Update FredOS-Mediaserver.nix

This commit is contained in:
ediblerope 2026-01-20 14:42:21 +00:00 committed by GitHub
parent 2afac3399a
commit fed97579ec
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -2,33 +2,44 @@
{ {
config = lib.mkIf (config.networking.hostName == "FredOS-Mediaserver") { config = lib.mkIf (config.networking.hostName == "FredOS-Mediaserver") {
# --- File Systems (Uncomment and add UUIDs as needed) --- # Individual Data Disks
# fileSystems."/mnt/disk1" = { fileSystems."/mnt/disk1" = {
# device = "/dev/disk/by-uuid/90ae3493-38c1-4473-b409-e9d99c3b315e"; device = "/dev/disk/by-uuid/90ae3493-38c1-4473-b409-e9d99c3b315e";
# fsType = "ext4"; fsType = "ext4";
# options = [ "defaults" ]; };
# };
# fileSystems."/mnt/disk4" = { fileSystems."/mnt/disk2" = {
# device = "/dev/disk/by-uuid/PASTE_NEW_SSD_UUID_HERE"; device = "/dev/disk/by-uuid/7145223e-f285-424a-a114-cb0b1b64e068";
# fsType = "ext4"; fsType = "ext4";
# options = [ "defaults" ]; };
# };
# fileSystems."/mnt/storage" = { fileSystems."/mnt/disk3" = {
# device = "/mnt/disk1:/mnt/disk2:/mnt/disk3:/mnt/disk4"; device = "/dev/disk/by-uuid/58cecfd5-2fd7-4c4b-b3a1-0bf5e9d0beab";
# fsType = "fuse.mergerfs"; fsType = "ext4";
# options = [ };
# "defaults"
# "allow_other"
# "use_ino"
# "cache.files=partial"
# "dropcacheonclose=true"
# "category.create=mfs"
# ];
# };
# --- System Packages --- # The Combined MergerFS Pool
fileSystems."/mnt/storage" = {
device = "/mnt/disk1:/mnt/disk2:/mnt/disk3";
fsType = "fuse.mergerfs";
options = [
"defaults"
"allow_other"
"use_ino"
"cache.files=partial"
"dropcacheonclose=true"
"category.create=mfs"
];
};
# Create symlink from home to storage
systemd.tmpfiles.rules = [
"L+ /home/fred/storage - - - - /mnt/storage"
"d /var/lib/nginx-proxy-manager/data 0755 root root -"
"d /var/lib/nginx-proxy-manager/letsencrypt 0755 root root -"
];
# Basic system packages
environment.systemPackages = with pkgs; [ environment.systemPackages = with pkgs; [
mergerfs mergerfs
wget wget
@ -36,33 +47,24 @@
util-linux util-linux
]; ];
# --- Services --- # Jellyfin
services.jellyfin = { services.jellyfin = {
enable = true; enable = true;
openFirewall = true; openFirewall = true;
}; };
services.openssh = { # Nginx Proxy Manager
enable = true;
settings.PermitRootLogin = "no";
};
# --- Networking ---
networking.useDHCP = lib.mkDefault true;
networking.firewall.allowedTCPPorts = [ 80 443 81 22 ];
# --- Docker & Nginx Proxy Manager ---
virtualisation.docker.enable = true; virtualisation.docker.enable = true;
systemd.services.nginx-proxy-manager = { systemd.services.nginx-proxy-manager = {
description = "Nginx Proxy Manager"; description = "Nginx Proxy Manager";
after = [ "docker.service" ]; after = [ "docker.service" ];
requires = [ "docker.service" ]; requires = [ "docker.service" ];
wantedBy = [ "multi-user.target" ]; wantedBy = [ "multi-user.target" ];
serviceConfig = { serviceConfig = {
Type = "oneshot"; Type = "oneshot";
RemainAfterExit = true; RemainAfterExit = true;
# The '-' tells systemd to ignore errors if the container doesn't exist yet
ExecStartPre = "-${pkgs.docker}/bin/docker rm -f nginx-proxy-manager"; ExecStartPre = "-${pkgs.docker}/bin/docker rm -f nginx-proxy-manager";
ExecStart = '' ExecStart = ''
${pkgs.docker}/bin/docker run -d \ ${pkgs.docker}/bin/docker run -d \
@ -79,13 +81,23 @@
}; };
}; };
# --- Bootloader --- # Open firewall for web traffic
networking.firewall.allowedTCPPorts = [ 80 443 81 22 ];
# Basic networking
networking.useDHCP = lib.mkDefault true;
services.openssh = {
enable = true;
settings.PermitRootLogin = "no";
};
# Boot loader
boot.loader.grub = { boot.loader.grub = {
enable = true; enable = true;
# We recommend using /dev/disk/by-id/ names here eventually! # Includes all 4 physical disks for redundancy
devices = [ "/dev/sda" "/dev/sdb" "/dev/sdc" "/dev/sdd" ]; devices = [ "/dev/sda" "/dev/sdb" "/dev/sdc" "/dev/sdd" ];
useOSProber = true; useOSProber = true;
}; };
}; };
} }