blake/nix
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

20 current 2025-10-07 00:49:35 25.05.20251001.5b5be50 6.12.49 *

Browse Source
This commit is contained in:
blake
2025-10-07 00:57:41 -05:00
parent 8bce12250b
commit 386b9ea6a7
3 changed files with 17 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
flake.nix
View File

@@ -1,6 +1,6 @@
# flake for blakes nixos config # flake for blakes nixos config
# define new devices in outputs # define new devices in outputs
# generation: 19 current 2025-10-07 00:48:59 25.05.20251001.5b5be50 6.12.49 * # generation: 20 current 2025-10-07 00:49:35 25.05.20251001.5b5be50 6.12.49 *
{ {
description = "blakes nix config"; description = "blakes nix config";
inputs = { inputs = {

4
modules/homelab/services/arr/sonarr/default.nix
View File

@@ -11,7 +11,7 @@ in
port = lib.mkOption { port = lib.mkOption {
type = lib.types.int; type = lib.types.int;
default = 7105; default = 7105;
description = "define port for sonarr"; description = "set port for sonarr";
}; };
}; };
@@ -57,7 +57,7 @@ in
sslCertificate = config.sops.secrets."ssl_blakedheld_crt".path; sslCertificate = config.sops.secrets."ssl_blakedheld_crt".path;
sslCertificateKey = config.sops.secrets."ssl_blakedheld_key".path; sslCertificateKey = config.sops.secrets."ssl_blakedheld_key".path;
locations."/" = { locations."/" = {
proxyPass = "http://127.0.0.1:7105"; proxyPass = "http://127.0.0.1:${toString port}";
}; };
}; };
}; };

23
modules/homelab/services/default.nix.template
View File

@@ -7,11 +7,12 @@ in
{ {
options.modules.services.<service_name> = { options.modules.services.<service_name> = {
enable = lib.mkEnableOption "enables <service_name>"; enable = lib.mkEnableOption "enables <service_name>";
# extra options
# mode = lib.mkOption { # set port options
# type = lib.types.enum [ "server" "client" ]; # port = lib.mkOption {
# default = "client"; # type = lib.types.int;
# description = "whether syncthing should run as a client (user) or server (system-wide)."; # default = <port_number>;
# description = "set port for <service_name> (default: <port_number>";
# }; # };
}; };
@@ -29,7 +30,7 @@ in
home = "/var/lib/<service_name>"; home = "/var/lib/<service_name>";
createHome = true; createHome = true;
group = "<service_name>"; group = "<service_name>";
extraGroups = [ "media" "video" "render" ]; extraGroups = [ "media" ];
}; };
# enable the <service_name> service # enable the <service_name> service
@@ -39,22 +40,26 @@ in
user = "<service_name>"; # Default: <service_name> user = "<service_name>"; # Default: <service_name>
group = "<service_name>"; # Default: <service_name> group = "<service_name>"; # Default: <service_name>
dataDir = "/var/lib/<service_name>"; # Config + metadata storage dataDir = "/var/lib/<service_name>"; # Config + metadata storage
dataDir = "/var/lib/<service_name>"; # Config + metadata storage
# settings = {
# server.port = cfg.port;
# };
}; };
# override umask to make permissions work out # override umask to make permissions work out
systemd.services.<service_name>.serviceConfig = { UMask = lib.mkForce "0007"; }; systemd.services.<service_name>.serviceConfig = { UMask = lib.mkForce "0007"; };
# open firewall # open firewall
#networking.firewall.allowedTCPPorts = [ 8096 ]; #networking.firewall.allowedTCPPorts = [ <port_number> ];
# reverse proxy entryo # reverse proxy entryo
services.nginx.virtualHosts."media.blakedheld.xyz" = { services.nginx.virtualHosts."<service_name>.snowbelle.lan" = {
enableACME = false; enableACME = false;
forceSSL = true; forceSSL = true;
sslCertificate = config.sops.secrets."ssl_blakedheld_crt".path; sslCertificate = config.sops.secrets."ssl_blakedheld_crt".path;
sslCertificateKey = config.sops.secrets."ssl_blakedheld_key".path; sslCertificateKey = config.sops.secrets."ssl_blakedheld_key".path;
locations."/" = { locations."/" = {
proxyPass = "http://127.0.0.1:8096"; proxyPass = "http://127.0.0.1:<port_number>";
}; };
}; };
}; };