nixos-config/machines/orbi/media-arr.nix

85 lines
1.9 KiB
Nix
Raw Normal View History

2023-12-09 17:15:50 +01:00
{ config, ... }:
{
networking.firewall.interfaces.wg0.allowedTCPPorts = [ 7878 8989 ];
# download series
services.sonarr = {
enable = true;
group = "media";
user = "media";
};
# download movies
services.radarr = {
enable = true;
group = "media";
user = "media";
};
# better indexer apis
services.prowlarr = {
enable = true;
#group = "media";
#user = "media";
};
services.jellyseerr = {
enable = true;
};
services.permown."/media/arr" = {
owner = "media";
group = "media";
directory-mode = "770";
file-mode = "770";
};
services.nginx.virtualHosts = {
"radarr.${config.networking.hostName}.private" = {
2024-04-06 10:34:54 +02:00
serverAliases = [ "radarr.ingolf-wagner.de" ];
2023-12-09 17:15:50 +01:00
extraConfig = ''
allow ${config.tinc.private.subnet};
2024-04-06 10:34:54 +02:00
allow ${config.wireguard.wg0.subnet};
2023-12-09 17:15:50 +01:00
deny all;
'';
locations."/" = {
proxyPass = "http://localhost:7878";
proxyWebsockets = true;
};
};
"sonarr.${config.networking.hostName}.private" = {
2024-04-06 10:34:54 +02:00
serverAliases = [ "sonarr.ingolf-wagner.de" ];
2023-12-09 17:15:50 +01:00
extraConfig = ''
allow ${config.tinc.private.subnet};
2024-04-06 10:34:54 +02:00
allow ${config.wireguard.wg0.subnet};
2023-12-09 17:15:50 +01:00
deny all;
'';
locations."/" = {
proxyPass = "http://localhost:8989";
proxyWebsockets = true;
};
};
"prowlarr.${config.networking.hostName}.private" = {
extraConfig = ''
allow ${config.tinc.private.subnet};
deny all;
'';
locations."/" = {
proxyPass = "http://localhost:9696";
proxyWebsockets = true;
};
};
"jellyseerr.${config.networking.hostName}.private" = {
extraConfig = ''
allow ${config.tinc.private.subnet};
deny all;
'';
locations."/" = {
proxyPass = "http://localhost:${toString config.services.jellyseerr.port}";
proxyWebsockets = true;
};
};
};
}