Massive refactoring and migration
Changed some wezterm settings Refactored some hosted-services Migrated some services from docker to a nixos service
This commit is contained in:
baduhai
parent
a57cf2cd3f
commit
467c028fa4
9 changed files with 190 additions and 142 deletions
|
|
@ -1,29 +1,29 @@
|
|||
{ inputs, config, pkgs, libs, ... }:
|
||||
|
||||
{
|
||||
users.users.nginx.extraGroups = [ "acme" ];
|
||||
{
|
||||
age.secrets = {
|
||||
paperless-pass.file = ../../../secrets/paperless-pass.age;
|
||||
};
|
||||
|
||||
services = {
|
||||
nginx = {
|
||||
enable = true;
|
||||
group = "hosted";
|
||||
recommendedGzipSettings = true;
|
||||
recommendedOptimisation = true;
|
||||
recommendedProxySettings = true;
|
||||
recommendedTlsSettings = true;
|
||||
virtualHosts = {
|
||||
"baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; root = inputs.homepage; };
|
||||
"bitwarden.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:${toString config.services.vaultwarden.config.ROCKET_PORT}"; };
|
||||
"detect.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:8001"; };
|
||||
"cinny.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:8002"; };
|
||||
"jellyfin.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:8003"; };
|
||||
"librespeed.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:8004"; };
|
||||
"paperless.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:8005"; };
|
||||
"pyload.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:8006"; };
|
||||
"shiori.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:8007"; };
|
||||
"sync.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:8008"; };
|
||||
"whoogle.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:8009"; };
|
||||
"librespeed.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:8003"; };
|
||||
"pyload.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:8005"; };
|
||||
"shiori.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:8006"; };
|
||||
"sync.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:8007"; };
|
||||
"whoogle.baduhai.me" = { useACMEHost = "baduhai.me"; forceSSL = true; kTLS = true; locations."/".proxyPass = "http://127.0.0.1:8008"; };
|
||||
};
|
||||
};
|
||||
|
||||
vaultwarden = {
|
||||
enable = true;
|
||||
config = {
|
||||
|
|
@ -33,6 +33,58 @@
|
|||
ROCKET_PORT = 8000;
|
||||
};
|
||||
};
|
||||
nginx.virtualHosts."bitwarden.baduhai.me" = {
|
||||
useACMEHost = "baduhai.me";
|
||||
forceSSL = true;
|
||||
kTLS = true;
|
||||
locations."/".proxyPass = "http://127.0.0.1:${toString config.services.vaultwarden.config.ROCKET_PORT}";
|
||||
};
|
||||
|
||||
changedetection-io = {
|
||||
enable = true;
|
||||
group = "hosted";
|
||||
behindProxy = true;
|
||||
datastorePath = "/data/changedetection";
|
||||
port = 8001;
|
||||
baseURL = "https://detect.baduhai.me";
|
||||
};
|
||||
nginx.virtualHosts."detect.baduhai.me" = {
|
||||
useACMEHost = "baduhai.me";
|
||||
forceSSL = true;
|
||||
kTLS = true;
|
||||
locations."/".proxyPass = "http://127.0.0.1:${toString config.services.changedetection-io.port}";
|
||||
};
|
||||
|
||||
jellyfin = {
|
||||
enable = true;
|
||||
group = "hosted";
|
||||
openFirewall = true;
|
||||
};
|
||||
nginx.virtualHosts."jellyfin.baduhai.me" = {
|
||||
useACMEHost = "baduhai.me";
|
||||
forceSSL = true;
|
||||
kTLS = true;
|
||||
locations."/".proxyPass = "http://127.0.0.1:8096";
|
||||
};
|
||||
|
||||
paperless = {
|
||||
enable = true;
|
||||
dataDir = "/data/paperless/data";
|
||||
mediaDir = "/data/paperless/media";
|
||||
passwordFile = config.age.secrets.paperless-pass.path;
|
||||
port = 8004;
|
||||
consumptionDirIsPublic = true;
|
||||
extraConfig = {
|
||||
PAPERLESS_OCR_LANGUAGE = "eng+por+deu";
|
||||
};
|
||||
};
|
||||
nginx.virtualHosts."paperless.baduhai.me" = {
|
||||
useACMEHost = "baduhai.me";
|
||||
forceSSL = true;
|
||||
kTLS = true;
|
||||
locations."/".proxyPass = "http://127.0.0.1:${toString config.services.paperless.port}";
|
||||
};
|
||||
|
||||
minecraft-server = {
|
||||
enable = true;
|
||||
eula = true;
|
||||
|
|
@ -53,24 +105,6 @@
|
|||
oci-containers = {
|
||||
backend = "docker";
|
||||
containers = {
|
||||
"changedetection" = {
|
||||
image = "lscr.io/linuxserver/changedetection.io:latest";
|
||||
environment = {
|
||||
PUID = "1000";
|
||||
PGID = "100";
|
||||
TZ = "Europe/Berlin";
|
||||
BASE_URL = "detect.baduhai.me";
|
||||
};
|
||||
volumes = [
|
||||
"/data/changedetection:/config"
|
||||
];
|
||||
ports = [
|
||||
"8001:5000"
|
||||
];
|
||||
extraOptions = [
|
||||
"--pull=always"
|
||||
];
|
||||
};
|
||||
"cinny" = {
|
||||
image = "ghcr.io/cinnyapp/cinny:latest";
|
||||
ports = [
|
||||
|
|
@ -80,27 +114,6 @@
|
|||
"--pull=always"
|
||||
];
|
||||
};
|
||||
"jellyfin" = {
|
||||
image = "lscr.io/linuxserver/jellyfin:10.8.4";
|
||||
environment = {
|
||||
PUID = "1000";
|
||||
PGID = "100";
|
||||
TZ = "Europe/Berlin";
|
||||
DOCKER_MODS = "linuxserver/mods:jellyfin-opencl-intel";
|
||||
};
|
||||
volumes = [
|
||||
"/data/jellyfin/library:/config"
|
||||
"/data/jellyfin/tvseries:/data/tvshows"
|
||||
"/data/jellyfin/movies:/data/movies"
|
||||
];
|
||||
ports = [
|
||||
"8003:8096"
|
||||
];
|
||||
extraOptions = [
|
||||
"--pull=always"
|
||||
"--device=/dev/dri:/dev/dri"
|
||||
];
|
||||
};
|
||||
"librespeed" = {
|
||||
image = "lscr.io/linuxserver/librespeed:latest";
|
||||
environment = {
|
||||
|
|
@ -113,87 +126,87 @@
|
|||
"--pull=always"
|
||||
];
|
||||
};
|
||||
"paperless" = {
|
||||
image = "lscr.io/linuxserver/paperless-ngx:latest";
|
||||
environment = {
|
||||
PUID = "1000";
|
||||
PGID = "100";
|
||||
TZ = "Europe/Berlin";
|
||||
PAPERLESS_URL = "https://paperless.baduhai.me";
|
||||
PAPERLESS_OCR_LANGUAGE = "eng+deu+por";
|
||||
DOCKER_MODS = "linuxserver/mods:papermerge-multilangocr";
|
||||
OCRLANG = "eng,por,deu";
|
||||
};
|
||||
volumes = [
|
||||
"/data/paperless-ngx/config:/config"
|
||||
"/data/paperless-ngx/data:/data"
|
||||
];
|
||||
ports = [
|
||||
"8005:8000"
|
||||
];
|
||||
extraOptions = [
|
||||
"--pull=always"
|
||||
];
|
||||
};
|
||||
"pyload" = { # Download manager
|
||||
image = "lscr.io/linuxserver/pyload-ng:latest";
|
||||
environment = {
|
||||
PUID = "1000";
|
||||
PGID = "100";
|
||||
TZ = "Europe/Berlin";
|
||||
};
|
||||
volumes = [
|
||||
"/data/pyload/config:/config"
|
||||
"/data/pyload/downloads:/downloads"
|
||||
];
|
||||
ports = [
|
||||
"8006:8000"
|
||||
"9666:9666"
|
||||
];
|
||||
extraOptions = [
|
||||
"--pull=always"
|
||||
];
|
||||
};
|
||||
"shiori" = {
|
||||
image = "docker.io/nicholaswilde/shiori:latest";
|
||||
environment = {
|
||||
TZ = "Europe/Berlin";
|
||||
PUID = "1000";
|
||||
PGID = "100";
|
||||
SHIORI_DIR = "/data";
|
||||
};
|
||||
volumes = [
|
||||
"/data/shiori:/data"
|
||||
];
|
||||
ports = [
|
||||
"8007:8080"
|
||||
];
|
||||
extraOptions = [
|
||||
"--pull=always"
|
||||
];
|
||||
};
|
||||
"syncthing" = {
|
||||
image = "lscr.io/linuxserver/syncthing:1.20.4";
|
||||
environment = {
|
||||
PUID = "1000";
|
||||
PGID = "100";
|
||||
TZ = "Europe/Berlin";
|
||||
};
|
||||
volumes = [
|
||||
"/data/syncthing/config:/config"
|
||||
"/data/syncthing/data1:/data1"
|
||||
"/data/syncthing/data2:/data2"
|
||||
"/data/syncthing/notes:/sync/notes"
|
||||
];
|
||||
ports = [
|
||||
"8008:8384"
|
||||
"22000:22000"
|
||||
"21027:21027/udp"
|
||||
];
|
||||
extraOptions = [
|
||||
"--pull=always"
|
||||
];
|
||||
};
|
||||
# "paperless" = {
|
||||
# image = "lscr.io/linuxserver/paperless-ngx:latest";
|
||||
# environment = {
|
||||
# PUID = "1000";
|
||||
# PGID = "100";
|
||||
# TZ = "Europe/Berlin";
|
||||
# PAPERLESS_URL = "https://paperless.baduhai.me";
|
||||
# PAPERLESS_OCR_LANGUAGE = "eng+deu+por";
|
||||
# DOCKER_MODS = "linuxserver/mods:papermerge-multilangocr";
|
||||
# OCRLANG = "eng,por,deu";
|
||||
# };
|
||||
# volumes = [
|
||||
# "/data/paperless-ngx/config:/config"
|
||||
# "/data/paperless-ngx/data:/data"
|
||||
# ];
|
||||
# ports = [
|
||||
# "8005:8000"
|
||||
# ];
|
||||
# extraOptions = [
|
||||
# "--pull=always"
|
||||
# ];
|
||||
# };
|
||||
# "pyload" = { # Download manager
|
||||
# image = "lscr.io/linuxserver/pyload-ng:latest";
|
||||
# environment = {
|
||||
# PUID = "1000";
|
||||
# PGID = "100";
|
||||
# TZ = "Europe/Berlin";
|
||||
# };
|
||||
# volumes = [
|
||||
# "/data/pyload/config:/config"
|
||||
# "/data/pyload/downloads:/downloads"
|
||||
# ];
|
||||
# ports = [
|
||||
# "8005:8000"
|
||||
# "9666:9666"
|
||||
# ];
|
||||
# extraOptions = [
|
||||
# "--pull=always"
|
||||
# ];
|
||||
# };
|
||||
# "shiori" = {
|
||||
# image = "docker.io/nicholaswilde/shiori:latest";
|
||||
# environment = {
|
||||
# TZ = "Europe/Berlin";
|
||||
# PUID = "1000";
|
||||
# PGID = "100";
|
||||
# SHIORI_DIR = "/data";
|
||||
# };
|
||||
# volumes = [
|
||||
# "/data/shiori:/data"
|
||||
# ];
|
||||
# ports = [
|
||||
# "8006:8080"
|
||||
# ];
|
||||
# extraOptions = [
|
||||
# "--pull=always"
|
||||
# ];
|
||||
# };
|
||||
# "syncthing" = {
|
||||
# image = "lscr.io/linuxserver/syncthing:1.20.4";
|
||||
# environment = {
|
||||
# PUID = "1000";
|
||||
# PGID = "100";
|
||||
# TZ = "Europe/Berlin";
|
||||
# };
|
||||
# volumes = [
|
||||
# "/data/syncthing/config:/config"
|
||||
# "/data/syncthing/data1:/data1"
|
||||
# "/data/syncthing/data2:/data2"
|
||||
# "/data/syncthing/notes:/sync/notes"
|
||||
# ];
|
||||
# ports = [
|
||||
# "8007:8384"
|
||||
# "22000:22000"
|
||||
# "21027:21027/udp"
|
||||
# ];
|
||||
# extraOptions = [
|
||||
# "--pull=always"
|
||||
# ];
|
||||
# };
|
||||
"whoogle" = {
|
||||
image = "benbusby/whoogle-search:latest";
|
||||
environment = {
|
||||
|
|
@ -206,7 +219,7 @@
|
|||
WHOOGLE_CONFIG_GET_ONLY = "1";
|
||||
};
|
||||
ports = [
|
||||
"8009:5000"
|
||||
"8008:5000"
|
||||
];
|
||||
extraOptions = [
|
||||
"--pull=always"
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue