1 files changed, 116 insertions, 15 deletions

diff --git a/hosts/laurel/configuration.nix b/hosts/laurel/configuration.nix
index a40dafd..e824853 100644
--- a/hosts/laurel/configuration.nix
+++ b/hosts/laurel/configuration.nix
@@ -9,6 +9,8 @@
     [
       # Include the results of the hardware scan.
       ./hardware-configuration.nix
+      ./servarr.nix
+      ./media.nix
     ];
 
   # Use the systemd-boot EFI boot loader.
@@ -20,7 +22,7 @@
   # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
   # networking.networkmanager.enable = true;  # Easiest to use and most distros use this by default.
   networking.hostName = "laurel";
-  networking.firewall.allowedTCPPorts = [ 80 443 ];
+  networking.firewall.allowedTCPPorts = [ 80 443 6197 ];
 
   time.timeZone = "Europe/London";
   i18n.defaultLocale = "en_US.UTF-8";
@@ -31,9 +33,9 @@
   };
 
   # Enable sound.
-  sound.enable = true;
+  # sound.enable = true;
   hardware.pulseaudio.enable = true;
-  hardware.opengl = {
+  hardware.graphics = {
     enable = true;
     extraPackages = with pkgs; [
       intel-media-driver
@@ -44,15 +46,24 @@
     ];
   };
 
-  environment.systemPackages = with pkgs; [
-    vim
-    wget
-    curl
+  environment.systemPackages = [
+    pkgs.vim
+    pkgs.wget
+    pkgs.curl
+
+    pkgs.jellyfin
+    pkgs.jellyfin-web
+    pkgs.jellyfin-ffmpeg
+
+    pkgs.htop
+    pkgs.ripgrep
+    pkgs.git
+
   ];
 
   users.users.op = {
     isNormalUser = true;
-    extraGroups = [ "wheel" "tty" ];
+    extraGroups = [ "wheel" "tty" "syncthing" ];
     home = "/home/op";
     openssh.authorizedKeys.keys = [
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG4oThdAy5wQtzCarxDPuzWX6ImYw0c1QfkF0+wZNE6o np@myrtle"
@@ -66,7 +77,7 @@
   };
 
   services.invidious = {
-    enable = true;
+    enable = false;
     port = 3333;
     domain = "tube.laurel";
     settings = {
@@ -103,27 +114,117 @@
     };
   };
 
-  services.podgrab = {
+  services.miniflux = {
     enable = true;
-    port = 3434;
+    adminCredentialsFile = "/etc/miniflux/admin";
+    config = {
+      FETCH_YOUTUBE_WATCH_TIME = 1;
+      PORT = 8383;
+      BASE_URL = "http://rss.laurel";
+    };
   };
-  services.nginx.virtualHosts."podcast.laurel" = {
+  services.nginx.virtualHosts."rss.laurel" = {
     listen = [{ port = 80; addr = "0.0.0.0"; }];
     locations."/" = {
-      proxyPass = "http://127.0.0.1:${builtins.toString config.services.podgrab.port}";
-      proxyWebsockets = true;
+      proxyPass = "http://127.0.0.1:${builtins.toString config.services.miniflux.config.PORT}";
     };
   };
 
   services.nginx.virtualHosts."oppi.li" = {
     listen = [{ port = 8282; addr = "0.0.0.0"; }];
-    root = "/home/op/site/docs";
+    root = "/www/site/docs";
     locations."/" = {
       tryFiles = "$uri $uri/ =404";
       index = "index.html";
     };
   };
 
+  services.matrix-conduit = {
+    enable = false;
+    settings = {
+      global = {
+        allow_encryption = true;
+        allow_federation = true;
+        allow_registration = false;
+        database_backend = "rocksdb";
+        server_name = "oppi.li";
+        address = "0.0.0.0";
+        port = 6197;
+        enable_lightning_bolt = false;
+      };
+    };
+  };
+  services.mautrix-whatsapp = {
+    enable = false;
+    settings = {
+      homeserver = {
+        address = "http://localhost:6197";
+        domain = "oppi.li";
+      };
+      appservice = { };
+      bridge = {
+        encryption = {
+          allow = true;
+          default = true;
+          require = true;
+        };
+        history_sync = {
+          request_full_sync = true;
+        };
+        mute_bridging = true;
+        permissions = {
+          "*" = "user";
+        };
+        private_chat_portal_meta = true;
+        provisioning = {
+          shared_secret = "disable";
+        };
+      };
+
+    };
+  };
+
+  services.radicale = {
+    enable = true;
+    settings = {
+      server.hosts = [ "0.0.0.0:5232" ];
+      auth = {
+        type = "htpasswd";
+        htpasswd_filename = "/etc/radicale/users";
+        htpasswd_encryption = "bcrypt";
+      };
+    };
+  };
+  services.nginx.virtualHosts."radicale.laurel" = {
+    listen = [{ port = 80; addr = "0.0.0.0"; }];
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:5232";
+    };
+  };
+
+  services.syncthing = {
+    enable = true;
+    dataDir = "/syncthing";
+  };
+  services.nginx.virtualHosts."sync.laurel" = {
+    listen = [{ port = 80; addr = "0.0.0.0"; }];
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:8384";
+    };
+  };
+
+  services.readit = {
+    enable = true;
+    port = 9495;
+  };
+  services.nginx.virtualHosts."read.laurel" = {
+    listen = [{ port = 80; addr = "0.0.0.0"; }];
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:9495";
+    };
+  };
+
+
   nix.settings.experimental-features = [ "nix-command" "flakes" ];
 
   # This option defines the first version of NixOS you have installed on this particular machine,