diff --git a/flake.lock b/flake.lock index 3ceae14..d1b3156 100644 --- a/flake.lock +++ b/flake.lock @@ -173,11 +173,11 @@ ] }, "locked": { - "lastModified": 1767702900, - "narHash": "sha256-xMzHmNytl7JgFRov2jHf2GYsLVp/sAfYO0JvbZt0uDo=", + "lastModified": 1767738364, + "narHash": "sha256-rmAerMcKMYusVs5B88RAKAYUiENrO+d4bjvpQkkaaks=", "owner": "nix-community", "repo": "home-manager", - "rev": "38e187fd2f9efac197e03be0c25f3ee215974144", + "rev": "4e8b7bef66c60735982369f3151b93e62fe37da7", "type": "github" }, "original": { @@ -311,11 +311,11 @@ }, "nixpkgs-unstable": { "locked": { - "lastModified": 1767379071, - "narHash": "sha256-EgE0pxsrW9jp9YFMkHL9JMXxcqi/OoumPJYwf+Okucw=", + "lastModified": 1767640445, + "narHash": "sha256-UWYqmD7JFBEDBHWYcqE6s6c77pWdcU/i+bwD6XxMb8A=", "owner": "NixOS", "repo": "nixpkgs", - "rev": "fb7944c166a3b630f177938e478f0378e64ce108", + "rev": "9f0c42f8bc7151b8e7e5840fb3bd454ad850d8c5", "type": "github" }, "original": { @@ -327,11 +327,11 @@ }, "nixpkgs_2": { "locked": { - "lastModified": 1767379071, - "narHash": "sha256-EgE0pxsrW9jp9YFMkHL9JMXxcqi/OoumPJYwf+Okucw=", + "lastModified": 1767640445, + "narHash": "sha256-UWYqmD7JFBEDBHWYcqE6s6c77pWdcU/i+bwD6XxMb8A=", "owner": "NixOS", "repo": "nixpkgs", - "rev": "fb7944c166a3b630f177938e478f0378e64ce108", + "rev": "9f0c42f8bc7151b8e7e5840fb3bd454ad850d8c5", "type": "github" }, "original": { diff --git a/hosts/zora/default.nix b/hosts/zora/default.nix index a61e13d..ab4f7f5 100644 --- a/hosts/zora/default.nix +++ b/hosts/zora/default.nix @@ -23,6 +23,7 @@ ../../modules/server/nayru ../../modules/server/kalif ../../modules/server/maistro + ../../modules/server/mikau ../../modules/server/biggoron ../../modules/server/biggoron/runner.nix diff --git a/hosts/zora/reverse-proxy.nix b/hosts/zora/reverse-proxy.nix index 2cae76f..320340a 100644 --- a/hosts/zora/reverse-proxy.nix +++ b/hosts/zora/reverse-proxy.nix @@ -69,6 +69,27 @@ proxyWebsockets = true; # collabora a besoin des websockets }; }; + + # 8096 + "media.lyes.eu" = { + forceSSL = true; + enableACME = true; + locations = { + "/".proxyPass = "http://localhost:8096"; + "/metrics" = { + proxyPass = "http://localhost:8096"; + extraConfig = '' + allow 127.0.0.1; + allow ::1; + allow 185.230.78.13; + allow 10.13.0.0/24; + allow 10.13.9.0/24; + allow 192.168.1.0/30; + deny all; + ''; + }; + }; + }; }; }; } diff --git a/modules/server/README.md b/modules/server/README.md index add9f25..c28e232 100644 --- a/modules/server/README.md +++ b/modules/server/README.md @@ -5,5 +5,6 @@ - `kalif` : Factorio (`factorio.lyes.eu`) - `link` : Kanidm (`auth.lyes.eu`) - `maistro` : Incus +- `mikau` : Jellyfin (`media.lyes.eu`) - `nayru` : Komga/Manga (`manga.lyes.eu`) - `taf` : Mail (`taf.lyes.eu`/`mail.lyes.eu`) diff --git a/modules/server/mikau/default.nix b/modules/server/mikau/default.nix new file mode 100644 index 0000000..aec9dc4 --- /dev/null +++ b/modules/server/mikau/default.nix @@ -0,0 +1,25 @@ +{ pkgs, ... }: + +{ + hardware.graphics = { + enable = true; + extraPackages = with pkgs; [ + intel-compute-runtime + intel-media-driver + intel-vaapi-driver + libva-vdpau-driver + libvdpau-va-gl + ]; + }; + + + services.jellyfin = { + enable = true; + user = "jellyfin"; + group = "media"; + }; + + users.users.jellyfin.extraGroups = [ "media" ]; + + networking.firewall.allowedUDPPorts = [ 7359 ]; +} diff --git a/modules/server/nayru/default.nix b/modules/server/nayru/default.nix index a1e6ebd..fb18e59 100644 --- a/modules/server/nayru/default.nix +++ b/modules/server/nayru/default.nix @@ -24,4 +24,6 @@ group = "komga"; }; }; + + networking.firewall.allowedUDPPorts = [ 7359 ]; }