radarr: use vhost

hosts/architect/radarr.nix

@@ -2,36 +2,25 @@
 
 let
   domain = "htrad.giugl.io";
-  auth_block = (import ./openid.nix { inherit lib; }).openresty_oidc_block;
-  
-  utilities = import ./utilities.nix { inherit lib config; };
-  inherit (utilities) architectInterfaceAddress;
 in
 {
-  services = {
+  services.radarr = {
-    radarr = {
     enable = true;
     group = "media";
   };
 
-    nginx.virtualHosts.${domain} = {
+  architect.vhost.${domain} = with config.architect.networks; {
-      forceSSL = true;
+    dnsInterfaces = [ "lan" "wireguard" "tailscale" ];
-      enableACME = true;
     locations."/" = {
-        proxyPass = "http://127.0.0.1:7878";
+      port = 7878;
-        extraConfig = auth_block {
+      deny = [ lan.devices.router.address ];
-          access_role = "radarr";
+      allow = [
+        lan.net
+        wireguard.net
+        tailscale.net
+      ];
     };
   };
-    };
-  };
-
-
-  networking.extraHosts = ''
-    ${architectInterfaceAddress "lan"} ${domain}
-    ${architectInterfaceAddress "wireguard"} ${domain}
-    ${architectInterfaceAddress "tailscale"} ${domain}
-  '';
 
   users.groups.media.members = [ "radarr" ];
 }