nixos 21.11, added nitter, invidious and libreddit. modified umask transmission

hosts/architect/invidious.nix

@@ -0,0 +1,26 @@
+{ pkgs, ... }:
+
+with import ./network.nix;
+
+let domain = "tube.giugl.io";
+in {
+  services = {
+    invidious = {
+      enable = true;
+      port = 9091;
+    };
+
+    nginx.virtualHosts.${domain} = {
+      forceSSL = true;
+      enableACME = true;
+      locations."/" = {
+        proxyPass = "http://localhost:9091";
+      };
+    };
+  };
+
+  networking.extraHosts = ''
+    ${architect-lan} ${domain}
+    ${architect-wg} ${domain}
+  '';
+}

hosts/architect/libreddit.nix

@@ -0,0 +1,28 @@
+{ pkgs, ... }:
+
+with import ./network.nix;
+
+let domain = "reddit.giugl.io";
+in {
+  services = {
+    libreddit.enable = true;
+
+    nginx.virtualHosts.${domain} = {
+      forceSSL = true;
+      enableACME = true;
+      locations."/" = {
+        proxyPass = "http://localhost:8080";
+        extraConfig = ''
+          allow 10.0.0.0/24;
+          allow 10.3.0.0/24;
+          deny all;
+        '';
+      };
+    };
+  };
+
+  networking.extraHosts = ''
+    ${architect-lan} ${domain}
+    ${architect-wg} ${domain}
+  '';
+}

hosts/architect/nitter.nix

@@ -0,0 +1,26 @@
+{ pkgs, ... }:
+
+with import ./network.nix;
+
+let domain = "tweet.giugl.io";
+in {
+  services = {
+    nitter = {
+      enable = true;
+      port = 9093;
+    };
+
+    nginx.virtualHosts.${domain} = {
+      forceSSL = true;
+      enableACME = true;
+      locations."/" = {
+        proxyPass = "http://localhost:9093";
+      };
+    };
+  };
+
+  networking.extraHosts = ''
+    ${architect-lan} ${domain}
+    ${architect-wg} ${domain}
+  '';
+}