diff options
| author | scouckel <james.krinsky@gmail.com> | 2026-06-14 23:15:07 -0400 |
|---|---|---|
| committer | scouckel <james.krinsky@gmail.com> | 2026-06-14 23:15:07 -0400 |
| commit | 029658ee78bdac2b933dc67c492f7f17358e2254 (patch) | |
| tree | cc57432e2a3944a5c5eb931fe298418bf81d97e9 /modules/nixosModules/server/seerr.nix | |
| parent | 5946be625dc90e2caadb9f7ce73885504033338b (diff) | |
shar to dendritic?
Diffstat (limited to 'modules/nixosModules/server/seerr.nix')
| -rw-r--r-- | modules/nixosModules/server/seerr.nix | 40 |
1 files changed, 40 insertions, 0 deletions
diff --git a/modules/nixosModules/server/seerr.nix b/modules/nixosModules/server/seerr.nix new file mode 100644 index 0000000..93c5f19 --- /dev/null +++ b/modules/nixosModules/server/seerr.nix @@ -0,0 +1,40 @@ +{self, ...}: { + flake.nixosModules.seerr = { + config, + lib, + pkgs, + ... + }: { + imports = [ + self.nixosModules.hostOptions + ]; + + services.seerr = { + enable = true; + openFirewall = false; + configDir = "${config.hostOptions.server.dataPath}/seerr"; + port = 5055; + }; + + users.users.seerr = { + isSystemUser = true; + group = "seerr"; + }; + + users.groups.seerr = {}; + systemd.services.seerr.serviceConfig = { + DynamicUser = lib.mkForce false; + User = lib.mkForce "seerr"; + Group = lib.mkForce "seerr"; + ReadWritePaths = ["${config.hostOptions.server.dataPath}/seerr"]; + ExecStart = lib.mkForce "${pkgs.seerr}/bin/seerr"; + }; + + services.nginx.virtualHosts."seerr.${config.hostOptions.server.domain}" = { + enableACME = true; + forceSSL = true; + locations."/".proxyPass = "http://127.0.0.1:5055"; + locations."/".proxyWebSockets = true; + }; + }; +} |
