fix: other services

This commit is contained in:
Giulio De Pasquale 2025-04-26 19:43:22 +01:00
parent 353f5822bf
commit 52a5a7e7d2
4 changed files with 15 additions and 52 deletions

View File

@ -1,12 +1,9 @@
{ config, pkgs, lib, ... }: { config, pkgs, ... }:
let let
macbookPubkey = (import ../pubkeys.nix).macbook; macbookPubkey = (import ../pubkeys.nix).macbook;
pubkeys = [ macbookPubkey ]; pubkeys = [ macbookPubkey ];
domain = "devs.giugl.io"; domain = "devs.giugl.io";
utilities = import ./utilities.nix { inherit lib config; };
inherit (utilities) generateDeviceStrings;
in in
{ {
imports = [ imports = [
@ -15,21 +12,15 @@ in
./hardware.nix ./hardware.nix
./firewall.nix ./firewall.nix
./nginx.nix ./nginx.nix
# ./sonarr.nix
# ./bazarr.nix
# ./nzbget.nix
./nextcloud.nix ./nextcloud.nix
./matrix.nix ./matrix.nix
./fail2ban.nix ./fail2ban.nix
./dns.nix ./dns.nix
./prowlarr.nix
./redlib.nix ./redlib.nix
# ./jellyfin.nix
./tailscale.nix ./tailscale.nix
./headscale.nix ./headscale.nix
./llm.nix ./llm.nix
./sunshine.nix ./sunshine.nix
./jellyseer.nix
./postgres.nix ./postgres.nix
./netdata.nix ./netdata.nix
./homeassistant.nix ./homeassistant.nix
@ -91,26 +82,6 @@ in
prefixLength = 24; prefixLength = 24;
}]; }];
}; };
extraHosts = (generateDeviceStrings config.pepe.core.network.interfaces.lan.devices) + ''
# Blacklist
0.0.0.0 metrics.plex.tv
0.0.0.0 analytics.plex.tv
0.0.0.0 cdn.luckyorange.com
0.0.0.0 w1.luckyorange.com
0.0.0.0 browser.sentry-cdn.com
0.0.0.0 analytics.facebook.com
0.0.0.0 ads.facebook.com
0.0.0.0 extmaps-api.yandex.net
0.0.0.0 logservice.hicloud.com
0.0.0.0 logbak.hicloud.com
0.0.0.0 logservice1.hicloud.com
0.0.0.0 samsung-com.112.2o7.net
0.0.0.0 supportmetrics.apple.com
0.0.0.0 analytics.oneplus.cn
0.0.0.0 click.oneplus.cn
0.0.0.0 analytics-api.samsunghealthcn.com
'';
}; };
services = { services = {
@ -168,11 +139,6 @@ in
package = pkgs.unstablePkgs.immich; package = pkgs.unstablePkgs.immich;
}; };
# minio = {
# enable = true;
# domain = "s3.giugl.io";
# };
radarr = { radarr = {
enable = true; enable = true;
domain = "htrad.giugl.io"; domain = "htrad.giugl.io";
@ -190,19 +156,28 @@ in
domain = "htbaz.giugl.io"; domain = "htbaz.giugl.io";
package = pkgs.unstablePkgs.bazarr; package = pkgs.unstablePkgs.bazarr;
}; };
nzbget = { nzbget = {
enable = true; enable = true;
domain = "htnzb.giugl.io"; domain = "htnzb.giugl.io";
package = pkgs.unstablePkgs.nzbget; package = pkgs.unstablePkgs.nzbget;
}; };
jellyfin = { jellyfin = {
enable = true; enable = true;
domain = "media.giugl.io"; domain = "media.giugl.io";
package = pkgs.unstablePkgs.jellyfin; package = pkgs.unstablePkgs.jellyfin;
}; };
jellyseer = {
enable = true;
domain = "aumm-aumm.giugl.io";
};
prowlarr = {
enable = true;
domain = "htpro.giugl.io";
};
}; };
}; };
} }

View File

@ -1,7 +1,6 @@
{ config, pkgs, ... }: { ... }:
{ {
# Enable the DNS module
pepe.core.dns = { pepe.core.dns = {
enable = true; enable = true;
nextDNSId = "d65174"; nextDNSId = "d65174";
@ -11,13 +10,4 @@
}; };
}; };
}; };
# Configure AdGuard
pepe.core.vhost.hosts."adguard.giugl.io" = {
locations."/" = {
port = config.services.adguardhome.port;
allowLAN = true;
allowVPN = true;
};
};
} }

View File

@ -21,8 +21,7 @@ in
package = cfg.package; package = cfg.package;
}; };
pepe.core.vhost.hosts.${cfg.domain} = with config.pepe.core.network; { pepe.core.vhost.hosts.${cfg.domain} = {
dnsInterfaces = [ interfaceTypes.vpn interfaceTypes.lan ];
locations."/" = { locations."/" = {
port = config.services.jellyseerr.port; port = config.services.jellyseerr.port;
allowLAN = true; allowLAN = true;

View File

@ -21,8 +21,7 @@ in
package = cfg.package; package = cfg.package;
}; };
pepe.core.vhost.hosts.${cfg.domain} = with config.pepe.core.network; { pepe.core.vhost.hosts.${cfg.domain} = {
dnsInterfaces = [ interfaceTypes.vpn interfaceTypes.lan ];
locations."/" = { locations."/" = {
port = 9696; port = 9696;
allowLAN = true; allowLAN = true;