···

       
9
       
 
       
  "ffmpeg": {

     

       
10
       
 
       
    "accel": "vaapi",

     

       
11
       
 
       
    "accelDecode": true,

     

       
12
       
-
       
    "acceptedAudioCodecs": [

     

       
13
       
-
       
      "aac",

     

       
14
       
-
       
      "mp3",

     

       
15
       
-
       
      "libopus"

     

       
16
       
-
       
    ],

     

       
17
       
-
       
    "acceptedContainers": [

     

       
18
       
-
       
      "mov",

     

       
19
       
-
       
      "ogg",

     

       
20
       
-
       
      "webm"

     

       
21
       
-
       
    ],

     

       
22
       
-
       
    "acceptedVideoCodecs": [

     

       
23
       
-
       
      "h264"

     

       
24
       
-
       
    ],

     

       
25
       
 
       
    "bframes": -1,

     

       
26
       
 
       
    "cqMode": "auto",

     

       
27
       
 
       
    "crf": 23,

     
···

       
141
       
 
       
      "minRecognitionScore": 0.8,

     

       
142
       
 
       
      "modelName": "PP-OCRv5_mobile"

     

       
143
       
 
       
    },

     

       
144
       
-
       
    "urls": [

     

       
145
       
-
       
      "http://localhost:3003"

     

       
146
       
-
       
    ]

     

       
147
       
 
       
  },

     

       
148
       
 
       
  "map": {

     

       
149
       
 
       
    "darkStyle": "https://tiles.immich.cloud/v1/style/dark.json",

     
···

       
205
       
 
       
    "enabled": true

     

       
206
       
 
       
  },

     

       
207
       
 
       
  "server": {

     

       
208
       
-
       
    "externalDomain": "https://img.pyrox.dev",

     

       
209
       
 
       
    "loginPageMessage": "",

     

       
210
       
 
       
    "publicUsers": true

     

       
211
       
 
       
  },

     

···

       
9
       
 
       
  "ffmpeg": {

     

       
10
       
 
       
    "accel": "vaapi",

     

       
11
       
 
       
    "accelDecode": true,

     

       
12
       
+
       
    "acceptedAudioCodecs": ["aac", "mp3", "libopus"],

     

       
13
       
+
       
    "acceptedContainers": ["mov", "ogg", "webm"],

     

       
14
       
+
       
    "acceptedVideoCodecs": ["h264"],

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
15
       
 
       
    "bframes": -1,

     

       
16
       
 
       
    "cqMode": "auto",

     

       
17
       
 
       
    "crf": 23,

     
···

       
131
       
 
       
      "minRecognitionScore": 0.8,

     

       
132
       
 
       
      "modelName": "PP-OCRv5_mobile"

     

       
133
       
 
       
    },

     

       
134
       
+
       
    "urls": ["http://localhost:3003"]

     

       
0
       
 
       

     

       
0
       
 
       

     

       
135
       
 
       
  },

     

       
136
       
 
       
  "map": {

     

       
137
       
 
       
    "darkStyle": "https://tiles.immich.cloud/v1/style/dark.json",

     
···

       
193
       
 
       
    "enabled": true

     

       
194
       
 
       
  },

     

       
195
       
 
       
  "server": {

     

       
0
       
 
       

     

       
196
       
 
       
    "loginPageMessage": "",

     

       
197
       
 
       
    "publicUsers": true

     

       
198
       
 
       
  },

     

···

       
14
       
 
       
      settings = (builtins.fromJSON (builtins.readFile ./immich-config.json)) // {

     

       
15
       
 
       
        oauth.clientSecret._secret = config.age.secrets.immich-oauth-secret.path;

     

       
16
       
 
       
        notifications.smtp.password._secret = config.age.secrets.immich-mail-pw.path;

     

       
0
       
 
       

     

       
17
       
 
       
      };

     

       
18
       
 
       
    };

     

       
19
       
 
       
    immich-public-proxy = {

     

···

       
14
       
 
       
      settings = (builtins.fromJSON (builtins.readFile ./immich-config.json)) // {

     

       
15
       
 
       
        oauth.clientSecret._secret = config.age.secrets.immich-oauth-secret.path;

     

       
16
       
 
       
        notifications.smtp.password._secret = config.age.secrets.immich-mail-pw.path;

     

       
17
       
+
       
        server.externalDomain = "https://${d.extUrl}";

     

       
18
       
 
       
      };

     

       
19
       
 
       
    };

     

       
20
       
 
       
    immich-public-proxy = {

     

···

       
211
       
 
       
        '';

     

       
212
       
 
       
      };

     

       
213
       
 
       


     

       
0
       
 
       

     

       
214
       
 
       
      ${pns.immich.extUrl} = {

     

       
215
       
 
       
        extraConfig = ''

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
216
       
 
       
          reverse_proxy ${marvin}:${toString pns.immich.port}

     

       
217
       
 
       
        '';

     

       
218
       
 
       
      };

     

       
219
       
 
       


     

       
220
       
-
       
      # Pingvin Share

     

       
221
       
-
       
      ${pns.pingvin-share.extUrl} = {

     

       
222
       
-
       
        extraConfig = ''

     

       
223
       
-
       
          reverse_proxy /api/* ${marvin}:${toString pns.pingvin-share.be-anubis} {

     

       
224
       
-
       
            header_up X-Real-IP {remote_host}

     

       
225
       
-
       
            header_up X-Http-Version {http.request.proto}

     

       
226
       
-
       
          }

     

       
227
       
-
       
          reverse_proxy /* ${marvin}:${toString pns.pingvin-share.anubis} {

     

       
228
       
-
       
            header_up X-Real-IP {remote_host}

     

       
229
       
-
       
            header_up X-Http-Version {http.request.proto}

     

       
230
       
-
       
          }

     

       
231
       
-
       
        '';

     

       
232
       
-
       
      };

     

       
233
       
 
       
      # Tangled Services

     

       
234
       
 
       
      ${pns.tangled-knot.extUrl} = {

     

       
235
       
 
       
        extraConfig = ''

     

···

       
211
       
 
       
        '';

     

       
212
       
 
       
      };

     

       
213
       
 
       


     

       
214
       
+
       
      # Immich

     

       
215
       
 
       
      ${pns.immich.extUrl} = {

     

       
216
       
 
       
        extraConfig = ''

     

       
217
       
+
       
          @public path /share /share/*

     

       
218
       
+
       
          handle @public {

     

       
219
       
+
       
            reverse_proxy ${marvin}:${toString pns.immich.pubProxy}

     

       
220
       
+
       
          }

     

       
221
       
 
       
          reverse_proxy ${marvin}:${toString pns.immich.port}

     

       
222
       
 
       
        '';

     

       
223
       
 
       
      };

     

       
224
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
225
       
 
       
      # Tangled Services

     

       
226
       
 
       
      ${pns.tangled-knot.extUrl} = {

     

       
227
       
 
       
        extraConfig = ''