diff --git a/hosts/architect/radarr.nix b/hosts/architect/radarr.nix index 15748e6..39b4ff7 100644 --- a/hosts/architect/radarr.nix +++ b/hosts/architect/radarr.nix @@ -2,36 +2,25 @@ let domain = "htrad.giugl.io"; - auth_block = (import ./openid.nix { inherit lib; }).openresty_oidc_block; - - utilities = import ./utilities.nix { inherit lib config; }; - inherit (utilities) architectInterfaceAddress; in { - services = { - radarr = { - enable = true; - group = "media"; - }; + services.radarr = { + enable = true; + group = "media"; + }; - nginx.virtualHosts.${domain} = { - forceSSL = true; - enableACME = true; - locations."/" = { - proxyPass = "http://127.0.0.1:7878"; - extraConfig = auth_block { - access_role = "radarr"; - }; - }; + architect.vhost.${domain} = with config.architect.networks; { + dnsInterfaces = [ "lan" "wireguard" "tailscale" ]; + locations."/" = { + port = 7878; + deny = [ lan.devices.router.address ]; + allow = [ + lan.net + wireguard.net + tailscale.net + ]; }; }; - - networking.extraHosts = '' - ${architectInterfaceAddress "lan"} ${domain} - ${architectInterfaceAddress "wireguard"} ${domain} - ${architectInterfaceAddress "tailscale"} ${domain} - ''; - users.groups.media.members = [ "radarr" ]; }