||
# device = service.paths.path0;
|
||||
# } // settings;
|
||||
# "/var/cache/${service.name}" = {
|
||||
# device = "${service.paths.path1}";
|
||||
# } // settings;
|
||||
# };
|
||||
fileSystems =
|
||||
let
|
||||
settings = {
|
||||
fsType = "none";
|
||||
options = [
|
||||
"bind"
|
||||
];
|
||||
depends = [
|
||||
ceres.storage0.mount
|
||||
];
|
||||
};
|
||||
in
|
||||
{
|
||||
"/var/lib/${service.name}" = {
|
||||
device = service.paths.path0;
|
||||
} // settings;
|
||||
"/var/cache/${service.name}" = {
|
||||
device = "${service.paths.path1}";
|
||||
} // settings;
|
||||
};
|
||||
|
||||
# systemd.tmpfiles.rules = [
|
||||
# "Z ${service.paths.path0} 0755 ${user0} ${service.name} -"
|
||||
# "Z ${service.paths.path1} 0755 ${user0} ${service.name} -"
|
||||
# ];
|
||||
systemd.tmpfiles.rules = [
|
||||
"Z ${service.paths.path0} 0755 ${user0} ${service.name} -"
|
||||
"Z ${service.paths.path0} 0755 ${user0} ${service.name} -"
|
||||
];
|
||||
|
||||
# networking = {
|
||||
# firewall = {
|
||||
# allowedTCPPorts = [
|
||||
# service.ports.port0
|
||||
# service.ports.port1
|
||||
# service.ports.port2
|
||||
# ];
|
||||
# };
|
||||
# };
|
||||
networking = {
|
||||
firewall = {
|
||||
allowedTCPPorts = [
|
||||
service.ports.port0
|
||||
service.ports.port1
|
||||
service.ports.port2
|
||||
];
|
||||
};
|
||||
};
|
||||
}
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue