Lithospherical/nix-config
1
0
Fork 0
forked from jan-leila/nix-config
Code Pull requests Activity

fixed configs connection to nginx

Browse source
This commit is contained in:
Leyla Becker 2024-11-02 15:58:03 -05:00
parent f132f44b96
commit 3e11cfd967
2 changed files with 133 additions and 31 deletions
Download patch file Download diff file Expand all files Collapse all files

11
enviroments/common/default.nix
View file

@ -86,6 +86,12 @@
group = "hass"; group = "hass";
isSystemUser = true; isSystemUser = true;
}; };
headscale = {
uid = 2005;
group = "headscale";
isSystemUser = true;
};
}; };
groups = { groups = {
@ -133,6 +139,11 @@
gid = lib.mkForce 2004; gid = lib.mkForce 2004;
members = ["hass" "leyla"]; members = ["hass" "leyla"];
}; };
headscale = {
gid = 2005;
members = ["headscale"];
};
}; };
}; };

153
enviroments/server/default.nix
View file

@ -4,7 +4,13 @@
pkgs, pkgs,
inputs, inputs,
... ...
}: { }: let
jellyfinPort = 8096;
nfsPort = 2049;
dnsPort = 53;
httpPort = 80;
httpsPort = 443;
in {
imports = [ imports = [
../common ../common
]; ];
@ -47,6 +53,11 @@
description = "subdomain of base domain that headscale will be hosted at"; description = "subdomain of base domain that headscale will be hosted at";
default = "headscale"; default = "headscale";
}; };
hostname = lib.mkOption {
type = lib.types.str;
description = "hosname that headscale will be hosted at";
default = "${config.apps.headscale.subdomain}.${config.apps.base_domain}";
};
}; };
jellyfin = { jellyfin = {
subdomain = lib.mkOption { subdomain = lib.mkOption {
@ -59,6 +70,43 @@
description = "hosname that jellyfin will be hosted at"; description = "hosname that jellyfin will be hosted at";
default = "${config.apps.jellyfin.subdomain}.${config.apps.base_domain}"; default = "${config.apps.jellyfin.subdomain}.${config.apps.base_domain}";
}; };
directory = {
root = lib.mkOption {
type = lib.types.str;
description = "directory that jellyfin will be at";
default = "/home/jellyfin";
};
mediaDirectoryName = lib.mkOption {
type = lib.types.str;
description = "name of the directory to store the media in";
default = "media";
};
mediaDirectory = lib.mkOption {
type = lib.types.str;
description = "directory that jellyfin will store its media in";
default = "${config.apps.jellyfin.directory.root}/${config.apps.jellyfin.directory.mediaDirectoryName}";
};
dataDirectoryName = lib.mkOption {
type = lib.types.str;
description = "name of the directory to store the config in";
default = "data";
};
dataDirectory = lib.mkOption {
type = lib.types.str;
description = "directory that jellyfin will store its config in";
default = "${config.apps.jellyfin.directory.root}/${config.apps.jellyfin.directory.dataDirectoryName}";
};
cacheDirectoryName = lib.mkOption {
type = lib.types.str;
description = "name of the directory to store the cache in";
default = "cache";
};
cacheDirectory = lib.mkOption {
type = lib.types.str;
description = "directory that jellyfin will store its cache in";
default = "${config.apps.jellyfin.directory.root}/${config.apps.jellyfin.directory.cacheDirectoryName}";
};
};
}; };
forgejo = { forgejo = {
subdomain = lib.mkOption { subdomain = lib.mkOption {
@ -151,10 +199,10 @@
systemd = { systemd = {
tmpfiles.rules = [ tmpfiles.rules = [
"d /home/jellyfin 755 jellyfin jellyfin -" "d ${config.apps.jellyfin.directory.root} 755 jellyfin jellyfin -"
"d /home/jellyfin/media 775 jellyfin jellyfin_media -" # is /home/docker/jellyfin/media on existing server "d ${config.apps.jellyfin.directory.mediaDirectory} 2775 jellyfin jellyfin_media -" # is /home/docker/jellyfin/media on existing server
"d /home/jellyfin/config 750 jellyfin jellyfin -" # is /home/docker/jellyfin/config on existing server "d ${config.apps.jellyfin.directory.dataDirectory} 2770 jellyfin jellyfin -" # is /home/docker/jellyfin/config on existing server
"d /home/jellyfin/cache 755 jellyfin jellyfin_media -" # is /home/docker/jellyfin/cache on existing server "d ${config.apps.jellyfin.directory.cacheDirectory} 2750 jellyfin jellyfin -" # is /home/docker/jellyfin/cache on existing server
"d /home/forgejo 750 forgejo forgejo -" "d /home/forgejo 750 forgejo forgejo -"
"d /home/forgejo/data 750 forgejo forgejo -" # is /home/docker/forgejo on existing server "d /home/forgejo/data 750 forgejo forgejo -" # is /home/docker/forgejo on existing server
"d /home/pihole 750 pihole pihole -" # is /home/docker/pihole on old system "d /home/pihole 750 pihole pihole -" # is /home/docker/pihole on old system
@ -230,28 +278,57 @@
postgresql = { postgresql = {
enable = true; enable = true;
ensureDatabases = ["forgejo"]; ensureDatabases = ["forgejo" "headscale"];
ensureUsers = [
{
name = "postgres";
}
{
name = "forgejo";
}
{
name = "headscale";
}
];
identMap = '' identMap = ''
# ArbitraryMapName systemUser DBUser # ArbitraryMapName systemUser DBUser
superuser_map root postgres
# Administration Users
superuser_map postgres postgres superuser_map postgres postgres
superuser_map root postgres
superuser_map leyla postgres
# Client Users
superuser_map forgejo forgejo superuser_map forgejo forgejo
# superuser_map headscale headscale
''; '';
# configuration here lets users access the db that matches their name and lets user postgres access everything # configuration here lets users access the db that matches their name and lets user postgres access everything
authentication = pkgs.lib.mkOverride 10 '' authentication = pkgs.lib.mkOverride 10 ''
# type database DBuser auth-method optional_ident_map # type database DBuser auth-method optional_ident_map
local sameuser all peer map=superuser_map local all postgres peer map=superuser_map
local sameuser all peer map=superuser_map
''; '';
}; };
headscale = { headscale = {
enable = true; enable = true;
user = "headscale";
group = "headscale";
address = "0.0.0.0"; address = "0.0.0.0";
port = 8080; port = 8080;
settings = { settings = {
# server_url = "http://${config.apps.headscale.subdomain}.${config.apps.base_domain}"; server_url = "https://${config.apps.headscale.hostname}";
dns.base_domain = config.apps.base_domain; dns.base_domain = "clients.${config.apps.headscale.hostname}";
logtail.enabled = false; logtail.enabled = true;
# database = {
# type = "postgres";
# postgres = {
# host = "localhost";
# port = 5432;
# user = "headscale";
# name = "headscale";
# };
# };
}; };
}; };
@ -259,13 +336,19 @@
enable = true; enable = true;
user = "jellyfin"; user = "jellyfin";
group = "jellyfin"; group = "jellyfin";
dataDir = "/home/jellyfin/config"; dataDir = config.apps.jellyfin.directory.dataDirectory;
cacheDir = "/home/jellyfin/cache"; cacheDir = config.apps.jellyfin.directory.cacheDirectory;
}; };
forgejo = { forgejo = {
enable = true; enable = true;
database.type = "postgres"; database = {
type = "postgres";
host = "localhost";
port = 5432;
user = "forgejo";
name = "forgejo";
};
lfs.enable = true; lfs.enable = true;
settings = { settings = {
server = { server = {
@ -278,7 +361,7 @@
}; };
home-assistant = { home-assistant = {
enable = true; enable = false;
configDir = "/home/hass"; configDir = "/home/hass";
config.http = { config.http = {
server_port = 8082; server_port = 8082;
@ -295,42 +378,41 @@
settings = { settings = {
server = { server = {
port = 8083; port = 8083;
base_url = config.apps.searx.hostname;
secret_key = "@SEARXNG_SECRET@"; secret_key = "@SEARXNG_SECRET@";
}; };
}; };
}; };
nginx = { nginx = {
enable = false; # TODO: enable this when you want to test all the configs enable = true;
virtualHosts = { virtualHosts = {
${config.apps.headscale.hostname} = { ${config.apps.headscale.hostname} = {
forceSSL = true; # forceSSL = true;
enableACME = true; # enableACME = true;
locations."/" = { locations."/" = {
proxyPass = "http://localhost:${toString config.services.headscale.port}"; proxyPass = "http://localhost:${toString config.services.headscale.port}";
proxyWebsockets = true; proxyWebsockets = true;
}; };
}; };
${config.apps.jellyfin.hostname} = { ${config.apps.jellyfin.hostname} = {
forceSSL = true; # forceSSL = true;
enableACME = true; # enableACME = true;
locations."/".proxyPass = "http://localhost:8096"; locations."/".proxyPass = "http://localhost:${toString jellyfinPort}";
}; };
${config.apps.forgejo.hostname} = { ${config.apps.forgejo.hostname} = {
forceSSL = true; # forceSSL = true;
enableACME = true; # enableACME = true;
locations."/".proxyPass = "http://localhost:${toString config.services.forgejo.settings.server.HTTP_PORT}"; locations."/".proxyPass = "http://localhost:${toString config.services.forgejo.settings.server.HTTP_PORT}";
}; };
${config.apps.home-assistant.hostname} = { ${config.apps.home-assistant.hostname} = {
forceSSL = true; # forceSSL = true;
enableACME = true; # enableACME = true;
locations."/".proxyPass = "http://localhost:${toString config.services.home-assistant.config.http.server_port}"; locations."/".proxyPass = "http://localhost:${toString config.services.home-assistant.config.http.server_port}";
}; };
${config.apps.searx.hostname} = { ${config.apps.searx.hostname} = {
forceSSL = true; # forceSSL = true;
enableACME = true; # enableACME = true;
locations."/".proxyPass = "http://localhost:${toString config.services.searx.settings.port}"; locations."/".proxyPass = "http://localhost:${toString config.services.searx.settings.server.port}";
}; };
}; };
}; };
@ -341,8 +423,17 @@
defaults.email = "jan-leila@protonmail.com"; defaults.email = "jan-leila@protonmail.com";
}; };
# TODO: remove 8081, 8082, 8083 when nginx is enabled networking.firewall.allowedTCPPorts = [
networking.firewall.allowedTCPPorts = [53 2049 3000 8081 8082 8083]; httpPort
httpsPort
dnsPort
nfsPort
jellyfinPort
config.services.headscale.port
config.services.forgejo.settings.server.HTTP_PORT
# config.services.home-assistant.config.http.server_port
config.services.searx.settings.server.port
];
environment.systemPackages = [ environment.systemPackages = [
config.services.headscale.package config.services.headscale.package