commit 33f8942f92f9efdbe0b8b9de4ac4fc63c137f40d · pyrox.dev/nix

+12 -4
systems/x86_64-linux/marvin/services/pinchflat.nix
···

       1
       1
        
       { config, lib, ... }:

     

       2
       2
        
       let

     

       3
       3
       +
         cfg = config.services.pinchflat;

     

       3
       4
        
         age = config.age.secrets;

     

       4
       5
        
         d = lib.py.data.services.pinchflat;

     

       5
       6
        
       in

     
···

       13
       14
        
             YT_DLP_WORKER_CONCURRENCY = 2;

     

       14
       15
        
           };

     

       15
       16
        
         };

     

       16
       16
       -
         systemd.services.pinchflat = {

     

       17
       17
       +
         systemd.services.pinchflat = lib.mkIf cfg.enable {

     

       17
       18
        
           serviceConfig = {

     

       18
       19
        
             DynamicUser = lib.mkForce false;

     

       19
       20
        
             User = lib.mkForce "pinchflat";

     

       20
       21
        
             Group = lib.mkForce "pinchflat";

     

       21
       22
        
           };

     

       22
       23
        
         };

     

       23
       23
       -
         users.users.pinchflat = {

     

       24
       24
       +
         users.users.pinchflat = lib.mkIf cfg.enable {

     

       24
       25
        
           isSystemUser = true;

     

       25
       26
        
           group = "pinchflat";

     

       26
       27
        
         };

     

       27
       27
       -
         users.groups.pinchflat = { };

     

       28
       28
       -
         age.secrets = {

     

       28
       28
       +
         users.groups.pinchflat = lib.mkIf cfg.enable { };

     

       29
       29
       +
         age.secrets = lib.mkIf cfg.enable {

     

       29
       30
        
           pinchflat-secrets = {

     

       30
       31
        
             owner = "pinchflat";

     

       31
       32
        
             group = "pinchflat";

     

       32
       33
        
             file = ./secrets/pinchflat-secrets.age;

     

       33
       34
        
           };

     

       35
       35
       +
         };

     

       36
       36
       +
         # BGUtil Docker Container for yt-dlp

     

       37
       37
       +
         virtualisation.oci-containers.containers.ytdlp-bgutil-provider = lib.mkIf cfg.enable {

     

       38
       38
       +
           image = "brainicism/bgutil-ytdlp-pot-provider";

     

       39
       39
       +
           ports = [

     

       40
       40
       +
             "4416:4416"

     

       41
       41
       +
           ];

     

       34
       42
        
         };

     

       35
       43
        
       }