From 0837a14000cf7015b019ec8f949fac3b9ea6e4ea Mon Sep 17 00:00:00 2001
From: Nathan McCarty <nathan@mccarty.io>
Date: Wed, 3 May 2023 15:39:48 -0400
Subject: [PATCH] Setup jellyseerr

---
 machines/perception/configuration.nix |  7 +++++++
 machines/tounge/configuration.nix     | 16 ++++++++++++++--
 2 files changed, 21 insertions(+), 2 deletions(-)

diff --git a/machines/perception/configuration.nix b/machines/perception/configuration.nix
index bfbd2a6..450528f 100644
--- a/machines/perception/configuration.nix
+++ b/machines/perception/configuration.nix
@@ -105,6 +105,13 @@
         [ "/var/lib/jellyfin:/config" "/mnt/plex:/media" "/mnt/music:/music" ];
       extraOptions = [ "--device=/dev/dri:/dev/dri" ];
     };
+    # Configure jellyseerr
+    "jellyseerr" = {
+      image = "image: fallenbagel/jellyseerr:latest";
+      environment = { "TZ" = "America/New_York"; };
+      ports = [ "5055:5055" ];
+      volumes = [ "/var/lib/jellyseerr:/app/config" ];
+    };
     # Configure kavita
     "kavita" = {
       image = "kizaing/kavita:latest";
diff --git a/machines/tounge/configuration.nix b/machines/tounge/configuration.nix
index 50a1f10..2bf8649 100644
--- a/machines/tounge/configuration.nix
+++ b/machines/tounge/configuration.nix
@@ -209,13 +209,24 @@
           '';
         };
       };
+      "jellyseerr.mccarty.io" = {
+        forceSSL = true;
+        useACMEHost = "mccarty.io";
+        locations."/" = {
+          proxyPass = "http://100.121.150.78:5055";
+          extraConfig = ''
+            allow all;
+          '';
+        };
+      };
       "tdarr.mccarty.io" = {
         forceSSL = true;
         useACMEHost = "mccarty.io";
         locations."/" = {
           proxyPass = "http://100.121.150.78:8265";
           extraConfig = ''
-            allow all;
+            allow 100.64.0.0/10;
+            deny all;
           '';
         };
       };
@@ -225,7 +236,8 @@
         locations."/" = {
           proxyPass = "http://100.121.150.78:5000";
           extraConfig = ''
-            allow all;
+            allow 100.64.0.0/10;
+            deny all;
           '';
         };
       };