christoph/flake-homelab
1
Fork 0
Code Activity

Compare commits

base: christoph:3c9e3de1aa909d52b5f9e4e7f38ef5d528968618
Branches Tags
christoph:main
...
compare: christoph:main
Branches Tags
christoph:main

36 Commits
3c9e3de1aa ... main

Author SHA1 Message Date
Christoph Urlacher
6eae420d21 Remove obsolete nfs mounts 2025-07-08 17:42:11 +02:00
Christoph Urlacher
244e14af94 ServeNix: Remove obsolete services 2025-06-03 02:29:30 +02:00
Christoph Urlacher
1f8ff6f270 ServeNix: Update Immich 2025-05-24 16:40:15 +02:00
Christoph Urlacher
9555c20fc3 ServeNix: Disable NextCloud cronjob container 2025-05-24 16:40:15 +02:00
Christoph Urlacher
e82f958961 ThinkNix: Disable docker ipv6 2025-03-26 14:34:03 +01:00
Christoph Urlacher
7f41c82d5f ServeNix: Disable docker ipv6 2025-03-26 14:33:58 +01:00
Christoph Urlacher
f91dbcc046 Servenix: Update box service 2025-03-26 14:02:21 +01:00
Christoph Urlacher
70ead97dbc Servenix: Update docker ipv6 config 2025-03-10 17:20:16 +01:00
Christoph Urlacher
fb15b2c387 ThinkNix: Update docker ipv6 config 2025-03-10 16:57:39 +01:00
Christoph Urlacher
efcf7ed4a7 ServeNix: Update docker ipv6 config 2025-03-10 16:46:06 +01:00
Christoph Urlacher
a9219d324c ThinkNix: Update docker ipv6 config 2025-03-10 16:45:45 +01:00
Christoph Urlacher
fe73dc7da7 ThinkNix: Disable homepage 2025-03-10 16:40:19 +01:00
Christoph Urlacher
b51eac7c4b ThinkNix: Update ipv6 addr 2025-03-10 16:18:27 +01:00
Christoph Urlacher
537207da6d ServeNix: Update ipv6 addr 2025-03-10 16:18:21 +01:00
Christoph Urlacher
bc28bb8f26 ThinkNix: Enable IPv6 2025-03-10 14:46:59 +01:00
Christoph Urlacher
176b263803 ServeNix: Enable IPv6 2025-03-10 14:33:18 +01:00
Christoph Urlacher
e75c4cd83d ServeNix: Add formula11 service 2025-03-10 13:48:51 +01:00
Christoph Urlacher
7c6f0d5678 ServeNix: Disable old NFS mount 2025-03-10 13:48:45 +01:00
Christoph Urlacher
03f7dfc0a4 ThinkNix: Revert homepage privileges 2025-01-29 19:19:19 +01:00
Christoph Urlacher
43a3aefc59 ThinkNix: Make homepage run privileged (for docker socket access) 2025-01-29 19:18:31 +01:00
Christoph Urlacher
4ec1aca96b ThinkNix: Allow docker access via tcp socket 2025-01-29 19:18:20 +01:00
Christoph Urlacher
654a8ddb21 ThinkNix: Update kopia volumes 2025-01-29 19:18:10 +01:00
Christoph Urlacher
45f1ca6412 Move homepage ServeNix -> ThinkNix 2025-01-29 19:01:18 +01:00
Christoph Urlacher
175562d85e ServeNix: Disable NC cronjob container 2025-01-29 18:52:06 +01:00
Christoph Urlacher
833feda4f1 ThinkNix: Update wud image location 2025-01-29 17:58:14 +01:00
Christoph Urlacher
b1d1d71ed3 ServeNix: Update wud image location 2025-01-29 17:58:07 +01:00
Christoph Urlacher
261bfe95c9 ThinkNix: Add whats-up-docker 2025-01-29 17:49:11 +01:00
Christoph Urlacher
9c568262ca ServeNix: Replace portainer with portainer/agent (user thinknix as master) 2025-01-29 17:48:56 +01:00
Christoph Urlacher
370268b9e6 ServeNix: Update kopia volumes 2025-01-29 17:48:41 +01:00
Christoph Urlacher
e8100dafea Update kopia volumes 2024-09-23 00:55:06 +02:00
Christoph Urlacher
603c7e3c1d Add formula10 cache volume 
Will be used for the FastF1 cache in the future
 2024-09-23 00:46:18 +02:00
Christoph Urlacher
a60a495513 Disable obsolete services 2024-09-11 01:45:53 +02:00
Christoph Urlacher
0b7c394d01 Add library to unmanic 2024-08-21 10:09:13 +02:00
Christoph Urlacher
3febc830e0 Update nextcloud cron interval 2024-08-21 01:17:52 +02:00
Christoph Urlacher
fb18eb5877 Replace fileflows with unmanic 2024-08-21 01:17:45 +02:00
Christoph Urlacher
9d3ba741cd Add clips volume 2024-08-21 01:17:26 +02:00
26 changed files with 215 additions and 699 deletions
Expand all files Collapse all files

60
ServeNix/configuration.nix
View File

@ -19,14 +19,16 @@
# ./services/airsignal.nix
./services/heidi.nix
./services/formula10.nix
./services/formula11.nix
# General
./services/authelia.nix
./services/gitea.nix
./services/gitea-runner.nix
# ./services/homeassistant.nix # Replaced by HAOS
./services/homepage.nix
# ./services/homepage.nix
./services/immich.nix
./services/jellyfin.nix
./services/kopia.nix
./services/nextcloud.nix
./services/nginx-proxy-manager.nix
@ -35,24 +37,6 @@
# ./services/uptime-kuma.nix
./services/whats-up-docker.nix
# ./services/wireguard-vps.nix # NOTE: Runs on ThinkNix
# MultimediArr
./services/bazarr.nix
./services/fileflows.nix
./services/jellyfin.nix
./services/jellyseerr.nix
./services/jellystat.nix
./services/prowlarr.nix
./services/radarr.nix
./services/sonarr.nix
./services/sabnzbd.nix
# Box
./services/box-fileflows.nix
./services/box-hydra.nix
./services/box-metube.nix
./services/box-sabnzbd.nix
./services/box-stash.nix
];
# Bootloader.
@ -96,16 +80,32 @@
# Enable networking
networkmanager.enable = true;
enableIPv6 = true;
interfaces.ens18 = {
ipv4.addresses = [
{
address = "192.168.86.25";
prefixLength = 24;
}
];
ipv6.addresses = [
{
address = "fd00::19"; # 25 in hex
prefixLength = 120;
}
];
};
interfaces.ens18.ipv4.addresses = [{
address = "192.168.86.25";
prefixLength = 24;
}];
defaultGateway = "192.168.86.5";
defaultGateway6 = "fd00::5";
nameservers = [
# "127.0.0.1"
"192.168.86.26"
# "8.8.8.8"
"192.168.86.26"
"fd00::1a" # 26 in hex
];
};
@ -127,6 +127,7 @@
# - Disabling this prevents containers from having internet connection. DNS issue?
# ${dockercli} network create -o "com.docker.network.bridge.enable_ip_masquerade"="false" ${network}
# ${dockercli} network create --ipv6 --gateway="2000::1" --subnet="2000::/80" ${network}
${dockercli} network create ${network}
else
echo "${network} already exists in docker"
@ -182,6 +183,7 @@
nnn
busybox
glances
ffmpeg
ripgrep
docker-compose
@ -228,15 +230,25 @@
# setSocketVariable = true;
# };
daemon.settings = {
# ipv6 = true; # TODO: Resulted in slowdowns for some services?
# fixed-cidr-v6 = "2001::/80";
dns = [
# TODO: Does this circumvent my DNS for each container?
# It might improve gitea actions though...
"8.8.8.8"
# "2001:4860:4860::8888"
# TODO: Might prevent containers from having DNS?
# "127.0.0.1"
# "192.168.86.25"
];
# Allow access via tcp socket (for homepage)
hosts = [
"tcp://0.0.0.0:2375"
"unix:///var/run/docker.sock"
];
};
};
oci-containers.backend = "docker";

22
ServeNix/hardware-configuration.nix
View File

@ -47,32 +47,10 @@
fsType = "nfs";
};
"/media/TV-Usenet" = {
device = "192.168.86.20:/mnt/SG Exos Mirror 18TB/Usenet";
fsType = "nfs";
};
"/media/TV-Music" = {
device = "192.168.86.20:/mnt/SG Exos Mirror 18TB/Music";
fsType = "nfs";
};
# WD Blue Stripe Shares
"/media/Stash-Video" = {
device = "192.168.86.20:/mnt/WD Blue Stripe 2T/Video";
fsType = "nfs";
};
"/media/Stash-Picture" = {
device = "192.168.86.20:/mnt/WD Blue Stripe 2T/Picture";
fsType = "nfs";
};
"/media/Stash-Usenet" = {
device = "192.168.86.20:/mnt/WD Blue Stripe 2T/Usenet";
fsType = "nfs";
};
};
swapDevices = [];

26
ServeNix/services/airsignal.nix
View File

@ -1,26 +0,0 @@
{
config,
lib,
pkgs,
...
}: {
virtualisation.oci-containers.containers.airsignal = {
image = "gitea.vps.chriphost.de/christoph/airsignal:latest";
autoStart = true;
dependsOn = [];
ports = [
"12776:12776"
"12776:12776/udp"
];
volumes = [];
environment = {};
extraOptions = [
"--net=behind-nginx"
];
};
}

33
ServeNix/services/bazarr.nix
View File

@ -1,33 +0,0 @@
{
config,
lib,
pkgs,
...
}: {
virtualisation.oci-containers.containers.bazarr = {
image = "linuxserver/bazarr:latest";
autoStart = true;
dependsOn = [];
ports = [
# "6767:6767"
];
volumes = [
"bazarr_config:/config"
"/media/Show:/tv"
"/media/Movie:/movies"
];
environment = {
PUID = "3000";
PGID = "3000";
TZ = "Europe/Berlin";
};
extraOptions = [
"--net=behind-nginx"
];
};
}

43
ServeNix/services/box-fileflows.nix
View File

@ -1,43 +0,0 @@
{
config,
lib,
pkgs,
...
}: {
virtualisation.oci-containers.containers.box-fileflows = {
image = "revenz/fileflows:latest";
autoStart = true;
dependsOn = [
# "pihole"
];
ports = [
# "5000:5000"
];
volumes = [
"/media/Stash-Video:/media/Video"
"/media/Stash-Picture:/media/Picture"
"box-fileflows_temp:/temp"
"box-fileflows_logs:/app/Logs"
"box-fileflows_config:/app/Data"
"/var/run/docker.sock:/var/run/docker.sock:ro"
];
environment = {
TZ = "Europe/Berlin";
NVIDIA_VISIBLE_DEVICES = "all";
NVIDIA_DRIVER_CAPABILITIES = "all";
};
extraOptions = [
"--privileged" # Helps with CUDA issues
"--gpus=all"
"--net=behind-nginx"
];
};
}

34
ServeNix/services/box-hydra.nix
View File

@ -1,34 +0,0 @@
{
config,
lib,
pkgs,
...
}: {
virtualisation.oci-containers.containers.box-hydra = {
image = "linuxserver/nzbhydra2:latest";
autoStart = true;
dependsOn = [
# "pihole"
# "sabnzbd"
];
ports = [
# "5076:5076"
];
volumes = [
"box-hydra_config:/config"
];
environment = {
PUID = "1000";
PGID = "1000";
TZ = "Europe/Berlin";
};
extraOptions = [
"--net=behind-nginx"
];
};
}

36
ServeNix/services/box-metube.nix
View File

@ -1,36 +0,0 @@
{
config,
lib,
pkgs,
...
}: {
virtualisation.oci-containers.containers.box-metube = {
image = "ghcr.io/alexta69/metube";
autoStart = true;
dependsOn = [
# "pihole"
];
ports = [
# "3366:8081"
];
volumes = [
"/media/Stash-Video:/downloads"
];
environment = {
UID = "3001";
GID = "3001";
# NVIDIA_VISIBLE_DEVICES = "all";
# NVIDIA_DRIVER_CAPABILITIES = "all";
};
extraOptions = [
# "--gpus=all"
"--net=behind-nginx"
];
};
}

35
ServeNix/services/box-sabnzbd.nix
View File

@ -1,35 +0,0 @@
{
config,
lib,
pkgs,
...
}: {
virtualisation.oci-containers.containers.box-sabnzbd = {
image = "linuxserver/sabnzbd:latest";
autoStart = true;
dependsOn = [
# "pihole"
];
ports = [
# "8080:8080"
];
volumes = [
"/media/Stash-Video:/downloads"
"box-sabnzbd_config:/config"
];
environment = {
PUID = "3001";
PGID = "3001";
TZ = "Europe/Berlin";
};
extraOptions = [
"--net=behind-nginx"
];
};
}

97
ServeNix/services/box-stash.nix
View File

@ -1,97 +0,0 @@
{
config,
lib,
pkgs,
...
}: {
virtualisation.oci-containers.containers.box-stash-cdp = {
image = "chromedp/headless-shell:latest";
autoStart = true;
dependsOn = [
# "pihole"
];
ports = [
# "9222:9222"
];
volumes = [];
environment = {};
extraOptions = [
# "--gpus=all"
# "--shm-size=2G"
"--net=behind-nginx"
];
};
virtualisation.oci-containers.containers.box-stash-flaresolverr = {
image = "ghcr.io/flaresolverr/flaresolverr:latest";
autoStart = true;
dependsOn = [
# "pihole"
];
ports = [
# "8191:8191"
];
volumes = [];
environment = {
LOG_LEVEL = "info";
};
extraOptions = [
# "--gpus=all"
# "--shm-size=2G"
"--net=behind-nginx"
];
};
virtualisation.oci-containers.containers.box-stash = {
image = "stashapp/stash:latest";
autoStart = true;
dependsOn = [
"box-stash-cdp"
"box-stash-flaresolverr"
# "pihole"
];
ports = [
# "9999:9999"
];
volumes = [
"/media/Stash-Picture:/data/picture"
"/media/Stash-Video:/data/video"
"box-stash_config:/root/.stash"
"box-stash_metadata:/metadata"
"box-stash_generated:/generated"
"box-stash_blobs:/blobs"
"box-stash_cache:/cache"
];
environment = {
STASH_PORT = "9999";
STASH_CACHE = "/cache/";
STASH_GENERATED = "/generated/";
STASH_METADATA = "/metadata/";
STASH_STASH = "/data/";
NVIDIA_VISIBLE_DEVICES = "all";
NVIDIA_DRIVER_CAPABILITIES = "all";
};
extraOptions = [
"--privileged"
"--gpus=all"
"--net=behind-nginx"
];
};
}

43
ServeNix/services/fileflows.nix
View File

@ -1,43 +0,0 @@
{
config,
lib,
pkgs,
...
}: {
virtualisation.oci-containers.containers.fileflows = {
image = "revenz/fileflows:latest";
autoStart = true;
dependsOn = [
# "pihole"
];
ports = [
# "5000:5000"
];
volumes = [
"/media/Movie:/media/Movie"
"/media/Show:/media/Show"
"fileflows_temp:/temp"
"fileflows_logs:/app/Logs"
"fileflows_config:/app/Data"
"/var/run/docker.sock:/var/run/docker.sock:ro"
];
environment = {
TZ = "Europe/Berlin";
NVIDIA_VISIBLE_DEVICES = "all";
NVIDIA_DRIVER_CAPABILITIES = "all";
};
extraOptions = [
"--privileged" # Helps with CUDA issues
"--gpus=all"
"--net=behind-nginx"
];
};
}

1
ServeNix/services/formula10.nix
View File

@ -16,6 +16,7 @@
volumes = [
"formula10_data:/app/instance"
"formula10_cache:/cache"
];
environment = {

65
ServeNix/services/formula11.nix Normal file
View File

@ -0,0 +1,65 @@
{
config,
lib,
pkgs,
...
}: {
virtualisation.oci-containers.containers.formula11_pocketbase = {
image = "gitea.vps.chriphost.de/christoph/pocketbase:0.25.0";
autoStart = true;
dependsOn = [
# "pihole"
];
ports = [
"8090:8080"
];
volumes = [
"formula11_pb_data:/pb/pb_data"
];
environment = {};
extraOptions = [
# "--gpus=all"
"--net=behind-nginx"
];
};
virtualisation.oci-containers.containers.formula11 = {
image = "gitea.vps.chriphost.de/christoph/formula11:latest";
autoStart = true;
dependsOn = [
"formula11_pocketbase"
];
ports = [
# "8080:8090"
"5173:3000"
];
volumes = [];
environment = {
# PB_PROTOCOL="http";
# PB_HOST="formula11_pocketbase";
# PB_PORT="8000";
# PB_PROTOCOL="https";
# PB_URL="f11pb.vps.chriphost.de";
PUBLIC_PBURL="https://f11pb.vps.chriphost.de";
# Required by SvelteKit to prevent cross-site POST errors
ORIGIN="https://f11.vps.chriphost.de";
};
extraOptions = [
# "--gpus=all"
"--net=behind-nginx"
];
};
}

2
ServeNix/services/immich.nix
View File

@ -5,7 +5,7 @@
...
}: {
virtualisation.oci-containers.containers.immich-database = {
image = "tensorchord/pgvecto-rs:pg15-v0.2.0";
image = "ghcr.io/immich-app/postgres:15-vectorchord0.3.0-pgvectors0.2.0";
autoStart = true;
dependsOn = [];

29
ServeNix/services/jellyseerr.nix
View File

@ -1,29 +0,0 @@
{
config,
lib,
pkgs,
...
}: {
virtualisation.oci-containers.containers.jellyseerr = {
image = "fallenbagel/jellyseerr:latest";
autoStart = true;
dependsOn = [];
ports = [
"5055:5055"
];
volumes = [
"jellyseerr_config:/app/config"
];
environment = {
TZ = "Europe/Berlin";
};
extraOptions = [
"--net=behind-nginx"
];
};
}

78
ServeNix/services/jellystat.nix
View File

@ -1,78 +0,0 @@
{
config,
lib,
pkgs,
...
}: {
virtualisation.oci-containers.containers.jellystat-db = {
image = "postgres:15.2";
autoStart = true;
dependsOn = [
# "pihole"
];
ports = [
# "5432:5432"
];
volumes = [
"jellystat-db_data:/var/lib/postgresql/data"
];
environment = {
POSTGRES_DB = "jfstat";
POSTGRES_USER = "postgres";
POSTGRES_PASSWORD = "jellystat-db";
# PUID = "1000";
# PGID = "1000";
# TZ = "Europe/Berlin";
# NVIDIA_VISIBLE_DEVICES = "all";
# NVIDIA_DRIVER_CAPABILITIES = "all";
};
extraOptions = [
# "--gpus=all"
"--net=behind-nginx"
];
};
virtualisation.oci-containers.containers.jellystat = {
image = "cyfershepard/jellystat";
autoStart = true;
dependsOn = [
# "pihole"
"jellystat-db"
];
ports = [
# "3000:3000"
];
volumes = [
"jellystat_data:/app/backend/backup-data"
];
environment = {
POSTGRES_USER = "postgres";
POSTGRES_PASSWORD = "jellystat-db";
POSTGRES_IP = "jellystat-db";
POSTGRES_PORT = "5432";
JWT_SECRET = "MyUnsecretJwtKey";
# PUID = "1000";
# PGID = "1000";
# TZ = "Europe/Berlin";
# NVIDIA_VISIBLE_DEVICES = "all";
# NVIDIA_DRIVER_CAPABILITIES = "all";
};
extraOptions = [
# "--gpus=all"
"--net=behind-nginx"
];
};
}

31
ServeNix/services/kopia.nix
View File

@ -24,34 +24,23 @@
"/media/synology-syncthing:/repository"
# Folders that are backed up
"adguard_config:/data/adguard_config:ro"
"adguard_work:/data/adguard_work:ro"
# "adguard_config:/data/adguard_config:ro" # ThinkNix
# "adguard_work:/data/adguard_work:ro" # ThinkNix
"authelia_config:/data/authelia_config:ro"
"bazarr_config:/data/bazarr_config:ro"
"box-fileflows_config:/data/box-fileflows_config:ro"
"box-hydra_config:/data/box-hydra_config:ro"
"box-sabnzbd_config:/data/box-sabnzbd_config:ro"
"box-stash_blobs:/data/box-stash_blobs:ro"
"box-stash_config:/data/box-stash_config:ro"
"box-stash_generated:/data/box-stash_generated:ro"
"box-stash_metadata:/data/box-stash_metadata:ro"
"fileflows_config:/data/fileflows_config:ro"
"formula10_cache:/data/formula10_cache:ro"
"formula10_data:/data/formula10_data:ro"
"gitea-db_data:/data/gitea-db_data:ro"
"gitea-runner_config:/data/gitea-runner_config:ro"
"gitea-runner_data:/data/gitea-runner_data:ro"
"gitea_data:/data/gitea_data:ro"
"heidi_config:/data/heidi_config:ro"
"homeassistant_config:/data/homeassistant_config:ro"
"homepage_config:/data/homepage_config:ro"
# "homeassistant_config:/data/homeassistant_config:ro" # ThinkNix
# "homepage_config:/data/homepage_config:ro"
"immich-database_data:/data/immich-database_data:ro"
"immich_config:/data/immich_config:ro"
"immich_data:/data/immich_data:ro"
"immich_machine-learning:/data/immich_machine-learning:ro"
"jellyfin_config:/data/jellyfin_config:ro"
"jellyseerr_config:/data/jellyseerr_config:ro"
"jellystat-db_data:/data/jellystat-db_data:ro"
"jellystat_data:/data/jellystat_data:ro"
"nextcloud-db_data:/data/nextcloud-db_data:ro"
"nextcloud_data:/data/nextcloud_data:ro"
"nginx_config:/data/nginx_config:ro"
@ -59,13 +48,9 @@
"nginx_snippets:/data/nginx_snippets:ro"
"paperless-postgres_data:/data/paperless-postgres_data:ro"
"paperless_data:/data/paperless_data:ro"
"portainer_config:/data/portainer_config:ro"
"prowlarr_config:/data/prowlarr_config:ro"
"radarr_config:/data/radarr_config:ro"
"sabnzbd_config:/data/sabnzbd_config:ro"
"sonarr_config:/data/sonarr_config:ro"
"uptime-kuma_config:/data/uptime-kuma_config:ro"
"wireguard_vps_config:/data/wireguard_vps_config:ro"
# "portainer_config:/data/portainer_config:ro"
# "uptime-kuma_config:/data/uptime-kuma_config:ro" # Disabled
# "wireguard_vps_config:/data/wireguard_vps_config:ro"
];
environment = {

35
ServeNix/services/nextcloud.nix
View File

@ -102,28 +102,25 @@
];
};
virtualisation.oci-containers.containers.nextcloud-cronjob = {
image = "rcdailey/nextcloud-cronjob";
autoStart = true;
systemd.services.nextcloud-cron = {
enable = true;
description = "Nextcloud Cron Job";
serviceConfig = {
ExecStart = "${pkgs.docker}/bin/docker exec -u www-data nextcloud /usr/local/bin/php -f /var/www/html/cron.php";
};
};
dependsOn = [
"nextcloud"
];
systemd.timers.nextcloud-cron = {
enable = true;
description = "Nextcloud Cron Job";
ports = [];
volumes = [
"/etc/localtime:/etc/localtime:ro"
"/var/run/docker.sock:/var/run/docker.sock:ro"
];
environment = {
NEXTCLOUD_CONTAINER_NAME = "nextcloud";
NEXTCLOUD_CRON_MINUTE_INTERVAL = "5";
timerConfig = {
OnBootSec = "5min";
OnUnitActiveSec = "5min";
Unit = "nextcloud-cron.service";
};
extraOptions = [
"--net=behind-nginx"
];
wantedBy = ["timers.target"];
};
}

37
ServeNix/services/portainer.nix
View File

@ -4,27 +4,50 @@
pkgs,
...
}: {
virtualisation.oci-containers.containers.portainer = {
image = "portainer/portainer-ce:latest";
# virtualisation.oci-containers.containers.portainer = {
# image = "portainer/portainer-ce:latest";
# autoStart = true;
# dependsOn = [];
# ports = [
# # "8000:8000"
# # "9443:9443"
# ];
# volumes = [
# "portainer_config:/data"
# "/var/run/docker.sock:/var/run/docker.sock"
# ];
# environment = {};
# extraOptions = [
# "--net=behind-nginx"
# ];
# };
virtualisation.oci-containers.containers.portainer-agent = {
image = "portainer/agent:latest";
autoStart = true;
dependsOn = [];
ports = [
# "8000:8000"
# "9443:9443"
"9001:9001"
];
volumes = [
"portainer_config:/data"
"/var/run/docker.sock:/var/run/docker.sock"
"/var/lib/docker/volumes:/var/lib/docker/volumes"
];
environment = {};
extraOptions = [
"--net=behind-nginx"
# This container needs to be accessible from another machine inside the LAN
# "--net=behind-nginx"
];
};
}

33
ServeNix/services/prowlarr.nix
View File

@ -1,33 +0,0 @@
{
config,
lib,
pkgs,
...
}: {
virtualisation.oci-containers.containers.prowlarr = {
image = "linuxserver/prowlarr:latest";
autoStart = true;
dependsOn = [
# "pihole"
];
ports = [
# "9696:9696"
];
volumes = [
"prowlarr_config:/config"
];
environment = {
PUID = "1000";
PGID = "1000";
TZ = "Europe/Berlin";
};
extraOptions = [
"--net=behind-nginx"
];
};
}

38
ServeNix/services/radarr.nix
View File

@ -1,38 +0,0 @@
{
config,
lib,
pkgs,
...
}: {
virtualisation.oci-containers.containers.radarr = {
image = "linuxserver/radarr:latest";
autoStart = true;
dependsOn = [
# "pihole"
# "sabnzbd"
# "prowlarr"
];
ports = [
# "7878:7878"
];
volumes = [
"/media/TV-Usenet:/downloads"
"/media/Movie:/movies"
"radarr_config:/config"
];
environment = {
PUID = "3000";
PGID = "3000";
TZ = "Europe/Berlin";
};
extraOptions = [
"--net=behind-nginx"
];
};
}

35
ServeNix/services/sabnzbd.nix
View File

@ -1,35 +0,0 @@
{
config,
lib,
pkgs,
...
}: {
virtualisation.oci-containers.containers.sabnzbd = {
image = "linuxserver/sabnzbd:latest";
autoStart = true;
dependsOn = [
# "pihole"
];
ports = [
# "8080:8080"
];
volumes = [
"/media/TV-Usenet:/downloads"
"sabnzbd_config:/config"
];
environment = {
PUID = "3000";
PGID = "3000";
TZ = "Europe/Berlin";
};
extraOptions = [
"--net=behind-nginx"
];
};
}

38
ServeNix/services/sonarr.nix
View File

@ -1,38 +0,0 @@
{
config,
lib,
pkgs,
...
}: {
virtualisation.oci-containers.containers.sonarr = {
image = "linuxserver/sonarr:latest";
autoStart = true;
dependsOn = [
# "pihole"
# "sabnzbd"
# "prowlarr"
];
ports = [
# "8989:8989"
];
volumes = [
"/media/TV-Usenet:/downloads"
"/media/Show:/tv"
"sonarr_config:/config"
];
environment = {
PUID = "3000";
PGID = "3000";
TZ = "Europe/Berlin";
};
extraOptions = [
"--net=behind-nginx"
];
};
}

2
ServeNix/services/whats-up-docker.nix
View File

@ -5,7 +5,7 @@
...
}: {
virtualisation.oci-containers.containers.whats-up-docker = {
image = "fmartinou/whats-up-docker:latest";
image = "getwud/wud:latest";
autoStart = true;
dependsOn = [

31
ThinkNix/configuration.nix
View File

@ -17,8 +17,10 @@
# General
# ./services/kopia.nix
# ./services/homepage.nix
./services/nginx-proxy-manager.nix
./services/portainer.nix
./services/whats-up-docker.nix
./services/wireguard.nix
];
@ -64,13 +66,29 @@
# Enable networking
networkmanager.enable = true;
interfaces.ens18.ipv4.addresses = [{
address = "192.168.86.26";
prefixLength = 24;
}];
interfaces.ens18 = {
ipv4.addresses = [
{
address = "192.168.86.26";
prefixLength = 24;
}
];
ipv6.addresses = [
{
address = "fd00::1a"; # 26 in hex
prefixLength = 120;
}
];
};
defaultGateway = "192.168.86.5";
defaultGateway6 = "fd00::5";
nameservers = [
"127.0.0.1"
"::1"
# "192.168.86.25"
# "8.8.8.8"
];
@ -94,6 +112,7 @@
# - Disabling this prevents containers from having internet connection. DNS issue?
# ${dockercli} network create -o "com.docker.network.bridge.enable_ip_masquerade"="false" ${network}
# ${dockercli} network create --ipv6 --gateway="2000::1" --subnet="2000::/80" ${network}
${dockercli} network create ${network}
else
echo "${network} already exists in docker"
@ -195,10 +214,14 @@
# setSocketVariable = true;
# };
daemon.settings = {
# ipv6 = true;
# fixed-cidr-v6 = "2001::/80";
dns = [
# TODO: Does this circumvent my DNS for each container?
# It might improve gitea actions though...
"8.8.8.8"
# "2001:4860:4860::8888"
# TODO: Might prevent containers from having DNS?
# "127.0.0.1"

1
ServeNix/services/homepage.nix → ThinkNix/services/homepage.nix
View File

@ -26,6 +26,7 @@
extraOptions = [
"--net=behind-nginx"
# "--privileged"
];
};
}

29
ThinkNix/services/whats-up-docker.nix Normal file
View File

@ -0,0 +1,29 @@
{
config,
lib,
pkgs,
...
}: {
virtualisation.oci-containers.containers.whats-up-docker = {
image = "getwud/wud:latest";
autoStart = true;
dependsOn = [
# "pihole"
];
ports = [
# "3001:3000"
];
volumes = [
"/var/run/docker.sock:/var/run/docker.sock"
];
environment = {};
extraOptions = [
"--net=behind-nginx"
];
};
}