1 files changed, 68 insertions, 6 deletions

diff --git a/hosts/laurel/configuration.nix b/hosts/laurel/configuration.nix
index a40dafd..84e5a83 100644
--- a/hosts/laurel/configuration.nix
+++ b/hosts/laurel/configuration.nix
@@ -9,6 +9,8 @@
     [
       # Include the results of the hardware scan.
       ./hardware-configuration.nix
+      ./servarr.nix
+      ./media.nix
     ];
 
   # Use the systemd-boot EFI boot loader.
@@ -20,7 +22,7 @@
   # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
   # networking.networkmanager.enable = true;  # Easiest to use and most distros use this by default.
   networking.hostName = "laurel";
-  networking.firewall.allowedTCPPorts = [ 80 443 ];
+  networking.firewall.allowedTCPPorts = [ 80 443 6197 ];
 
   time.timeZone = "Europe/London";
   i18n.defaultLocale = "en_US.UTF-8";
@@ -44,10 +46,19 @@
     ];
   };
 
-  environment.systemPackages = with pkgs; [
-    vim
-    wget
-    curl
+  environment.systemPackages = [
+    pkgs.vim
+    pkgs.wget
+    pkgs.curl
+
+    pkgs.jellyfin
+    pkgs.jellyfin-web
+    pkgs.jellyfin-ffmpeg
+
+    pkgs.htop
+    pkgs.ripgrep
+    pkgs.git
+
   ];
 
   users.users.op = {
@@ -115,15 +126,66 @@
     };
   };
 
+  services.miniflux = {
+    enable = true;
+    adminCredentialsFile = "/etc/miniflux/admin";
+    config = {
+      FETCH_YOUTUBE_WATCH_TIME = 1;
+      PORT = 8383;
+      BASE_URL = "http://rss.laurel";
+    };
+  };
+  services.nginx.virtualHosts."rss.laurel" = {
+    listen = [{ port = 80; addr = "0.0.0.0"; }];
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:${builtins.toString config.services.miniflux.config.PORT}";
+    };
+  };
+
   services.nginx.virtualHosts."oppi.li" = {
     listen = [{ port = 8282; addr = "0.0.0.0"; }];
-    root = "/home/op/site/docs";
+    root = "/www/site/docs";
     locations."/" = {
       tryFiles = "$uri $uri/ =404";
       index = "index.html";
     };
   };
 
+  services.matrix-conduit = {
+    enable = true;
+    settings = {
+      global = {
+        allow_encryption = true;
+        allow_federation = true;
+        allow_registration = false;
+        database_backend = "rocksdb";
+        server_name = "oppi.li";
+        address = "0.0.0.0";
+        port = 6197;
+        enable_lightning_bolt = false;
+      };
+    };
+  };
+
+  services.radicale = {
+    enable = true;
+    settings = {
+      server.hosts = [ "0.0.0.0:5232" ];
+      auth = {
+        type = "htpasswd";
+        htpasswd_filename = "/etc/radicale/users";
+        htpasswd_encryption = "bcrypt";
+      };
+    };
+  };
+  services.nginx.virtualHosts."radicale.laurel" = {
+    listen = [{ port = 80; addr = "0.0.0.0"; }];
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:5232";
+    };
+  };
+
+
   nix.settings.experimental-features = [ "nix-command" "flakes" ];
 
   # This option defines the first version of NixOS you have installed on this particular machine,