Update FredOS-Mediaserver.nix

This commit is contained in:
ediblerope 2026-01-20 14:35:20 +00:00 committed by GitHub
parent 5af13373df
commit 2afac3399a
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -1,103 +1,91 @@
{ config, pkgs, lib, ... }: { config, pkgs, lib, ... }:
{ {
config = lib.mkIf (config.networking.hostName == "FredOS-Mediaserver") { config = lib.mkIf (config.networking.hostName == "FredOS-Mediaserver") {
# fileSystems."/mnt/disk1" = {
# device = "/dev/disk/by-uuid/90ae3493-38c1-4473-b409-e9d99c3b315e";
# fsType = "ext4";
# options = [ "defaults" ];
# };
# fileSystems."/mnt/disk2" = {
# device = "/dev/disk/by-uuid/7145223e-f285-424a-a114-cb0b1b64e068";
# fsType = "ext4";
# options = [ "defaults" ];
# };
# fileSystems."/mnt/disk3" = {
# device = "/dev/disk/by-uuid/613abe28-9af9-481e-9673-0eab1913b32c";
# fsType = "ext4";
# options = [ "defaults" ];
# };
# fileSystems."/mnt/storage" = {
# device = "/mnt/disk1:/mnt/disk2:/mnt/disk3";
# fsType = "fuse.mergerfs";
# options = [
# "defaults"
# "allow_other"
# "use_ino"
# "cache.files=partial"
# "dropcacheonclose=true"
# "category.create=mfs" # Most free space for new files
# ];
# };
# Create symlink from home to storage
# systemd.tmpfiles.rules = [
# "L+ /home/fred/storage - - - - /mnt/storage"
# "d /var/lib/nginx-proxy-manager/data 0755 root root -"
# "d /var/lib/nginx-proxy-manager/letsencrypt 0755 root root -"
# ];
# Basic system packages
environment.systemPackages = with pkgs; [
mergerfs
wget
btop
util-linux
];
# Jellyfin
services.jellyfin = {
enable = true;
openFirewall = true;
};
# Nginx Proxy Manager
virtualisation.docker.enable = true;
systemd.services.nginx-proxy-manager = {
description = "Nginx Proxy Manager";
after = [ "docker.service" ];
requires = [ "docker.service" ];
wantedBy = [ "multi-user.target" ];
systemd.services.nginx-proxy-manager = { # --- File Systems (Uncomment and add UUIDs as needed) ---
description = "Nginx Proxy Manager"; # fileSystems."/mnt/disk1" = {
after = [ "docker.service" ]; # device = "/dev/disk/by-uuid/90ae3493-38c1-4473-b409-e9d99c3b315e";
requires = [ "docker.service" ]; # fsType = "ext4";
wantedBy = [ "multi-user.target" ]; # options = [ "defaults" ];
# };
serviceConfig = {
Type = "oneshot"; # fileSystems."/mnt/disk4" = {
RemainAfterExit = true; # device = "/dev/disk/by-uuid/PASTE_NEW_SSD_UUID_HERE";
ExecStartPre = "-${pkgs.docker}/bin/docker rm -f nginx-proxy-manager"; # fsType = "ext4";
ExecStart = '' # options = [ "defaults" ];
${pkgs.docker}/bin/docker run -d \ # };
--name=nginx-proxy-manager \
--restart=unless-stopped \ # fileSystems."/mnt/storage" = {
-p 80:80 \ # device = "/mnt/disk1:/mnt/disk2:/mnt/disk3:/mnt/disk4";
-p 81:81 \ # fsType = "fuse.mergerfs";
-p 443:443 \ # options = [
-v /var/lib/nginx-proxy-manager/data:/data \ # "defaults"
-v /var/lib/nginx-proxy-manager/letsencrypt:/etc/letsencrypt \ # "allow_other"
jc21/nginx-proxy-manager:latest # "use_ino"
''; # "cache.files=partial"
ExecStop = "${pkgs.docker}/bin/docker stop nginx-proxy-manager"; # "dropcacheonclose=true"
# "category.create=mfs"
# ];
# };
# --- System Packages ---
environment.systemPackages = with pkgs; [
mergerfs
wget
btop
util-linux
];
# --- Services ---
services.jellyfin = {
enable = true;
openFirewall = true;
}; };
services.openssh = {
enable = true;
settings.PermitRootLogin = "no";
};
# --- Networking ---
networking.useDHCP = lib.mkDefault true;
networking.firewall.allowedTCPPorts = [ 80 443 81 22 ];
# --- Docker & Nginx Proxy Manager ---
virtualisation.docker.enable = true;
systemd.services.nginx-proxy-manager = {
description = "Nginx Proxy Manager";
after = [ "docker.service" ];
requires = [ "docker.service" ];
wantedBy = [ "multi-user.target" ];
serviceConfig = {
Type = "oneshot";
RemainAfterExit = true;
# The '-' tells systemd to ignore errors if the container doesn't exist yet
ExecStartPre = "-${pkgs.docker}/bin/docker rm -f nginx-proxy-manager";
ExecStart = ''
${pkgs.docker}/bin/docker run -d \
--name=nginx-proxy-manager \
--restart=unless-stopped \
-p 80:80 \
-p 81:81 \
-p 443:443 \
-v /var/lib/nginx-proxy-manager/data:/data \
-v /var/lib/nginx-proxy-manager/letsencrypt:/etc/letsencrypt \
jc21/nginx-proxy-manager:latest
'';
ExecStop = "${pkgs.docker}/bin/docker stop nginx-proxy-manager";
};
};
# --- Bootloader ---
boot.loader.grub = {
enable = true;
# We recommend using /dev/disk/by-id/ names here eventually!
devices = [ "/dev/sda" "/dev/sdb" "/dev/sdc" "/dev/sdd" ];
useOSProber = true;
};
}; };
# Open firewall for web traffic
networking.firewall.allowedTCPPorts = [ 80 443 81 22 ]; # 81 is NPM admin interface
# Basic networking
networking.useDHCP = lib.mkDefault true;
services.openssh = {
enable = true;
settings.PermitRootLogin = "no";
};
# Boot loader
boot.loader.grub.enable = true;
boot.loader.grub.devices = [ "/dev/sda" "/dev/sdb" "/dev/sdc" "/dev/sdd" ];
boot.loader.grub.useOSProber = true;
};
} }