64 lines
1.4 KiB
Nix
64 lines
1.4 KiB
Nix
{ config, depot, ... }:
|
|
with depot.lib.nginx;
|
|
{
|
|
links = {
|
|
ombi.protocol = "http";
|
|
radarr = {
|
|
protocol = "http";
|
|
port = 7878;
|
|
};
|
|
sonarr = {
|
|
protocol = "http";
|
|
port = 8989;
|
|
};
|
|
prowlarr = {
|
|
protocol = "http";
|
|
port = 9696;
|
|
};
|
|
};
|
|
|
|
users = {
|
|
groups.mediamanagers.gid = 646000020;
|
|
users = {
|
|
radarr.extraGroups = [ "mediamanagers" ];
|
|
sonarr.extraGroups = [ "mediamanagers" ];
|
|
};
|
|
};
|
|
services = {
|
|
radarr = {
|
|
enable = true;
|
|
};
|
|
sonarr = {
|
|
enable = true;
|
|
};
|
|
prowlarr = {
|
|
enable = true;
|
|
};
|
|
ombi = {
|
|
enable = true;
|
|
inherit (config.links.ombi) port;
|
|
};
|
|
|
|
nginx.virtualHosts = with config.links; mappers.mapSubdomains {
|
|
radarr = vhosts.proxy radarr.url;
|
|
sonarr = vhosts.proxy sonarr.url;
|
|
fbi-index = vhosts.proxy prowlarr.url;
|
|
fbi-requests = vhosts.proxy ombi.url;
|
|
};
|
|
};
|
|
systemd.services.radarr.serviceConfig.Slice = "mediamanagement.slice";
|
|
systemd.services.sonarr.serviceConfig.Slice = "mediamanagement.slice";
|
|
systemd.services.prowlarr = {
|
|
after = [ "wireguard-wgmv.service" "network-addresses-wgmv.service" ];
|
|
serviceConfig = {
|
|
Slice = "mediamanagement.slice";
|
|
IPAddressDeny = [ "any" ];
|
|
IPAddressAllow = [
|
|
"localhost"
|
|
"10.64.0.0/16"
|
|
"10.124.0.0/16"
|
|
"10.100.0.0/24"
|
|
];
|
|
};
|
|
};
|
|
}
|