add invidious service

hosts/hetzner-vm/hetzner-vm.nix

@@ -5,6 +5,7 @@
     users.chaoticryptidz
     profiles.tailscale
     profiles.sshd
+    hosts.hetzner-vm.services.invidious
     (modulesPath + "/profiles/qemu-guest.nix")
   ];
 
@@ -25,6 +26,10 @@
   networking.hostName = "hetzner-vm";
   time.timeZone = "Europe/London";
 
+  networking.firewall.enable = true;
+  networking.firewall.allowPing = false;
+  networking.firewall.allowedTCPPorts = [ 22 ];
+
   users.users.root.openssh.authorizedKeys.keys = [
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIL4L1eBZzYXZNGBucTn/eOFp48el9JPiYt9iXQDpBSg/ chaoticryptidz@owo.monster" 
   ];

hosts/hetzner-vm/services/invidious.nix

@@ -0,0 +1,36 @@
+{...}: {
+    services.invidious = {
+        enable = true;
+        port = 3000;
+        domain = "invidious.owo.monster";
+        settings = {
+            full_refresh = true;
+            https_only = true;
+            popular_enabled = false;
+            statistics_enabled = true;
+            registration_enabled = true;
+            channel_threads = 2;
+            feed_threads = 2;
+            default_user_preferences = {
+                locale = "en-US";
+                region = "GB";
+                captions = ["English (auto-generated)" "English" ""];
+                dark_mode = true;
+                feed_menu = ["Subscriptions" "Popular"];
+                default_home = "Subscriptions";
+                max_results = 30;
+                annotations = true;
+                annotations_subscribed = true;
+                comments = [];
+                player_style = "invidious";
+                related_videos = true;
+                autoplay = true;
+                continue = false;
+                continue_autoplay = true;
+                quality = "hd720";
+                local = false;
+            };
+        };
+    };
+    networking.firewall.allowedTCPPorts = [ 3000 ];
+}

outputs.nix

@@ -27,7 +27,7 @@ in {
   };
   deploy.nodes.hetzner-vm = {
     hostname = "65.21.182.73";
-    username = "root"
+    username = "root";
     profiles.system = {
       user = "root";
       path = deploy-rs.lib.x86_64-linux.activate.nixos

profiles/sshd/sshd.nix

@@ -1,4 +1,5 @@
 {...}: {
     services.openssh.enable = true;
     services.openssh.permitRootLogin = "prohibit-password";
+    programs.mosh.enable = true;
 }