rope/nixos
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

services: add code-server web IDE at code.nordhammer.it

Browse source 
Deploys code-server on FredOS-Mediaserver (port 4444, user fred) with
Authelia one_factor auth and nginx reverse proxy. Includes claude-code
in system packages for use in the integrated terminal.

Also fixes anyrun launcher width to absolute 350px (was a tiny fraction).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
EdibleRope 2026-05-16 10:59:35 +01:00
parent 0be8faced3
commit b6eb5c055d
5 changed files with 30 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
services/authelia.nix
View file

@ -81,6 +81,7 @@ in
{ domain = "torrent.nordhammer.it"; policy = "one_factor"; }
{ domain = "profilarr.nordhammer.it"; policy = "one_factor"; }
{ domain = "sabnzbd.nordhammer.it"; policy = "one_factor"; }
{ domain = "code.nordhammer.it"; policy = "one_factor"; }
];
};

26
services/code-server.nix Normal file
View file

@ -0,0 +1,26 @@
# services/code-server.nix — Web IDE at code.nordhammer.it, protected by Authelia.
#
# Run as fred so it has access to ~/nixos-config and the rest of the home dir.
# Auth is handled entirely by Authelia (auth = "none" disables code-server's own
# password gate). After deploy, install the Claude extension from a terminal:
# code-server --install-extension anthropic.claude-code
# and set ANTHROPIC_API_KEY in ~/.config/code-server/env or via a shell profile.
{ config, pkgs, lib, ... }:
{
config = lib.mkIf (config.networking.hostName == "FredOS-Mediaserver") {
services.code-server = {
enable = true;
host = "127.0.0.1";
port = 4444;
auth = "none";
user = "fred";
extraArguments = [
"--disable-telemetry"
"--disable-update-check"
];
};
# Make the claude CLI available in code-server's integrated terminal.
environment.systemPackages = [ pkgs.claude-code ];
};
}

1
services/nginx.nix
View file

@ -114,6 +114,7 @@ in
"adguard.nordhammer.it" = protectedProxy 3000;
"profilarr.nordhammer.it" = protectedProxy 6868;
"sabnzbd.nordhammer.it" = protectedProxy 8085;
"code.nordhammer.it" = protectedProxy 4444;
# --- Local-only: serves update history JSON to Homepage's customapi widget ---
"homepage-updates.local" = {