use header only authelia snippet

hosts/thea/nginx.nix

@@ -1,8 +1,9 @@
-{ inputs, ... }:
+{ inputs, pkgs, ... }:
 let
   # striped-front = inputs.striped-front;
 
   sin-address = "192.168.1.14";
+  authelia-snippets = pkgs.callPackage ./lib/autheliaSnippets.nix { inherit pkgs; };
 in
 {
 
@@ -37,16 +38,44 @@ in
       in
       (
         mkStarr "jellyfin.shobu.fr" "8096"
-        // mkStarr "radarr.shobu.fr" "7878"
+        # // mkStarr "radarr.shobu.fr" "7878"
         // mkStarr "sonarr.shobu.fr" "8989"
         // mkStarr "prowlarr.shobu.fr" "9696"
         // mkStarr "bazarr.shobu.fr" "6767"
-        // mkStarr "jellyseerr.shobu.fr" "5055"
         // mkStarr "lidarr.shobu.fr" "8686"
         // mkStarr "whisparr.shobu.fr" "6969"
+        // mkStarr "jellyseerr.shobu.fr" "5055"
         // mkStarr "transmission.shobu.fr" "9091"
         // mkStarr "zimablade-admin.shobu.fr" "61208"
         // {
+          "radarr.shobu.fr" = {
+            enableACME = true;
+            forceSSL = true;
+
+            extraConfig = ''
+              include ${authelia-snippets.authelia-location};
+              error_log /var/log/nginx/debug_radarr.log debug;
+            '';
+
+            locations."/" = {
+              proxyPass = "http://${sin-address}:7878";
+              proxyWebsockets = true;
+              extraConfig = ''
+                include ${authelia-snippets.proxy};
+                include ${authelia-snippets.authelia-authrequest};
+                proxy_ssl_server_name on;
+              '';
+            };
+
+            locations."/api" = {
+              proxyPass = "http://${sin-address}:7878";
+              proxyWebsockets = true;
+              extraConfig = ''
+                proxy_ssl_server_name on;
+              '';
+            };
+
+          };
           "shobu.fr" = {
             enableACME = true;
             forceSSL = true;