nix
/
System
2
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Setup heimdall

This commit is contained in:
Nathan McCarty 2023-04-10 17:10:25 -04:00
parent a7fa8ac061
commit e147149d83
No known key found for this signature in database
1 changed files with 41 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

34
machines/tounge/configuration.nix
View File

@ -71,8 +71,10 @@
# Setup home manager # Setup home manager
home-manager.users.nathan = import ./home.nix; home-manager.users.nathan = import ./home.nix;
# Containerized applications
virtualisation.oci-containers.containers = {
# Setup pi hole # Setup pi hole
virtualisation.oci-containers.containers."pihole" = { "pihole" = {
image = "pihole/pihole:latest"; image = "pihole/pihole:latest";
ports = [ ports = [
"10.0.0.10:53:53/tcp" "10.0.0.10:53:53/tcp"
@ -82,11 +84,24 @@
"3080:80" "3080:80"
"30443:443" "30443:443"
]; ];
volumes = volumes = [
[ "/var/lib/pihole/:/etc/pihole/" "/var/lib/dnsmasq.d:/etc/dnsmasq.d/" ]; "/var/lib/pihole/:/etc/pihole/"
"/var/lib/dnsmasq.d:/etc/dnsmasq.d/"
];
extraOptions = [ "--cap-add=NET_ADMIN" "--dns=1.1.1.1" ]; extraOptions = [ "--cap-add=NET_ADMIN" "--dns=1.1.1.1" ];
}; };
# Setup heimdall
"hub" = {
image = "lscr.io/linuxserver/heimdall:latest";
environment = {
"PUID" = "1001";
"PGID" = "1001";
"TZ" = "America/New_York";
};
ports = [ "4080:80" "4433:433" ];
volumes = [ "/var/lib/heimdall:/config" ];
};
};
# Nginx virtual hosts # Nginx virtual hosts
services.nginx = { services.nginx = {
enable = true; enable = true;
@ -107,6 +122,17 @@
''; '';
}; };
}; };
"hub.mccarty.io" = {
forceSSL = true;
useACMEHost = "mccarty.io";
locations."/" = {
proxyPass = "http://localhost:4080";
extraConfig = ''
allow 100.64.0.0/10;
deny all;
'';
};
};
"sonarr.mccarty.io" = { "sonarr.mccarty.io" = {
forceSSL = true; forceSSL = true;
useACMEHost = "mccarty.io"; useACMEHost = "mccarty.io";