chaos/nixfiles
1
0
Fork 0
Code Issues 2 Releases Activity

start work on photoprism

Browse source
This commit is contained in:
chaos 2024-12-16 13:49:39 +00:00
parent a1ee2b8562
commit 39e831c857
5 changed files with 32 additions and 21 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
hosts/hetzner-arm/containers/storage/profiles/users.nix
View file

@ -7,4 +7,4 @@
isNormalUser = true;
extraGroups = ["storage"];
};
}
}

13
hosts/hetzner-arm/hetzner-arm.nix
View file

@ -29,6 +29,7 @@ in {
vault
restic
vaultwarden
photoprism
])
./hardware.nix
@ -39,19 +40,7 @@ in {
nixpkgs.overlays = [
(_final: prev: {
# So we don't need to build all Vault
# when we already are using vault-bin on this server
vault = prev.vault-bin;
# Have no need for HW Accel, hoping it works with this
jellyfin-ffmpeg = prev.ffmpeg_6-headless;
ffmpeg = prev.ffmpeg-headless;
ffmpeg_4 = prev.ffmpeg_4-headless;
ffmpeg_5 = prev.ffmpeg_5-headless;
ffmpeg_6 = prev.ffmpeg_6-headless;
ffmpeg_7 = prev.ffmpeg_7-headless;
mpd = prev.mpd-headless;
})
];

22
hosts/hetzner-arm/profiles/photoprism.nix Normal file
View file

@ -0,0 +1,22 @@
{...}: {
services.photoprism = {
enable = true;
};
services.nginx.virtualHosts."vault.owo.monster" = {
forceSSL = true;
enableACME = true;
locations = {
"/" = {
proxyPass = "http://127.0.0.1:8200";
proxyWebsockets = true;
extraConfig = ''
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header Host $host;
proxy_buffering off;
proxy_http_version 1.1;
'';
};
};
};
}

2
hosts/hetzner-arm/profiles/restic.nix
View file

@ -24,7 +24,7 @@ in {
machinectl shell mail /usr/bin/env restic-mail $@
'')
(pkgs.writeShellScriptBin "restic-backup-all" ''
(pkgs.writeShellScriptBin "restic-backup-all" ''
${concatStringsSep "\n" (forEach (attrNames config.services.restic.backups) (
name: "systemctl start restic-backups-${name}.service"
))}

14
hosts/hetzner-arm/profiles/vaultwarden.nix
View file

@ -1,13 +1,13 @@
{pkgs, ...}: {
services.vaultwarden = {
enable = true;
backupDir = "/var/backup/vaultwarden";
config = {
DOMAIN = "https://vaultwarden.owo.monster";
ROCKET_ADDRESS = "127.0.0.1";
ROCKET_PORT = 8222;
SIGNUPS_ALLOWED = false;
};
backupDir = "/var/backup/vaultwarden";
config = {
DOMAIN = "https://vaultwarden.owo.monster";
ROCKET_ADDRESS = "127.0.0.1";
ROCKET_PORT = 8222;
SIGNUPS_ALLOWED = false;
};
};
services.nginx.virtualHosts."vaultwarden.owo.monster" = {