commit 3c447a1ef46439fa8856e5a3532d9eed6bcdce08 · aylac.top/nixcfg-own-knot

+24 -1

hosts/nanpi/services.nix

···

       48
       48
        
                 reverse_proxy ${config.mySnippets.tailnet.networkMap.qbittorrent.hostName}:${toString config.mySnippets.tailnet.networkMap.qbittorrent.port}

     

       49
       49
        
               '';

     

       50
       50
        
             };

     

       51
       51
       +
       

     

       52
       52
       +
             "${config.mySnippets.tailnet.networkMap.radicale.vHost}" = {

     

       53
       53
       +
               extraConfig = ''

     

       54
       54
       +
                 bind tailscale/radicale

     

       55
       55
       +
                 encode zstd gzip

     

       56
       56
       +
                 reverse_proxy ${config.mySnippets.tailnet.networkMap.radicale.hostName}:${toString config.mySnippets.tailnet.networkMap.radicale.port}

     

       57
       57
       +
               '';

     

       58
       58
       +
             };

     

       51
       59
        
           };

     

       52
       60
        
       

     

       53
       61
        
           # it's failing to build because it can't download some stuff

     
···

       81
       89
        
             dataDir = "${dataDirectory}/jellyfin";

     

       82
       90
        
           };

     

       83
       91
        
       

     

       84
       84
       -
           # because of the lack of forwarding the ssh because of the tunnel, repo origins have to be added like this, and nobody can pull your repos

     

       92
       92
       +
           radicale = {

     

       93
       93
       +
             enable = true;

     

       94
       94
       +
             settings = {

     

       95
       95
       +
               server = {

     

       96
       96
       +
                 hosts = ["0.0.0.0:${toString config.mySnippets.tailnet.networkMap.radicale.port}" "[::]:${toString config.mySnippets.tailnet.networkMap.radicale.port}"];

     

       97
       97
       +
               };

     

       98
       98
       +
               auth = {

     

       99
       99
       +
                 type = "htpasswd";

     

       100
       100
       +
                 htpasswd_filename = "/var/lib/radicale/users";

     

       101
       101
       +
                 htpasswd_encryption = "autodetect";

     

       102
       102
       +
               };

     

       103
       103
       +
               storage = {

     

       104
       104
       +
                 filesystem_folder = "/var/lib/radicale/collections";

     

       105
       105
       +
               };

     

       106
       106
       +
             };

     

       107
       107
       +
           };

     

       85
       108
        
         };

     

       86
       109
        
       }

+10

modules/nixos/profiles/backups/default.nix

···

       218
       218
        
                 repository = mkRepoA "passwords";

     

       219
       219
        
               }

     

       220
       220
        
             );

     

       221
       221
       +
       

     

       222
       222
       +
             radicale = lib.mkIf config.services.radicale.enable (

     

       223
       223
       +
               config.mySnippets.restic

     

       224
       224
       +
               // {

     

       225
       225
       +
                 backupCleanupCommand = start "radicale";

     

       226
       226
       +
                 backupPrepareCommand = stop "radicale";

     

       227
       227
       +
                 paths = ["/var/lib/radicale"];

     

       228
       228
       +
                 repository = mkRepoA "radicale";

     

       229
       229
       +
               }

     

       230
       230
       +
             );

     

       221
       231
        
           };

     

       222
       232
        
         };

     

       223
       233
        
       }

modules/snippets/tailnet/default.nix

···

       32
       32
        
                 port = 2283;

     

       33
       33
        
                 vHost = "immich.${config.mySnippets.tailnet.name}";

     

       34
       34
        
               };

     

       35
       35
       +
       

     

       36
       36
       +
               radicale = {

     

       37
       37
       +
                 hostName = "nanpi";

     

       38
       38
       +
                 port = 5232;

     

       39
       39
       +
                 vHost = "radicale.${config.mySnippets.tailnet.name}";

     

       40
       40
       +
               };

     

       35
       41
        
             };

     

       36
       42
        
           };

     

       37
       43
        
         };