rouven.seifert/nixos-config
1
1
Fork 0
mirror of https://git.sr.ht/~rouven/nixos-config synced 2025-05-13 15:51:09 +02:00
Code Issues Projects Releases Packages Wiki Activity

network: use internal domains

Browse source
This commit is contained in:
Rouven Seifert 2025-05-09 14:25:56 +02:00
parent f511f7d146
commit cc59943638
Signed by: rouven.seifert
SSH key fingerprint: SHA256:WedRxwyCvqwDG6cd16qf/fizYDK1pvN4p5bawXlnKk0
7 changed files with 40 additions and 34 deletions
Download patch file Download diff file Expand all files Collapse all files

5
hosts/nuc/modules/torrent/default.nix
View file

@ -1,5 +1,6 @@
{ config, pkgs, ... }:
let
domain = "torrents.vpn.rfive.de";
cfg = {
stateDir = "/var/lib/qbittorrent";
downloadDir = "/var/videos/"; # TODO support other Media Types
@ -124,7 +125,9 @@ in
SystemCallFilter = "@system-service";
};
};
networking.firewall.allowedTCPPorts = [ cfg.port ];
services.caddy.virtualHosts."http://${domain}".extraConfig = ''
reverse_proxy 127.0.0.1:${toString cfg.port}
'';
systemd.tmpfiles.rules = [
# ensure downloads directory is created, set permissions
"d ${cfg.stateDir} - ${cfg.user} ${cfg.user} - -"