4 files changed, 269 insertions, 15 deletions

diff --git a/hosts/laurel/configuration.nix b/hosts/laurel/configuration.nix
index a40dafd..e824853 100644
--- a/hosts/laurel/configuration.nix
+++ b/hosts/laurel/configuration.nix
@@ -9,6 +9,8 @@
     [
       # Include the results of the hardware scan.
       ./hardware-configuration.nix
+      ./servarr.nix
+      ./media.nix
     ];
 
   # Use the systemd-boot EFI boot loader.
@@ -20,7 +22,7 @@
   # networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
   # networking.networkmanager.enable = true;  # Easiest to use and most distros use this by default.
   networking.hostName = "laurel";
-  networking.firewall.allowedTCPPorts = [ 80 443 ];
+  networking.firewall.allowedTCPPorts = [ 80 443 6197 ];
 
   time.timeZone = "Europe/London";
   i18n.defaultLocale = "en_US.UTF-8";
@@ -31,9 +33,9 @@
   };
 
   # Enable sound.
-  sound.enable = true;
+  # sound.enable = true;
   hardware.pulseaudio.enable = true;
-  hardware.opengl = {
+  hardware.graphics = {
     enable = true;
     extraPackages = with pkgs; [
       intel-media-driver
@@ -44,15 +46,24 @@
     ];
   };
 
-  environment.systemPackages = with pkgs; [
-    vim
-    wget
-    curl
+  environment.systemPackages = [
+    pkgs.vim
+    pkgs.wget
+    pkgs.curl
+
+    pkgs.jellyfin
+    pkgs.jellyfin-web
+    pkgs.jellyfin-ffmpeg
+
+    pkgs.htop
+    pkgs.ripgrep
+    pkgs.git
+
   ];
 
   users.users.op = {
     isNormalUser = true;
-    extraGroups = [ "wheel" "tty" ];
+    extraGroups = [ "wheel" "tty" "syncthing" ];
     home = "/home/op";
     openssh.authorizedKeys.keys = [
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG4oThdAy5wQtzCarxDPuzWX6ImYw0c1QfkF0+wZNE6o np@myrtle"
@@ -66,7 +77,7 @@
   };
 
   services.invidious = {
-    enable = true;
+    enable = false;
     port = 3333;
     domain = "tube.laurel";
     settings = {
@@ -103,27 +114,117 @@
     };
   };
 
-  services.podgrab = {
+  services.miniflux = {
     enable = true;
-    port = 3434;
+    adminCredentialsFile = "/etc/miniflux/admin";
+    config = {
+      FETCH_YOUTUBE_WATCH_TIME = 1;
+      PORT = 8383;
+      BASE_URL = "http://rss.laurel";
+    };
   };
-  services.nginx.virtualHosts."podcast.laurel" = {
+  services.nginx.virtualHosts."rss.laurel" = {
     listen = [{ port = 80; addr = "0.0.0.0"; }];
     locations."/" = {
-      proxyPass = "http://127.0.0.1:${builtins.toString config.services.podgrab.port}";
-      proxyWebsockets = true;
+      proxyPass = "http://127.0.0.1:${builtins.toString config.services.miniflux.config.PORT}";
     };
   };
 
   services.nginx.virtualHosts."oppi.li" = {
     listen = [{ port = 8282; addr = "0.0.0.0"; }];
-    root = "/home/op/site/docs";
+    root = "/www/site/docs";
     locations."/" = {
       tryFiles = "$uri $uri/ =404";
       index = "index.html";
     };
   };
 
+  services.matrix-conduit = {
+    enable = false;
+    settings = {
+      global = {
+        allow_encryption = true;
+        allow_federation = true;
+        allow_registration = false;
+        database_backend = "rocksdb";
+        server_name = "oppi.li";
+        address = "0.0.0.0";
+        port = 6197;
+        enable_lightning_bolt = false;
+      };
+    };
+  };
+  services.mautrix-whatsapp = {
+    enable = false;
+    settings = {
+      homeserver = {
+        address = "http://localhost:6197";
+        domain = "oppi.li";
+      };
+      appservice = { };
+      bridge = {
+        encryption = {
+          allow = true;
+          default = true;
+          require = true;
+        };
+        history_sync = {
+          request_full_sync = true;
+        };
+        mute_bridging = true;
+        permissions = {
+          "*" = "user";
+        };
+        private_chat_portal_meta = true;
+        provisioning = {
+          shared_secret = "disable";
+        };
+      };
+
+    };
+  };
+
+  services.radicale = {
+    enable = true;
+    settings = {
+      server.hosts = [ "0.0.0.0:5232" ];
+      auth = {
+        type = "htpasswd";
+        htpasswd_filename = "/etc/radicale/users";
+        htpasswd_encryption = "bcrypt";
+      };
+    };
+  };
+  services.nginx.virtualHosts."radicale.laurel" = {
+    listen = [{ port = 80; addr = "0.0.0.0"; }];
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:5232";
+    };
+  };
+
+  services.syncthing = {
+    enable = true;
+    dataDir = "/syncthing";
+  };
+  services.nginx.virtualHosts."sync.laurel" = {
+    listen = [{ port = 80; addr = "0.0.0.0"; }];
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:8384";
+    };
+  };
+
+  services.readit = {
+    enable = true;
+    port = 9495;
+  };
+  services.nginx.virtualHosts."read.laurel" = {
+    listen = [{ port = 80; addr = "0.0.0.0"; }];
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:9495";
+    };
+  };
+
+
   nix.settings.experimental-features = [ "nix-command" "flakes" ];
 
   # This option defines the first version of NixOS you have installed on this particular machine,
diff --git a/hosts/laurel/hardware-configuration.nix b/hosts/laurel/hardware-configuration.nix
index 142c4a7..cd34eae 100644
--- a/hosts/laurel/hardware-configuration.nix
+++ b/hosts/laurel/hardware-configuration.nix
@@ -20,6 +20,13 @@
       fsType = "ext4";
     };
 
+  fileSystems."/servarr" =
+    {
+      device = "/dev/sdb";
+      fsType = "ext4";
+    };
+
+
   fileSystems."/boot" =
     {
       device = "/dev/disk/by-uuid/FDC2-EFD1";
diff --git a/hosts/laurel/media.nix b/hosts/laurel/media.nix
new file mode 100644
index 0000000..b5d45dc
--- /dev/null
+++ b/hosts/laurel/media.nix
@@ -0,0 +1,39 @@
+{ config, lib, pkgs, ... }:
+
+{
+  services.jellyfin = {
+    enable = true;
+    openFirewall = true;
+    group = "torrent";
+  };
+  services.nginx.virtualHosts."stream.${config.networking.hostName}" = {
+    listen = [{ port = 80; addr = "0.0.0.0"; }];
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:8096";
+      proxyWebsockets = true;
+    };
+  };
+
+  services.navidrome = {
+    enable = true;
+    openFirewall = true;
+    settings = {
+      MusicFolder = "/servarr/lidarr/";
+      DataFolder = "/etc/navidrome/data";
+      CacheFolder = "/etc/navidrome/cache";
+      Address = "0.0.0.0";
+      Port = 4533;
+      AuthRequestLimit = 0;
+      EnableTranscodingConfig = true;
+    };
+  };
+  services.nginx.virtualHosts."music.${config.networking.hostName}" = {
+    listen = [{ port = 80; addr = "0.0.0.0"; }];
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:${builtins.toString config.services.navidrome.settings.Port}";
+      proxyWebsockets = true;
+    };
+  };
+
+}
+
diff --git a/hosts/laurel/servarr.nix b/hosts/laurel/servarr.nix
new file mode 100644
index 0000000..e9c06c4
--- /dev/null
+++ b/hosts/laurel/servarr.nix
@@ -0,0 +1,107 @@
+{ self, config, lib, pkgs, ... }:
+
+{
+  imports = [ ];
+
+  nixpkgs.overlays = with self.overlays; [
+    #flaresolverr
+  ];
+
+  users.groups."torrent".members = [
+    "op"
+    "sonarr"
+    "radarr"
+    "bazarr"
+    "jackett"
+    "lidarr"
+    "jellyfin"
+    "transmission"
+  ];
+  users.users.torrent = {
+    isNormalUser = true;
+    extraGroups = [ "wheel" "tty" ];
+  };
+  services.transmission = {
+    enable = true;
+    openFirewall = true;
+    openRPCPort = true;
+    user = "torrent";
+    settings = {
+      download-dir = "/torrents";
+      incomplete-dir = "/.incomplete";
+      rpc-bind-address = "0.0.0.0";
+      rpc-whitelist = "127.0.0.1,10.0.0.1,192.168.*.*,100.64.*.*";
+    };
+  };
+  services.nginx.virtualHosts."torrent.${config.networking.hostName}" = {
+    listen = [{ port = 80; addr = "0.0.0.0"; }];
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:9091";
+    };
+  };
+
+  services.sonarr = {
+    enable = true;
+    openFirewall = true;
+    group = "torrent";
+  };
+  services.nginx.virtualHosts."sonarr.${config.networking.hostName}" = {
+    listen = [{ port = 80; addr = "0.0.0.0"; }];
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:8989";
+    };
+  };
+
+  services.radarr = {
+    enable = true;
+    openFirewall = true;
+    group = "torrent";
+  };
+  services.nginx.virtualHosts."radarr.${config.networking.hostName}" = {
+    listen = [{ port = 80; addr = "0.0.0.0"; }];
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:7878";
+    };
+  };
+
+  services.bazarr = {
+    enable = true;
+    openFirewall = true;
+    group = "torrent";
+  };
+  services.nginx.virtualHosts."bazarr.${config.networking.hostName}" = {
+    listen = [{ port = 80; addr = "0.0.0.0"; }];
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:6767";
+    };
+  };
+
+  services.jackett = {
+    enable = true;
+    openFirewall = true;
+    group = "torrent";
+  };
+  services.nginx.virtualHosts."jackett.${config.networking.hostName}" = {
+    listen = [{ port = 80; addr = "0.0.0.0"; }];
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:9117";
+    };
+  };
+
+  services.lidarr = {
+    enable = true;
+    openFirewall = true;
+    group = "torrent";
+  };
+  services.nginx.virtualHosts."lidarr.${config.networking.hostName}" = {
+    listen = [{ port = 80; addr = "0.0.0.0"; }];
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:8686";
+    };
+  };
+
+  services.flaresolverr.enable = true;
+
+}
+
+