gensokyo-zone/infrastructure
1
0
Fork 0
mirror of https://github.com/gensokyo-zone/infrastructure.git synced 2026-02-09 12:29:19 -08:00
Code Issues Projects Releases Packages Wiki Activity Actions

hosts/samhain: Services split-up

Browse source
This commit is contained in:
kat witch 2021-04-27 22:28:40 +01:00
parent b81b82a065
commit a055ce553f
No known key found for this signature in database
GPG key ID: 1B477797DCA5EC72
5 changed files with 79 additions and 38 deletions
Download patch file Download diff file Expand all files Collapse all files

5
hosts/samhain/nixos/default.nix
View file

@ -17,7 +17,10 @@ in {
../../../services/nginx.nix
./thermal
./vm
./torrenting.nix
./nfs.nix
./transmission.nix
./jellyfin.nix
./virtualhosts.nix
];
deploy.target = "personal";

15
hosts/samhain/nixos/jellyfin.nix Normal file
View file

@ -0,0 +1,15 @@
{ config, lib, pkgs, witch, ... }:
{
katnet.public.tcp.ranges = [{
from = 32768;
to = 60999;
}];
katnet.private.tcp.ranges = [{
from = 32768;
to = 60999;
}];
services.jellyfin.enable = true;
}

12
hosts/samhain/nixos/nfs.nix Normal file
View file

@ -0,0 +1,12 @@
{ config, witch, lib, ... }:
with lib;
{
katnet.private.tcp.ports = [ 111 2049 ];
katnet.public.tcp.ports = [ 111 2049 ];
services.nfs.server.enable = true;
services.nfs.server.exports =
"/mnt/zraw/media 192.168.1.0/24(rw) 200::/7(rw) ${witch.secrets.unscoped.ipv6_prefix}(rw)";
}

33
hosts/samhain/nixos/transmission.nix Normal file
View file

@ -0,0 +1,33 @@
{ config, pkgs, ... }:
{
services.transmission = let
transmission-done-script = pkgs.writeScriptBin "script" ''
#!${pkgs.bash}/bin/bash
set -e
if [ "$TR_TORRENT_DIR"/"$TR_TORRENT_NAME" != "/" ]; then
cd "$TR_TORRENT_DIR"/"$TR_TORRENT_NAME"
if [ ! -z "*.rar" ]; then
${pkgs.unrar}/bin/unrar x "*.rar"
fi
chmod ugo=rwX .
fi'';
in {
enable = true;
home = "/mnt/zraw/transmission";
downloadDirPermissions = "777";
settings = {
download-dir = "/mnt/zraw/media/unsorted";
incomplete-dir = "/mnt/zraw/media/.incomplete";
incomplete-dir-enabled = true;
rpc-bind-address = "::";
rpc-whitelist-enabled = false;
rpc-host-whitelist-enabled = false;
script-torrent-done-enabled = true;
dht-enabled = true;
pex-enabled = true;
script-torrent-done-filename = "${transmission-done-script}/bin/script";
umask = 0;
};
};
}

52
hosts/samhain/nixos/torrenting.nix → hosts/samhain/nixos/virtualhosts.nix
View file

@ -1,42 +1,6 @@
{ config, lib, pkgs, witch, ... }:
{ config, ... }:
{
services.transmission = let
transmission-done-script = pkgs.writeScriptBin "script" ''
#!${pkgs.bash}/bin/bash
set -e
if [ "$TR_TORRENT_DIR"/"$TR_TORRENT_NAME" != "/" ]; then
cd "$TR_TORRENT_DIR"/"$TR_TORRENT_NAME"
if [ ! -z "*.rar" ]; then
${pkgs.unrar}/bin/unrar x "*.rar"
fi
chmod ugo=rwX .
fi'';
in {
enable = true;
home = "/mnt/zraw/transmission";
downloadDirPermissions = "777";
settings = {
download-dir = "/mnt/zraw/media/unsorted";
incomplete-dir = "/mnt/zraw/media/.incomplete";
incomplete-dir-enabled = true;
rpc-bind-address = "::";
rpc-whitelist-enabled = false;
rpc-host-whitelist-enabled = false;
script-torrent-done-enabled = true;
dht-enabled = true;
pex-enabled = true;
script-torrent-done-filename = "${transmission-done-script}/bin/script";
umask = 0;
};
};
services.nfs.server.enable = true;
services.nfs.server.exports =
"/mnt/zraw/media 192.168.1.0/24(rw) 200::/7(rw) ${witch.secrets.unscoped.ipv6_prefix}(rw)";
services.jellyfin.enable = true;
services.nginx.virtualHosts = {
"samhain.net.kittywit.ch" = {
useACMEHost = "samhain.net.kittywit.ch";
@ -84,4 +48,18 @@
};
};
};
services.nginx.appendConfig = ''
rtmp {
server {
listen [::]:1935 ipv6only=off;
application kattv {
live on;
allow publish all;
allow play all;
}
}
}
'';
}