58 lines
1.2 KiB
Nix
58 lines
1.2 KiB
Nix
{ config, lib, tools, ... }:
|
|
with tools.nginx;
|
|
{
|
|
links = {
|
|
ombi.protocol = "http";
|
|
radarr = {
|
|
protocol = "http";
|
|
port = 7878;
|
|
};
|
|
sonarr = {
|
|
protocol = "http";
|
|
port = 8989;
|
|
};
|
|
prowlarr = {
|
|
protocol = "http";
|
|
port = 9696;
|
|
};
|
|
};
|
|
|
|
services = {
|
|
radarr = {
|
|
enable = true;
|
|
};
|
|
sonarr = {
|
|
enable = true;
|
|
};
|
|
prowlarr = {
|
|
enable = true;
|
|
};
|
|
ombi = {
|
|
enable = true;
|
|
inherit (config.links.ombi) port;
|
|
};
|
|
|
|
nginx.virtualHosts = with config.links; mappers.mapSubdomains {
|
|
radarr = vhosts.proxy radarr.url;
|
|
sonarr = vhosts.proxy sonarr.url;
|
|
fbi-index = vhosts.proxy prowlarr.url;
|
|
fbi-requests = vhosts.proxy ombi.url;
|
|
};
|
|
};
|
|
systemd.services.radarr.serviceConfig.Slice = "mediamanagement.slice";
|
|
systemd.services.sonarr.serviceConfig.Slice = "mediamanagement.slice";
|
|
systemd.services.prowlarr = {
|
|
after = [ "wireguard-wgmv-es7.service" "network-addresses-wgmv-es7.service" ];
|
|
serviceConfig = {
|
|
Slice = "mediamanagement.slice";
|
|
IPAddressDeny = [ "any" ];
|
|
IPAddressAllow = [
|
|
"localhost"
|
|
"10.64.0.0/16"
|
|
"10.124.0.0/16"
|
|
"10.100.0.0/24"
|
|
];
|
|
};
|
|
};
|
|
}
|