radarr: use vhost

This commit is contained in:
Giulio De Pasquale 2023-06-05 00:46:39 +02:00
parent acb47f5a73
commit da1b08c44a

View File

@ -2,36 +2,25 @@
let let
domain = "htrad.giugl.io"; domain = "htrad.giugl.io";
auth_block = (import ./openid.nix { inherit lib; }).openresty_oidc_block;
utilities = import ./utilities.nix { inherit lib config; };
inherit (utilities) architectInterfaceAddress;
in in
{ {
services = { services.radarr = {
radarr = { enable = true;
enable = true; group = "media";
group = "media"; };
};
nginx.virtualHosts.${domain} = { architect.vhost.${domain} = with config.architect.networks; {
forceSSL = true; dnsInterfaces = [ "lan" "wireguard" "tailscale" ];
enableACME = true; locations."/" = {
locations."/" = { port = 7878;
proxyPass = "http://127.0.0.1:7878"; deny = [ lan.devices.router.address ];
extraConfig = auth_block { allow = [
access_role = "radarr"; lan.net
}; wireguard.net
}; tailscale.net
];
}; };
}; };
networking.extraHosts = ''
${architectInterfaceAddress "lan"} ${domain}
${architectInterfaceAddress "wireguard"} ${domain}
${architectInterfaceAddress "tailscale"} ${domain}
'';
users.groups.media.members = [ "radarr" ]; users.groups.media.members = [ "radarr" ];
} }