commit f50366f745f9e55d20dc6eb630267c4df3d1c300 · aylac.top/nixcfg-own-knot

+3 -3

flake.lock

···

       895
        
           "secrets": {

     

       896
        
             "flake": false,

     

       897
        
             "locked": {

     

       898
       -
               "lastModified": 1755626705,

     

       899
       -
               "narHash": "sha256-JkJTF26k+bAW8BqD6Ubw9iAR3QZMzCUgy5gMtLcCxeM=",

     

       900
        
               "owner": "ayla6",

     

       901
        
               "repo": "secrets",

     

       902
       -
               "rev": "0104df7648c10187393222b200e59831fab54ade",

     

       903
        
               "type": "github"

     

       904
        
             },

     

       905
        
             "original": {

···

       895
        
           "secrets": {

     

       896
        
             "flake": false,

     

       897
        
             "locked": {

     

       898
       +
               "lastModified": 1755634054,

     

       899
       +
               "narHash": "sha256-nBYm9JH5CRomLQPssNwCqR15q5SF3buO9nmPSUfW4QU=",

     

       900
        
               "owner": "ayla6",

     

       901
        
               "repo": "secrets",

     

       902
       +
               "rev": "40a0d31246d725d4744f6ba9d5a99f05aac31818",

     

       903
        
               "type": "github"

     

       904
        
             },

     

       905
        
             "original": {

+18

hosts/nanpi/glance.nix

···

       93
        
                             icon = "di:bazarr";

     

       94
        
                           }

     

       95
        
                           {

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       96
        
                             title = "qBittorrent";

     

       97
        
                             url = "https://${config.mySnippets.tailnet.networkMap.qbittorrent.vHost}/";

     

       98
        
                             check-url = "http://${config.mySnippets.tailnet.networkMap.qbittorrent.hostName}:${toString config.mySnippets.tailnet.networkMap.qbittorrent.port}/";

     
···

       110
        
                             url = "https://${config.mySnippets.tailnet.networkMap.radicale.vHost}/";

     

       111
        
                             check-url = "http://${config.mySnippets.tailnet.networkMap.radicale.hostName}:${toString config.mySnippets.tailnet.networkMap.radicale.port}/";

     

       112
        
                             icon = "di:radicale";

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       113
        
                           }

     

       114
        
                         ];

     

       115
        
                       }

···

       93
        
                             icon = "di:bazarr";

     

       94
        
                           }

     

       95
        
                           {

     

       96
       +
                             title = "Autobrr";

     

       97
       +
                             url = "https://${config.mySnippets.tailnet.networkMap.autobrr.vHost}/";

     

       98
       +
                             check-url = "http://${config.mySnippets.tailnet.networkMap.autobrr.hostName}:${toString config.mySnippets.tailnet.networkMap.autobrr.port}/";

     

       99
       +
                             icon = "di:autobrr";

     

       100
       +
                           }

     

       101
       +
                           {

     

       102
        
                             title = "qBittorrent";

     

       103
        
                             url = "https://${config.mySnippets.tailnet.networkMap.qbittorrent.vHost}/";

     

       104
        
                             check-url = "http://${config.mySnippets.tailnet.networkMap.qbittorrent.hostName}:${toString config.mySnippets.tailnet.networkMap.qbittorrent.port}/";

     
···

       116
        
                             url = "https://${config.mySnippets.tailnet.networkMap.radicale.vHost}/";

     

       117
        
                             check-url = "http://${config.mySnippets.tailnet.networkMap.radicale.hostName}:${toString config.mySnippets.tailnet.networkMap.radicale.port}/";

     

       118
        
                             icon = "di:radicale";

     

       119
       +
                           }

     

       120
       +
                           {

     

       121
       +
                             title = "Copyparty";

     

       122
       +
                             url = "https://${config.mySnippets.tailnet.networkMap.copyparty.vHost}/";

     

       123
       +
                             check-url = "http://${config.mySnippets.tailnet.networkMap.copyparty.hostName}:${toString config.mySnippets.tailnet.networkMap.copyparty.port}/";

     

       124
       +
                             icon = "di:copyparty";

     

       125
       +
                           }

     

       126
       +
                           {

     

       127
       +
                             title = "Redlib";

     

       128
       +
                             url = "https://${config.mySnippets.tailnet.networkMap.redlib.vHost}/";

     

       129
       +
                             check-url = "http://${config.mySnippets.tailnet.networkMap.redlib.hostName}:${toString config.mySnippets.tailnet.networkMap.redlib.port}/";

     

       130
       +
                             icon = "di:redlib";

     

       131
        
                           }

     

       132
        
                         ];

     

       133
        
                       }

hosts/nanpi/secrets.nix

···

       16
        
             group = "copyparty";

     

       17
        
             mode = "0400";

     

       18
        
           };

     

       0
        
       
     

       19
        
         };

     

       20
        
       }

···

       16
        
             group = "copyparty";

     

       17
        
             mode = "0400";

     

       18
        
           };

     

       19
       +
           autobrr.file = "${self.inputs.secrets}/autobrr.age";

     

       20
        
         };

     

       21
        
       }

+26

hosts/nanpi/services.nix

···

       111
        
               '';

     

       112
        
             };

     

       113
        
       

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       114
        
             "${config.mySnippets.tailnet.networkMap.glance.vHost}" = {

     

       115
        
               extraConfig = ''

     

       116
        
                 bind tailscale/glance

     
···

       134
        
                 reverse_proxy ${config.mySnippets.tailnet.networkMap.copyparty.hostName}:${toString config.mySnippets.tailnet.networkMap.copyparty.port} {

     

       135
        
                   flush_interval -1

     

       136
        
                 }

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       137
        
               '';

     

       138
        
             };

     

       139
        
           };

     
···

       183
        
               storage = {

     

       184
        
                 filesystem_folder = "/var/lib/radicale/collections";

     

       185
        
               };

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       186
        
             };

     

       187
        
           };

     

       188

···

       111
        
               '';

     

       112
        
             };

     

       113
        
       

     

       114
       +
             "${config.mySnippets.tailnet.networkMap.autobrr.vHost}" = {

     

       115
       +
               extraConfig = ''

     

       116
       +
                 bind tailscale/autobrr

     

       117
       +
                 encode zstd gzip

     

       118
       +
                 reverse_proxy ${config.mySnippets.tailnet.networkMap.autobrr.hostName}:${toString config.mySnippets.tailnet.networkMap.autobrr.port}

     

       119
       +
               '';

     

       120
       +
             };

     

       121
       +
       

     

       122
        
             "${config.mySnippets.tailnet.networkMap.glance.vHost}" = {

     

       123
        
               extraConfig = ''

     

       124
        
                 bind tailscale/glance

     
···

       142
        
                 reverse_proxy ${config.mySnippets.tailnet.networkMap.copyparty.hostName}:${toString config.mySnippets.tailnet.networkMap.copyparty.port} {

     

       143
        
                   flush_interval -1

     

       144
        
                 }

     

       145
       +
               '';

     

       146
       +
             };

     

       147
       +
       

     

       148
       +
             "${config.mySnippets.tailnet.networkMap.redlib.vHost}" = {

     

       149
       +
               extraConfig = ''

     

       150
       +
                 bind tailscale/redlib

     

       151
       +
                 encode zstd gzip

     

       152
       +
                 reverse_proxy ${config.mySnippets.tailnet.networkMap.redlib.hostName}:${toString config.mySnippets.tailnet.networkMap.redlib.port}

     

       153
        
               '';

     

       154
        
             };

     

       155
        
           };

     
···

       199
        
               storage = {

     

       200
        
                 filesystem_folder = "/var/lib/radicale/collections";

     

       201
        
               };

     

       202
       +
             };

     

       203
       +
           };

     

       204
       +
       

     

       205
       +
           redlib = {

     

       206
       +
             enable = true;

     

       207
       +
             openFirewall = true;

     

       208
       +
             inherit (config.mySnippets.tailnet.networkMap.redlib) port;

     

       209
       +
             settings = {

     

       210
       +
               ENABLE_RSS = "on";

     

       211
       +
               REDLIB_DEFAULT_SHOW_NSFW = "on";

     

       212
        
             };

     

       213
        
           };

     

       214

+11

modules/nixos/profiles/arr/default.nix

···

       45
        
                 dataDir = "${config.myNixOS.profiles.arr.dataDir}/sonarr/.config/NzbDrone/";

     

       46
        
                 openFirewall = true; # Port: 8989

     

       47
        
               };

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       48
        
             };

     

       49
        
       

     

       50
        
             systemd = {

     
···

       53
        
                 "d ${config.services.radarr.dataDir} 0755 radarr radarr"

     

       54
        
                 "d ${config.services.readarr.dataDir} 0755 readarr readarr"

     

       55
        
                 "d ${config.services.sonarr.dataDir} 0755 sonarr sonarr"

     

       0
        
       
     

       56
        
               ];

     

       57
        
             };

     

       58
        
           })

···

       45
        
                 dataDir = "${config.myNixOS.profiles.arr.dataDir}/sonarr/.config/NzbDrone/";

     

       46
        
                 openFirewall = true; # Port: 8989

     

       47
        
               };

     

       48
       +
       

     

       49
       +
               autobrr = {

     

       50
       +
                 enable = true;

     

       51
       +
                 openFirewall = true; # Port: 7474

     

       52
       +
                 secretFile = config.age.secrets.autobrr.path;

     

       53
       +
                 settings = {

     

       54
       +
                   host = "0.0.0.0";

     

       55
       +
                   port = 7474;

     

       56
       +
                 };

     

       57
       +
               };

     

       58
        
             };

     

       59
        
       

     

       60
        
             systemd = {

     
···

       63
        
                 "d ${config.services.radarr.dataDir} 0755 radarr radarr"

     

       64
        
                 "d ${config.services.readarr.dataDir} 0755 readarr readarr"

     

       65
        
                 "d ${config.services.sonarr.dataDir} 0755 sonarr sonarr"

     

       66
       +
                 "d ${config.myNixOS.profiles.arr.dataDir}/autobrr 0755 autobrr autobrr"

     

       67
        
               ];

     

       68
        
             };

     

       69
        
           })

+10

modules/nixos/profiles/backups/default.nix

···

       181
        
               }

     

       182
        
             );

     

       183
        
       

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       184
        
             tautulli = lib.mkIf config.services.tautulli.enable (

     

       185
        
               config.mySnippets.restic

     

       186
        
               // {

···

       181
        
               }

     

       182
        
             );

     

       183
        
       

     

       184
       +
             autobrr = lib.mkIf config.services.autobrr.enable (

     

       185
       +
               config.mySnippets.restic

     

       186
       +
               // {

     

       187
       +
                 backupCleanupCommand = start "autobrr";

     

       188
       +
                 backupPrepareCommand = stop "autobrr";

     

       189
       +
                 paths = ["${config.myNixOS.profiles.arr.dataDir}/autobrr"];

     

       190
       +
                 repository = mkRepoA "autobrr";

     

       191
       +
               }

     

       192
       +
             );

     

       193
       +
       

     

       194
        
             tautulli = lib.mkIf config.services.tautulli.enable (

     

       195
        
               config.mySnippets.restic

     

       196
        
               // {

+12

modules/snippets/tailnet/default.nix

···

       87
        
                 vHost = "sonarr.${config.mySnippets.tailnet.name}";

     

       88
        
               };

     

       89
        
       

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       90
        
               karakeep = {

     

       91
        
                 hostName = "nanpi";

     

       92
        
                 port = 7020;

     
···

       97
        
                 hostName = "nanpi";

     

       98
        
                 port = 3210;

     

       99
        
                 vHost = "copyparty.${config.mySnippets.tailnet.name}";

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       100
        
               };

     

       101
        
             };

     

       102
        
           };

···

       87
        
                 vHost = "sonarr.${config.mySnippets.tailnet.name}";

     

       88
        
               };

     

       89
        
       

     

       90
       +
               autobrr = {

     

       91
       +
                 hostName = "nanpi";

     

       92
       +
                 port = 7474;

     

       93
       +
                 vHost = "autobrr.${config.mySnippets.tailnet.name}";

     

       94
       +
               };

     

       95
       +
       

     

       96
        
               karakeep = {

     

       97
        
                 hostName = "nanpi";

     

       98
        
                 port = 7020;

     
···

       103
        
                 hostName = "nanpi";

     

       104
        
                 port = 3210;

     

       105
        
                 vHost = "copyparty.${config.mySnippets.tailnet.name}";

     

       106
       +
               };

     

       107
       +
       

     

       108
       +
               redlib = {

     

       109
       +
                 hostName = "nanpi";

     

       110
       +
                 port = 6605;

     

       111
       +
                 vHost = "redlib.${config.mySnippets.tailnet.name}";

     

       112
        
               };

     

       113
        
             };

     

       114
        
           };