5 files changed, 141 insertions, 8 deletions

diff --git a/flake.nix b/flake.nix
index ff479f9..55ed146 100644
--- a/flake.nix
+++ b/flake.nix
@@ -53,6 +53,8 @@
         flaresolverr = flaresolverr.overlays.default;
       };
 
+      formatter."x86_64-linux" = nixpkgs.legacyPackages."x86_64-linux".nixpkgs-fmt;
+
       nixosConfigurations = {
         olive = nixpkgs.lib.nixosSystem {
           system = "x86_64-linux";
diff --git a/home.nix b/home.nix
index 9880d42..a64f8b0 100644
--- a/home.nix
+++ b/home.nix
@@ -50,6 +50,7 @@
     thunderbird
     calibre
     gh
+    sonixd
 
     # gaming
     mgba
diff --git a/hosts/laurel/configuration.nix b/hosts/laurel/configuration.nix
index a40dafd..ab05bc0 100644
--- a/hosts/laurel/configuration.nix
+++ b/hosts/laurel/configuration.nix
@@ -9,6 +9,7 @@
     [
       # Include the results of the hardware scan.
       ./hardware-configuration.nix
+      ./servarr.nix
     ];
 
   # Use the systemd-boot EFI boot loader.
@@ -20,7 +21,7 @@
   # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
   # networking.networkmanager.enable = true;  # Easiest to use and most distros use this by default.
   networking.hostName = "laurel";
-  networking.firewall.allowedTCPPorts = [ 80 443 ];
+  networking.firewall.allowedTCPPorts = [ 80 443 6197 ];
 
   time.timeZone = "Europe/London";
   i18n.defaultLocale = "en_US.UTF-8";
@@ -44,10 +45,19 @@
     ];
   };
 
-  environment.systemPackages = with pkgs; [
-    vim
-    wget
-    curl
+  environment.systemPackages = [
+    pkgs.vim
+    pkgs.wget
+    pkgs.curl
+
+    pkgs.jellyfin
+    pkgs.jellyfin-web
+    pkgs.jellyfin-ffmpeg
+
+    pkgs.htop
+    pkgs.ripgrep
+    pkgs.git
+
   ];
 
   users.users.op = {
@@ -115,15 +125,48 @@
     };
   };
 
+  services.miniflux = {
+    enable = true;
+    adminCredentialsFile = "/etc/miniflux/admin";
+    config = {
+      FETCH_YOUTUBE_WATCH_TIME = 1;
+      PORT = 8383;
+      BASE_URL = "http://rss.laurel";
+    };
+  };
+  services.nginx.virtualHosts."rss.laurel" = {
+    listen = [{ port = 80; addr = "0.0.0.0"; }];
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:${builtins.toString config.services.miniflux.config.PORT}";
+    };
+  };
+
   services.nginx.virtualHosts."oppi.li" = {
     listen = [{ port = 8282; addr = "0.0.0.0"; }];
-    root = "/home/op/site/docs";
+    root = "/www/site/docs";
     locations."/" = {
       tryFiles = "$uri $uri/ =404";
       index = "index.html";
     };
   };
 
+  services.matrix-conduit = {
+    enable = true;
+    settings = {
+      global = {
+        allow_encryption = true;
+        allow_federation = true;
+        allow_registration = false;
+        database_backend = "rocksdb";
+        server_name = "oppi.li";
+        address = "0.0.0.0";
+        port = 6197;
+        enable_lightning_bolt = false;
+      };
+    };
+  };
+
+
   nix.settings.experimental-features = [ "nix-command" "flakes" ];
 
   # This option defines the first version of NixOS you have installed on this particular machine,
diff --git a/hosts/laurel/servarr.nix b/hosts/laurel/servarr.nix
new file mode 100644
index 0000000..8b5dd83
--- /dev/null
+++ b/hosts/laurel/servarr.nix
@@ -0,0 +1,87 @@
+{ config, lib, pkgs, ... }:
+
+{
+  imports = [ ];
+
+  services.transmission = {
+    enable = true;
+    openFirewall = true;
+    openRPCPort = true;
+    user = "torrent";
+    settings = {
+      download-dir = "/torrents";
+      incomplete-dir = "/.incomplete";
+      rpc-bind-address = "0.0.0.0";
+      rpc-whitelist = "127.0.0.1,10.0.0.1,192.168.*.*,100.64.*.*";
+    };
+  };
+  services.nginx.virtualHosts."torrent.${config.networking.hostName}" = {
+    listen = [{ port = 80; addr = "0.0.0.0"; }];
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:9091";
+    };
+  };
+
+  services.sonarr = {
+    enable = true;
+    openFirewall = true;
+    user = "torrent";
+  };
+  services.nginx.virtualHosts."sonarr.${config.networking.hostName}" = {
+    listen = [{ port = 80; addr = "0.0.0.0"; }];
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:8989";
+    };
+  };
+
+  services.radarr = {
+    enable = true;
+    openFirewall = true;
+    user = "torrent";
+  };
+  services.nginx.virtualHosts."radarr.${config.networking.hostName}" = {
+    listen = [{ port = 80; addr = "0.0.0.0"; }];
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:7878";
+    };
+  };
+
+  services.bazarr = {
+    enable = true;
+    openFirewall = true;
+    user = "torrent";
+  };
+  services.nginx.virtualHosts."bazarr.${config.networking.hostName}" = {
+    listen = [{ port = 80; addr = "0.0.0.0"; }];
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:6767";
+    };
+  };
+
+  services.jackett = {
+    enable = true;
+    openFirewall = true;
+    user = "torrent";
+  };
+  services.nginx.virtualHosts."jackett.${config.networking.hostName}" = {
+    listen = [{ port = 80; addr = "0.0.0.0"; }];
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:9117";
+    };
+  };
+
+  services.lidarr = {
+    enable = true;
+    openFirewall = true;
+    user = "torrent";
+  };
+  services.nginx.virtualHosts."lidarr.${config.networking.hostName}" = {
+    listen = [{ port = 80; addr = "0.0.0.0"; }];
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:8686";
+    };
+  };
+
+}
+
+
diff --git a/scripts/record.nix b/scripts/record.nix
index d5bfff5..a86d4cd 100644
--- a/scripts/record.nix
+++ b/scripts/record.nix
@@ -1,11 +1,11 @@
-{ pkgs, ...}:
+{ pkgs, ... }:
 
 let
   name = "record";
   slop = "${pkgs.slop}/bin/slop";
   ffmpeg = "${pkgs.ffmpeg}/bin/ffmpeg";
 in
-  pkgs.writeScriptBin name
+pkgs.writeScriptBin name
   ''
     echo starting recording ...
     coords=$(${slop} -f "%x %y %w %h %g %i") || exit 1