From 2fbbe7eac3a7827a753aed3aa41171e7059595f8 Mon Sep 17 00:00:00 2001 From: Akshay Date: Mon, 11 Mar 2024 21:43:20 +0000 Subject: add mantis --- hosts/mantis/configuration.nix | 200 ++++++++++++++++++++++++++++++++ hosts/mantis/hardware-configuration.nix | 40 +++++++ 2 files changed, 240 insertions(+) create mode 100644 hosts/mantis/configuration.nix create mode 100644 hosts/mantis/hardware-configuration.nix (limited to 'hosts/mantis') diff --git a/hosts/mantis/configuration.nix b/hosts/mantis/configuration.nix new file mode 100644 index 0000000..8b5b489 --- /dev/null +++ b/hosts/mantis/configuration.nix @@ -0,0 +1,200 @@ +# Edit this configuration file to define what should be installed on +# your system. Help is available in the configuration.nix(5) man page, on +# https://search.nixos.org/options and in the NixOS manual (`nixos-help`). + +{ config, lib, pkgs, self, ... }: + +{ + imports = + [ + # Include the results of the hardware scan. + ./hardware-configuration.nix + ]; + + nixpkgs.overlays = with self.overlays; [ + flaresolverr + ]; + + # Use the systemd-boot EFI boot loader. + boot.loader.systemd-boot.enable = true; + boot.loader.efi.canTouchEfiVariables = true; + + networking.hostName = "mantis"; # Define your hostname. + networking.wireless.iwd.enable = true; # Enables wireless support via wpa_supplicant. + networking.firewall.allowedTCPPorts = [ 80 443 ]; + + time.timeZone = "Europe/London"; + i18n.defaultLocale = "en_US.UTF-8"; + + nixpkgs.config.packageOverrides = pkgs: { + vaapiIntel = pkgs.vaapiIntel.override { enableHybridCodec = true; }; + }; + + # Enable sound. + sound.enable = true; + hardware.pulseaudio.enable = true; + hardware.opengl = { + enable = true; + extraPackages = with pkgs; [ + intel-media-driver + vaapiIntel + vaapiVdpau + libvdpau-va-gl + intel-compute-runtime # OpenCL filter support (hardware tonemapping and subtitle burn-in) + ]; + }; + + # Define a user account. Don't forget to set a password with ‘passwd’. + users.users.op = { + isNormalUser = true; + extraGroups = [ "wheel" "tty" ]; + packages = with pkgs; [ ]; + home = "/home/op"; + openssh.authorizedKeys.keys = [ + "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILzFK/zY2ZaAftBfFPO+IJAgyD45pe0fXrpF81p8aNIl np@myrtle" + ]; + }; + users.groups."torrent".members = [ + "sonarr" + "radarr" + "bazarr" + "jackett" + "lidarr" + "jellyfin" + "transmission" + ]; + + environment.systemPackages = with pkgs; [ + vim + wget + pkgs.jellyfin + pkgs.jellyfin-web + pkgs.jellyfin-ffmpeg + + pkgs.htop + pkgs.ripgrep + ]; + + services.openssh.enable = true; + services.nginx.enable = true; + services.tailscale.enable = true; + + services.jellyfin = { + enable = true; + openFirewall = true; + group = "torrent"; + }; + services.nginx.virtualHosts."stream.mantis" = { + listen = [{ port = 80; addr = "0.0.0.0"; }]; + locations."/" = { + proxyPass = "http://127.0.0.1:8096"; + proxyWebsockets = true; + }; + }; + + services.transmission = { + enable = true; + openFirewall = true; + openRPCPort = true; + group = "torrent"; + settings = { + download-dir = "/torrents"; + incomplete-dir = "/.incomplete"; + rpc-bind-address = "0.0.0.0"; + rpc-whitelist = "127.0.0.1,10.0.0.1,192.168.*.*,100.64.*.*"; + }; + }; + services.nginx.virtualHosts."torrent.mantis" = { + listen = [{ port = 80; addr = "0.0.0.0"; }]; + locations."/" = { + proxyPass = "http://127.0.0.1:9091"; + }; + }; + + services.sonarr = { + enable = true; + openFirewall = true; + group = "torrent"; + }; + services.nginx.virtualHosts."sonarr.mantis" = { + listen = [{ port = 80; addr = "0.0.0.0"; }]; + locations."/" = { + proxyPass = "http://127.0.0.1:8989"; + }; + }; + + services.radarr = { + enable = true; + openFirewall = true; + group = "torrent"; + }; + services.nginx.virtualHosts."radarr.mantis" = { + listen = [{ port = 80; addr = "0.0.0.0"; }]; + locations."/" = { + proxyPass = "http://127.0.0.1:7878"; + }; + }; + + services.bazarr = { + enable = true; + openFirewall = true; + group = "torrent"; + }; + services.nginx.virtualHosts."bazarr.mantis" = { + listen = [{ port = 80; addr = "0.0.0.0"; }]; + locations."/" = { + proxyPass = "http://127.0.0.1:6767"; + }; + }; + + services.jackett = { + enable = true; + openFirewall = true; + group = "torrent"; + }; + services.nginx.virtualHosts."jackett.mantis" = { + listen = [{ port = 80; addr = "0.0.0.0"; }]; + locations."/" = { + proxyPass = "http://127.0.0.1:9117"; + }; + }; + + services.lidarr = { + enable = true; + openFirewall = true; + group = "torrent"; + }; + services.nginx.virtualHosts."lidarr.mantis" = { + listen = [{ port = 80; addr = "0.0.0.0"; }]; + locations."/" = { + proxyPass = "http://127.0.0.1:8686"; + }; + }; + + nix.settings.experimental-features = [ "nix-command" "flakes" ]; + + # Copy the NixOS configuration file and link it from the resulting system + # (/run/current-system/configuration.nix). This is useful in case you + # accidentally delete configuration.nix. + # system.copySystemConfiguration = true; + + # This option defines the first version of NixOS you have installed on this particular machine, + # and is used to maintain compatibility with application data (e.g. databases) created on older NixOS versions. + # + # Most users should NEVER change this value after the initial install, for any reason, + # even if you've upgraded your system to a new NixOS release. + # + # This value does NOT affect the Nixpkgs version your packages and OS are pulled from, + # so changing it will NOT upgrade your system. + # + # This value being lower than the current NixOS release does NOT mean your system is + # out of date, out of support, or vulnerable. + # + # Do NOT change this value unless you have manually inspected all the changes it would make to your configuration, + # and migrated your data accordingly. + # + # For more information, see `man configuration.nix` or https://nixos.org/manual/nixos/stable/options#opt-system.stateVersion . + system.stateVersion = "23.11"; # Did you read the comment? + +} + diff --git a/hosts/mantis/hardware-configuration.nix b/hosts/mantis/hardware-configuration.nix new file mode 100644 index 0000000..8d7f39a --- /dev/null +++ b/hosts/mantis/hardware-configuration.nix @@ -0,0 +1,40 @@ +# Do not modify this file! It was generated by ‘nixos-generate-config’ +# and may be overwritten by future invocations. Please make changes +# to /etc/nixos/configuration.nix instead. +{ config, lib, pkgs, modulesPath, ... }: + +{ + imports = + [ (modulesPath + "/installer/scan/not-detected.nix") + ]; + + boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "usbhid" "usb_storage" "sd_mod" ]; + boot.initrd.kernelModules = [ ]; + boot.kernelModules = [ "kvm-intel" ]; + boot.extraModulePackages = [ ]; + + fileSystems."/" = + { device = "/dev/disk/by-uuid/e3eda8a2-b5fe-4458-988c-48579a7cc6c6"; + fsType = "ext4"; + }; + + fileSystems."/boot" = + { device = "/dev/disk/by-uuid/A170-EC57"; + fsType = "vfat"; + }; + + swapDevices = + [ { device = "/dev/disk/by-uuid/61cb6a91-b916-40b9-b231-c04378629d90"; } + ]; + + # Enables DHCP on each ethernet and wireless interface. In case of scripted networking + # (the default) this is the recommended approach. When using systemd-networkd it's + # still possible to use this option, but it's recommended to use it in conjunction + # with explicit per-interface declarations with `networking.interfaces..useDHCP`. + networking.useDHCP = lib.mkDefault true; + # networking.interfaces.enp2s0.useDHCP = lib.mkDefault true; + # networking.interfaces.wlp3s0.useDHCP = lib.mkDefault true; + + nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux"; + hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware; +} -- cgit v1.2.3