sin_serhao/homelab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

heuuu plein de trucs en vrais
/ perform flake analysis (push) Failing after 3h7m58s
Details
/ build hive configuration (push) Failing after 12m57s
Details

Browse Source
This commit is contained in:
Sin Ser'hao
2026-06-22 11:53:37 +02:00
parent 8c726db73a
commit f5e3ef7c5b
17 changed files with 502 additions and 192 deletions
Download Patch File Download Diff File Expand all files Collapse all files
hosts/sin/actual.nix
+12
View File
@@ -0,0 +1,12 @@
{ inputs, pkgs, ... }:
let
unstable = import inputs.unstable { system = pkgs.stdenv.system; };
in
{
services.actual = {
package = unstable.actual-server;
enable = true;
openFirewall = true;
settings.port = 3001;
};
}
hosts/sin/configuration.nix
+1
View File
@@ -18,6 +18,7 @@
./coredns
./copyparty.nix
./trilium.nix
./actual.nix
];
boot.initrd.kernelModules = [ "usb_storage" ];
hosts/sin/copyparty.nix
+38 -5
View File
@@ -15,8 +15,8 @@
settings = {
p = [ 8086 ];
e2dsa = true;
e2ts = true;
e2dsa = true; # files indexing
e2ts = true; # multimedia indexing
z = true;
qr = true;
xff-hdr = "X-Real-IP";
@@ -25,6 +25,13 @@
http-only = true;
og = true;
shr = "/shares";
ansi = true; # color in log messages
re-maxage = 60 * 60 * 12; # reindex every 12h
# idp-h-usr = "remote-user";
# idp-h-grp = "remote-group";
# idp-login = "https://auth.shobu.fr/?rd=https://files.shobu.fr";
# idp-logout = "https://auth.shobu.fr/";
};
accounts = {
@@ -54,9 +61,9 @@
};
};
"/mediacenter" = {
path = "/mnt/mediacenter/media";
path = "/mnt/mediacenter/";
access = {
rw = ["serhao"];
rw = [ "serhao" ];
};
flags = {
e2d = true;
@@ -65,12 +72,38 @@
"/data" = {
path = "/mnt/data";
access = {
rwd = ["serhao"];
rwd = [ "serhao" ];
};
flags = {
e2d = true;
};
};
"/dump" = {
path = "/mnt/data/dump";
access = {
rw = "*";
rwd = [ "serhao" ];
};
flags = {
lifetime = 86400;
df = "100g";
vmaxb = "10g";
};
};
"/dump/quick" = {
path = "/mnt/data/dump/quick";
access = {
rw = "*";
rwd = [ "serhao" ];
};
flags = {
e2ds = true;
pk = "gz,9";
lifetime = 300;
df = "100g";
vmaxb = "10g";
};
};
};
};
hosts/sin/glances.nix
+6 -1
View File
@@ -4,6 +4,11 @@
enable = true;
openFirewall = true;
# TODO Change secrets
extraArgs = [ "--webserver" ];
extraArgs = [
"--webserver"
"--disable-webui"
"--disable-plugin"
"processcount"
];
};
}
hosts/sin/homepage.nix
+163 -6
View File
@@ -12,7 +12,6 @@
headerStyle = "boxed";
providers = {
"finnhub" = "cuvq5e9r01qub8tv03g0cuvq5e9r01qub8tv03gg";
};
layout = [
@@ -38,6 +37,20 @@
header = false;
};
}
{
"admin" = {
tab = "Admin";
header = false;
sin = {
style = "row";
columns = 3;
};
thea = {
style = "row";
columns = 3;
};
};
}
];
};
@@ -56,9 +69,7 @@
}
{
glances = {
url = "https://zimablade-admin.shobu.fr";
user = "shobu";
password = "shobu";
url = "http://sin.home:61208";
version = 4;
disk = [
"/"
@@ -154,7 +165,7 @@
widget = {
type = "jellyseerr";
url = "https://jellyseerr.shobu.fr";
key = "MTczNzkyNzMxMzgwODk4N2FlZWJkLTQ0N2QtNGU0MS1iOWE1LTJmZmE3OTI4ZGQ5OQ==";
key = "MTc0OTMzOTE2MDMwODgxNzdlYjNlLTU4N2ItNDc0Mi1iZTY4LTM3NzVhMWZiMDUzZg==";
};
};
}
@@ -227,7 +238,7 @@
href = "https://transmission.shobu.fr";
widget = {
type = "transmission";
url = "https://transmission.shobu.fr";
url = "http://sin.home:9091";
};
};
}
@@ -235,6 +246,152 @@
}
];
}
{
"admin" = [
(
let
name = "sin";
address = "http://sin.home:61208";
in
{
"${name}" = [
{
"info" = {
widget = {
type = "glances";
url = address;
version = 4;
metric = "info";
};
};
}
{
"main storage" = {
widget = {
type = "glances";
url = address;
version = 4;
metric = "fs:/mnt/fs";
};
};
}
{
"system storage" = {
widget = {
type = "glances";
url = address;
version = 4;
metric = "fs:/";
};
};
}
{
"memory" = {
widget = {
type = "glances";
url = address;
version = 4;
metric = "memory";
};
};
}
{
"cpu" = {
widget = {
type = "glances";
url = address;
version = 4;
metric = "cpu";
};
};
}
{
"network" = {
widget = {
type = "glances";
url = address;
version = 4;
metric = "network:enp2s0";
};
};
}
];
}
)
(
let
name = "thea";
address = "http://thea.home:61208";
in
{
"${name}" = [
{
"info" = {
widget = {
type = "glances";
url = address;
version = 4;
metric = "info";
};
};
}
{
"main storage" = {
widget = {
type = "glances";
url = address;
version = 4;
metric = "fs:/mnt/fs";
};
};
}
{
"system storage" = {
widget = {
type = "glances";
url = address;
version = 4;
metric = "fs:/";
};
};
}
{
"memory" = {
widget = {
type = "glances";
url = address;
version = 4;
metric = "memory";
};
};
}
{
"cpu" = {
widget = {
type = "glances";
url = address;
version = 4;
metric = "cpu";
};
};
}
{
"network" = {
widget = {
type = "glances";
url = address;
version = 4;
metric = "network:enp2s0";
};
};
}
];
}
)
];
}
];
};
}
hosts/sin/jellyfin.nix
+99 -66
View File
@@ -1,22 +1,44 @@
{ pkgs, inputs, ... }:
{
pkgs,
inputs,
...
}:
let
unstable = import inputs.unstable { system = pkgs.system; };
nixpkgs-2505 = import inputs.nixpkgs-2505 {
system = pkgs.stdenv.system;
config.allowUnfree = true;
config.permittedInsecurePackages = [ "intel-media-sdk-23.2.2" ];
};
in
{systemd.services.jellyfin.environment.LIBVA_DRIVER_NAME = "iHD"; # or i965 for older GPUs
environment.sessionVariables = { LIBVA_DRIVER_NAME = "iHD"; };
{
systemd.services.jellyfin.environment = {
LIBVA_DRIVER_NAME = "iHD"; # or i965 for older GPUs
NEOReadDebugKeys = "1";
OverrideGpuAddressSpace = "48";
};
environment.sessionVariables = {
LIBVA_DRIVER_NAME = "iHD";
NEOReadDebugKeys = "1";
OverrideGpuAddressSpace = "48";
};
hardware.graphics = {
enable = true;
extraPackages = with pkgs; [
intel-ocl # Generic OpenCL support
# For Broadwell and newer (ca. 2014+), use with LIBVA_DRIVER_NAME=iHD:
intel-compute-runtime-legacy1
intel-media-driver
nixpkgs-2505.intel-media-sdk
];
};
hardware.enableRedistributableFirmware = true;
boot.kernelParams = [ "i915.enable_guc=3" ];
nixpkgs.config.permittedInsecurePackages = [
"dotnet-sdk-6.0.428"
"aspnetcore-runtime-6.0.36"
# "dotnet-sdk-6.0.428"
# "aspnetcore-runtime-6.0.36"
"intel-media-sdk-23.2.2"
];
users.users."starr" = {
@@ -63,70 +85,81 @@ in
"radarr"
"sonarr"
];
users.users.jellyfin.extraGroups = [
"render"
"video"
];
users.groups = {
starr = { };
};
services = {
jellyfin = {
enable = true;
openFirewall = true;
};
sonarr = {
enable = true;
openFirewall = true;
group = "starr";
settings = {
authentication.AuthenticationMethod = "external";
authentication.AuthenticationType = "enabled";
};
};
radarr = {
enable = true;
openFirewall = true;
group = "starr";
settings = {
authentication.AuthenticationMethod = "external";
authentication.AuthenticationType = "enabled";
};
};
prowlarr = {
enable = true;
openFirewall = true;
settings = {
authentication.AuthenticationMethod = "external";
authentication.AuthenticationType = "enabled";
};
};
bazarr = {
enable = true;
openFirewall = true;
};
lidarr = {
enable = true;
openFirewall = true;
settings = {
authentication.AuthenticationMethod = "external";
authentication.AuthenticationType = "enabled";
};
};
whisparr = {
enable = true;
openFirewall = true;
settings = {
authentication.AuthenticationMethod = "external";
authentication.AuthenticationType = "enabled";
};
};
jellyseerr = {
enable = true;
openFirewall = true;
starr = {
gid = 990;
};
};
services =
let
mkEnvFile =
name:
(pkgs.writeText "${name}.env" ''
${name}__AUTH__ENABLED=false
${name}__AUTH__METHOD=External
'');
in
{
jellyfin = {
enable = true;
openFirewall = true;
};
sonarr = {
enable = true;
openFirewall = true;
group = "starr";
environmentFiles = [
(mkEnvFile "SONARR")
];
};
radarr = {
enable = true;
openFirewall = true;
group = "starr";
environmentFiles = [
(mkEnvFile "RADARR")
];
};
prowlarr = {
enable = true;
openFirewall = true;
environmentFiles = [
(mkEnvFile "PROWLARR")
];
};
bazarr = {
enable = true;
openFirewall = true;
group = "starr";
};
lidarr = {
enable = true;
openFirewall = true;
environmentFiles = [
(mkEnvFile "LIDARR")
];
};
whisparr = {
enable = true;
openFirewall = true;
environmentFiles = [
(mkEnvFile "WHISPARR")
];
};
jellyseerr = {
enable = true;
openFirewall = true;
};
};
environment.systemPackages = [
pkgs.jellyfin
pkgs.jellyfin-web
hosts/sin/mailserver.nix
-37
View File
@@ -1,37 +0,0 @@
{
inputs,
config,
lib,
...
}:
let
inherit (lib)
mkDefault
;
in
{
imports = [
inputs.simple-mailserver.default
];
security.acme = {
acceptTerms = mkDefault true;
certs.${config.mailserver.fqdn} = {
};
};
mailserver = {
enable = true;
stateVersion = 3;
fqdn = "mail.shobu.fr";
domains = [ "shobu.fr" ];
x509.useACMEHost = config.mailserver.fqdn;
loginAccounts = {
"auth@shobu.fr" = {
password = "$y$j9T$aLAZYUOUrc2jxcNYGy1qt/$B1ZdufZtzJJmnLYIYW11nk1BwIIy1Xkjxb7lx3ge/Z3";
};
};
};
}
hosts/sin/transmission.nix
+1 -1
View File
@@ -86,7 +86,7 @@
];
environment = {
PUID = toString config.users.users.transmission.uid;
GUID = toString config.users.groups.transmission.gid;
PGID = toString config.users.groups.starr.gid;
PEERPORT = peerport;
};
};
hosts/sin/trilium.nix
+2 -1
View File
@@ -4,6 +4,7 @@
enable = true;
port = 12783;
host = "0.0.0.0";
noAuthentication = true;
# noAuthentication = true;
environmentFile = "/secrets/trilium.env";
};
}
hosts/thea/authelia.nix
+74 -5
View File
@@ -49,13 +49,13 @@ in
access_control = {
default_policy = "deny";
rules = [
# {
# domain = "radarr.shobu.fr";
# policy = "bypass";
# }
{
domain = "auth.shobu.fr";
policy = "bypass";
}
{
domain = "*.shobu.fr";
policy = "one_factor";
policy = "two_factor";
}
];
};
@@ -68,6 +68,75 @@ in
};
};
};
identity_providers = {
oidc = {
hmac_secret = "this_is_a_secret_abc123abc123abc"; # 64+ character secret
jwks = [
{
key = ''
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----''; # rsa private key
}
];
claims_policies = {
trilium = {
id_token = [
"email"
"name"
];
};
};
clients = [
{
client_id = "trilium";
client_name = "Trilium Notes";
client_secret = "$pbkdf2-sha512$310000$c8p78n7pUMln0jzvd4aK4Q$JNRBzwAo0ek5qKn50cFzzvE9RXV88h1wJn5KGiHrD0YKtZaR/nCb2CJPOsKaPK0hjf.9yHxzQGZziziccp6Yng";
public = false;
authorization_policy = "two_factor";
claims_policy = "trilium";
require_pkce = false;
pkce_challenge_method = "";
redirect_uris = [ "https://trilium.shobu.fr/callback" ];
scopes = [
"openid"
"profile"
"email"
];
response_types = [ "code" ];
grant_types = [ "authorization_code" ];
access_token_signed_response_alg = "none";
userinfo_signed_response_alg = "none";
token_endpoint_auth_method = "client_secret_basic";
}
];
};
};
};
};
};
hosts/thea/configuration.nix
+14 -4
View File
@@ -17,10 +17,11 @@ in
imports = [
./nginx.nix
# ./cybercoffee
./ollama.nix
./minecraft.nix
# ./ollama.nix
# ./minecraft.nix
./secrets
./authelia.nix
./glances.nix
];
# Use the systemd-boot EFI boot loader.
@@ -39,6 +40,7 @@ in
firewall = {
allowedTCPPorts = [
nodes.sin.config.services.gitea.settings.server.SSH_PORT
993 # mail port
]
++ [
# minecraft ad hoc server ports
@@ -57,6 +59,16 @@ in
proto = "tcp";
destination = "${sin-address}:22";
}
{
sourcePort = 993;
proto = "tcp";
destination = "${sin-address}:993";
}
{
sourcePort = 8086;
proto = "tcp";
destination = "${sin-address}:8086";
}
];
};
};
@@ -87,13 +99,11 @@ in
};
environment.systemPackages = with pkgs; [
lunarvim
wget
httpie
tmux
git
helix
python312
# lemonade
];
hosts/thea/glances.nix
+14
View File
@@ -0,0 +1,14 @@
{ ... }:
{
services.glances = {
enable = true;
openFirewall = true;
# TODO Change secrets
extraArgs = [
"--webserver"
"--disable-webui"
"--disable-plugin"
"processcount"
];
};
}
hosts/thea/minecraft.nix
+1 -5
View File
@@ -9,10 +9,6 @@ let
url = "file:///${inputs.testing-grounds.modpack}/pack.toml";
packHash = "sha256-+taYj4uroLNxM4Nia3n+5P1Y/g6dzE6Iq13TsZgk4mU=";
};
gregpack = pkgs.fetchPackwizModpack {
url = "https://raw.githubusercontent.com/GregTechCEu/GregTech-Modern-Community-Pack/refs/heads/main/pack.toml";
packHash = "sha256-SE86gP15H/Aug6vTLmMxHuxF2/+iLmCI/wQlON1xasM=";
};
in
{
imports = [ inputs.nix-minecraft.nixosModules.minecraft-servers ];
@@ -24,7 +20,7 @@ in
openFirewall = true;
servers.testing-grounds = {
enable = true;
enable = false;
package = inputs.testing-grounds.packages.x86_64-linux.forge-server;
hosts/thea/nginx.nix
+9 -4
View File
@@ -2,6 +2,7 @@
inputs,
pkgs,
lib,
nodes,
...
}:
let
@@ -34,7 +35,7 @@ in
forceSSL = true;
locations."/" = {
proxyPass = "http://${sin-address}:${port}";
proxyPass = "http://${sin-address}:${toString port}";
};
};
};
@@ -106,9 +107,10 @@ in
// mkStarr "lidarr.shobu.fr" "8686"
// mkStarr "whisparr.shobu.fr" "6969"
// mkVHost "jellyseerr.shobu.fr" "5055"
// mkVHost "transmission.shobu.fr" "9091"
// mkVHost "zimablade-admin.shobu.fr" "61208"
// (withWebsockets (withAuthelia (mkVHost "trilium.shobu.fr" "12783") "/") "/")
// withAuthelia (mkVHost "transmission.shobu.fr" "9091") "/"
// withAuthelia (mkVHost "zimablade-admin.shobu.fr" "61208") "/"
// withAuthelia (mkVHost "actual.shobu.fr" nodes.sin.config.services.actual.settings.port) "/"
// (withWebsockets (mkVHost "trilium.shobu.fr" "12783") "/")
// {
"shobu.fr" = {
enableACME = true;
@@ -165,6 +167,9 @@ in
locations."/" = {
proxyPass = "http://${sin-address}:3000";
extraConfig = ''
client_max_body_size 100M;
'';
};
};
"files.shobu.fr" = {