{ config, lib, ... }: let domain = "htrad.giugl.io"; auth_block = (import ./openid.nix { inherit lib; }).openresty_oidc_block; utilities = import ./utilities.nix { inherit lib config; }; inherit (utilities) architectInterfaceAddress; in { services = { radarr = { enable = true; group = "media"; }; nginx.virtualHosts.${domain} = { forceSSL = true; enableACME = true; locations."/" = { proxyPass = "http://127.0.0.1:7878"; extraConfig = auth_block { access_role = "radarr"; }; }; }; }; networking.extraHosts = '' ${architectInterfaceAddress "lan"} ${domain} ${architectInterfaceAddress "wireguard"} ${domain} ${architectInterfaceAddress "tailscale"} ${domain} ''; users.groups.media.members = [ "radarr" ]; }