diff --git a/modules/arrstack.nix b/modules/arrstack.nix index 04de3e7..e4250e3 100644 --- a/modules/arrstack.nix +++ b/modules/arrstack.nix @@ -5,12 +5,15 @@ let prowlarr_port = cfg.arrstack.prowlarr.port; radarr_port = cfg.arrstack.radarr.port; sonarr_port = cfg.arrstack.sonarr.port; + whisparr_port = cfg.arrstack.whisparr.port; sabnzbd_port = cfg.arrstack.sabnzbd.port; outpost_port = cfg.authentik.outpostPort; domain = "mc-fucker.cool"; in { + networking.firewall.interfaces.podman0.allowedTCPPorts = [ 12421 28917 ]; + #container config virtualisation.oci-containers.containers.bazarr = { image = "lscr.io/linuxserver/bazarr:latest"; @@ -55,6 +58,7 @@ in "/var/lib/radarr:/config" "/mnt/arrstack:/data" "/mnt/gdrive/movies:/data/media/movies" + "/mnt/box/files:/data/seedbox" ]; extraOptions = cfg.podman.extraOptions; }; @@ -71,6 +75,7 @@ in "/var/lib/sonarr:/config" "/mnt/arrstack:/data" "/mnt/gdrive/Serien:/data/media/tv" + "/mnt/box/files:/data/seedbox" ]; extraOptions = cfg.podman.extraOptions; }; @@ -91,6 +96,25 @@ in extraOptions = cfg.podman.extraOptions; }; + virtualisation.oci-containers.containers.whisparr = { + image = "cr.hotio.dev/hotio/whisparr"; + environment = { + TZ = "Europe/Berlin"; + PUID = "911"; + PGID = "911"; + }; + ports = [ + "${whisparr_port}:${whisparr_port}" + ]; + volumes = [ + "/var/lib/whisparr:/config" + "/mnt/arrstack:/data" + "/mnt/genc/pron/whisparr:/data/media/ati" + #"/mnt/box/files:/data/seedbox" + ]; + extraOptions = cfg.podman.extraOptions; + }; + #webserver config imports = [ ./nginx.nix ]; @@ -186,6 +210,29 @@ in }; }; + "whisparr.${domain}" = { + forceSSL = true; + enableACME = true; + locations = { + "/" = { + proxyPass = "http://127.0.0.1:${outpost_port}"; + extraConfig = '' + #proxy_set_header Host $proxy_host; + proxy_set_header Host $host; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Host $host; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Connection $http_connection; + proxy_redirect off; + proxy_http_version 1.1; + access_log /var/log/nginx/whisparr.${domain}_access.log; + error_log /var/log/nginx/whisparr.${domain}_error.log; + ''; + }; + }; + }; + "sabnzbd.${domain}" = { forceSSL = true; enableACME = true; diff --git a/modules/vars.nix b/modules/vars.nix index 7b1f298..968e893 100644 --- a/modules/vars.nix +++ b/modules/vars.nix @@ -16,6 +16,9 @@ sabnzbd = { port = "9191"; }; + whisparr = { + port = "6969"; + }; }; authentik = { @@ -46,7 +49,7 @@ }; jellyfin = { - domain = "jf.mc-fucker.cool"; + domain = "jftest.mc-fucker.cool"; port = "8096"; };