commit e5f016a179d56b92a5e90bb265f75a2da6597679 · ryan.freumh.org/nixos

+54 -8

hosts/elephant/services.nix

···

       29
        
             "nextcloud.vpn.freumh.org"

     

       30
        
             "owntracks.vpn.freumh.org"

     

       31
        
             "immich.vpn.freumh.org"

     

       0
        
       
     

       32
        
           ];

     

       33
        
         };

     

       34
        
       

     
···

       94
        
                   http://${host}:${builtins.toString port}

     

       95
        
                 '';

     

       96
        
               };

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       97
        
             };

     

       98
        
           };

     

       99
        
         };

     
···

       217
        
           config.services.transmission.user

     

       218
        
           config.services.nzbget.user

     

       219
        
         ];

     

       220
       -
         # services.calibre-server.enable = true;

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       221
        
       

     

       222
        
         age.secrets.restic-owl.file = ../../secrets/restic-owl.age;

     

       223
        
         age.secrets.restic-gecko.file = ../../secrets/restic-gecko.age;

     
···

       305
        
             findTime = "43200";

     

       306
        
             logPath = "/var/lib/jellyseerr/logs/overseerr.log";

     

       307
        
           };

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       308
        
         };

     

       309
        
         environment.etc = {

     

       310
        
           "fail2ban/filter.d/jellyfin.local".text = ''

     
···

       315
        
             [Definition]

     

       316
        
             failregex = ^.*\[warn\]\[Auth\]: Failed login attempt from user with incorrect Jellyfin credentials {"account":{"ip":"<HOST>","email":

     

       317
        
           '';

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       318
        
         };

     

       319
        
       

     

       320
        
         systemd.services.ddns = {

     
···

       325
        
           serviceConfig = {

     

       326
        
             ExecStart = pkgs.writeShellScript "update-dns" ''

     

       327
        
               while true; do

     

       328
       -
                 IP="$(${pkgs.curl}/bin/curl https://ipinfo.io/ip 2> /dev/null)";

     

       329
       -
                 echo $IP;

     

       330
        
                 ${config.services.eon.package}/bin/capc update /run/agenix/eon-freumh.org.cap \

     

       331
       -
                   -u remove/jellyfin.freumh.org/A \

     

       332
       -
                   -u remove/jellyseerr.freumh.org/A \

     

       333
       -
                   -u add/jellyfin.freumh.org/A/"$IP"/60 \

     

       334
       -
                   -u add/jellyseerr.freumh.org/A/"$IP"/60;

     

       335
       -
                 sleep 3600;

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       336
        
               done

     

       337
        
             '';

     

       338
        
             Restart = "always";

···

       29
        
             "nextcloud.vpn.freumh.org"

     

       30
        
             "owntracks.vpn.freumh.org"

     

       31
        
             "immich.vpn.freumh.org"

     

       32
       +
             "calibre.freumh.org"

     

       33
        
           ];

     

       34
        
         };

     

       35
        
       

     
···

       95
        
                   http://${host}:${builtins.toString port}

     

       96
        
                 '';

     

       97
        
               };

     

       98
       +
             };

     

       99
       +
             "calibre.freumh.org" = {

     

       100
       +
               addSSL = true;

     

       101
       +
               locations."/" = {

     

       102
       +
                 recommendedProxySettings = true;

     

       103
       +
                 proxyPass = ''

     

       104
       +
                   http://127.0.0.1:${builtins.toString config.services.calibre-web.listen.port}

     

       105
       +
                 '';

     

       106
       +
                 proxyWebsockets = true;

     

       107
       +
                 extraConfig = ''

     

       108
       +
                   proxy_buffer_size 128k;

     

       109
       +
                   proxy_buffers 4 256k;

     

       110
       +
                   proxy_busy_buffers_size 256k;

     

       111
       +
                 '';

     

       112
       +
                 };

     

       113
        
             };

     

       114
        
           };

     

       115
        
         };

     
···

       233
        
           config.services.transmission.user

     

       234
        
           config.services.nzbget.user

     

       235
        
         ];

     

       236
       +
       

     

       237
       +
         services.calibre-web = {

     

       238
       +
           enable = true;

     

       239
       +
           listen = {

     

       240
       +
             port = 8084;

     

       241
       +
             ip = "127.0.0.1";

     

       242
       +
           };

     

       243
       +
           options = {

     

       244
       +
             enableBookConversion = true;

     

       245
       +
             enableBookUploading = true;

     

       246
       +
             enableKepubify = true;

     

       247
       +
           };

     

       248
       +
         };

     

       249
        
       

     

       250
        
         age.secrets.restic-owl.file = ../../secrets/restic-owl.age;

     

       251
        
         age.secrets.restic-gecko.file = ../../secrets/restic-gecko.age;

     
···

       333
        
             findTime = "43200";

     

       334
        
             logPath = "/var/lib/jellyseerr/logs/overseerr.log";

     

       335
        
           };

     

       336
       +
           # requires 'Enable Proxy Support' for jellyseerr

     

       337
       +
           jails."calibre-web".settings = {

     

       338
       +
             backend = "auto";

     

       339
       +
             port = "80,443";

     

       340
       +
             protocol = "tcp";

     

       341
       +
             filter = "calibre-web";

     

       342
       +
             maxRetry = 3;

     

       343
       +
             bantime = "86400";

     

       344
       +
             findTime = "43200";

     

       345
       +
             logPath = "/var/lib/calibre-web/log";

     

       346
       +
           };

     

       347
        
         };

     

       348
        
         environment.etc = {

     

       349
        
           "fail2ban/filter.d/jellyfin.local".text = ''

     
···

       354
        
             [Definition]

     

       355
        
             failregex = ^.*\[warn\]\[Auth\]: Failed login attempt from user with incorrect Jellyfin credentials {"account":{"ip":"<HOST>","email":

     

       356
        
           '';

     

       357
       +
           "fail2ban/filter.d/calibre-web.local".text = ''

     

       358
       +
             [Definition]

     

       359
       +
             failregex = ^(?:\[\])?\s*WARN \{[^\}]*\} Login failed for user "<F-USER>[^"]*</F-USER>" IP-address: <ADDR>

     

       360
       +
           '';

     

       361
        
         };

     

       362
        
       

     

       363
        
         systemd.services.ddns = {

     
···

       368
        
           serviceConfig = {

     

       369
        
             ExecStart = pkgs.writeShellScript "update-dns" ''

     

       370
        
               while true; do

     

       371
       +
                 IP="$(${pkgs.curl}/bin/curl https://ipinfo.io/ip 2> /dev/null)"

     

       372
       +
                 echo $IP

     

       373
        
                 ${config.services.eon.package}/bin/capc update /run/agenix/eon-freumh.org.cap \

     

       374
       +
                   -u "remove|jellyfin.freumh.org|A" \

     

       375
       +
                   -u "remove|jellyseerr.freumh.org|A" \

     

       376
       +
                   -u "remove|calibre.freumh.org|A" \

     

       377
       +
                   -u "add|jellyfin.freumh.org|A|$IP|60" \

     

       378
       +
                   -u "add|jellyseerr.freumh.org|A|$IP|60" \

     

       379
       +
                   -u "add|calibre.freumh.org|A|$IP|60" \

     

       380
       +
                   ;

     

       381
       +
                 sleep 3600

     

       382
        
               done

     

       383
        
             '';

     

       384
        
             Restart = "always";

hosts/owl/default.nix

···

       346
        
                 type = "AAAA";

     

       347
        
                 value = "2a00:23c6:aa22:e401:8dff:9b9a:cb3c:3fcb";

     

       348
        
               }

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       349
        
             ];

     

       350
        
           };

     

       351
        
         };

···

       346
        
                 type = "AAAA";

     

       347
        
                 value = "2a00:23c6:aa22:e401:8dff:9b9a:cb3c:3fcb";

     

       348
        
               }

     

       349
       +
               {

     

       350
       +
                 name = "calibre.${config.networking.domain}.";

     

       351
       +
                 type = "AAAA";

     

       352
       +
                 value = "2a00:23c6:aa22:e401:8dff:9b9a:cb3c:3fcb";

     

       353
       +
               }

     

       354
        
             ];

     

       355
        
           };

     

       356
        
         };