Finished setup

systems/mediabox/nixos.nix

@@ -1,4 +1,5 @@
 {
+  config,
   meta,
   lib,
   ...
@@ -6,15 +7,12 @@
   imports = with meta; [
     nixos.reisen-ct
     nixos.sops
-    nixos.tailscale
     nixos.nginx
-    nixos.acme
     nixos.cloudflared
 
-    /*
-      # media
+    # media
     nixos.plex
-    nixos.tautuli
+    nixos.tautulli
     nixos.ombi
 
     # yarr harr fiddle dee dee >w<
@@ -22,9 +20,30 @@
     nixos.sonarr
     nixos.bazarr
     nixos.jackett
-    */
   ];
 
+  sops.secrets.cloudflare_mediabox_tunnel = {
+    owner = config.services.cloudflared.user;
+  };
+
+  services.cloudflared = let
+    tunnelId = "9295ed6e-4743-45c1-83b1-6c252ae5580a";
+  in {
+    tunnels.${tunnelId} = {
+      default = "http_status:404";
+      credentialsFile = config.sops.secrets.cloudflare_mediabox_tunnel.path;
+      ingress = {
+        "plex.gensokyo.zone".service = "http://localhost:32400";
+        "tautuli.gensokyo.zone".service = "http://localhost:8181";
+        "ombi.gensokyo.zone".service = "http://localhost:3579";
+        "sonarr.gensokyo.zone".service = "http://localhost:8989";
+        "radarr.gensokyo.zone".service = "http://localhost:7878";
+        "bazarr.gensokyo.zone".service = "http://localhost:6767";
+        "jackett.gensokyo.zone".service = "http://localhost:9117";
+      };
+    };
+  };
+
   sops.defaultSopsFile = ./secrets.yaml;
 
   system.stateVersion = "21.05";

systems/mediabox/secrets.yaml

@@ -1,4 +1,5 @@
 tailscale-key: ENC[AES256_GCM,data:TnXZW2c5NhMYHutOdDn8NG5RcdcNTzcTXuC27Ir+OO/4abF0rCEts1A=,iv:OK2nUBJ6LyP9w9L05JGtHe5rxmfoNyk8+zF6M6jYIG8=,tag:McbAMcTJ93C5OluGzYMvCw==,type:str]
+cloudflare_mediabox_tunnel: ENC[AES256_GCM,data:8evCY9lil+SYHTfaHOj8ULYFAX9Q5HHj/caZtfEsG30UiLZCThLWAXUA0FmKgIr8TNAz1tt9ySAaoUyDUFs6leV+FNqUv6fsJGKXQ039+s5YiGZzbKpG6EltDjJ8DYLl8JXuxMxOCsbbAsuhCmzUC8T2jbduxrb1f+nu7e7W6c+j8/5+ujH+Bk3mcd65s5/29Z6bwRhHjCwLDqNwnsI84FOIf8O9JrVXbfWmL33/plxo/xVwo7muffHFPFah8zIMNglg+teM,iv:YBRiJ2WzXsntH13Jv9o8XaNe12hS+VyKjAsbBc3o0EQ=,tag:hLywh0v+SfPkE7p+PLQItw==,type:str]
 sops:
     shamir_threshold: 1
     kms: []
@@ -15,8 +16,8 @@ sops:
             aDVRZTJtTzh5aElnN3hpcitZWmluQ3MK/je9HcOaN+DiSi2JsCThRXOEbydNQcRM
             ZBjYlbtPILMjrn4NoUtxnwbmm7vNgGdXVu7EDfQ0OxjWbo9Cv95WZg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-01-11T22:46:33Z"
-    mac: ENC[AES256_GCM,data:lfx0h0sXAM7o5ig7NoqLUNY62B9vxZj2cWMHtfXbCfDIXUt72ybfbjuT0RE9YPnVyzKtVcLzbJwq1ls3LoPLohAAYsqH2C2Qpi3M5sf3vaVHheXAAdcn2ivk9i/PyfiXX8NBkVun2VJp6t7EZs76Xxwznt6vHzjXOZbMeV9wpC8=,iv:wd68KvHD8p2Qe+qfXlQmoIB+wW6GQErKKlsCxt9UflI=,tag:bBkX/j3NE5HQ/J/Yc/FrtA==,type:str]
+    lastmodified: "2024-01-12T05:09:30Z"
+    mac: ENC[AES256_GCM,data:WBT09CBeXUGOPP7OeJHPOEXVjP39jY+XyvDBniHlWOUFsHQn8N9wCRQ9OfJflw5CHmpxRlQvlzROhEoXvx4dgrEzDB0s6tkoTPkXAsMvTZAJVPl99XcOtmAodzAtn6ejsVnKp5f5EGKEubENsK1RvgzKS4oUoA18l8cAgvnq3kQ=,iv:XM54p8iSKzUNUSUbvanhYtjVrfTTWO3Wjyxnw8UFQ+k=,tag:2kPmBVFBoowqfymQCHAFvQ==,type:str]
     pgp:
         - created_at: "2024-01-11T22:30:58Z"
           enc: |-