sin_serhao/homelab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

heuuu plein de trucs en vrais
/ perform flake analysis (push) Failing after 3h7m58s
Details
/ build hive configuration (push) Failing after 12m57s
Details

Browse Source
This commit is contained in:
Sin Ser'hao
2026-06-22 11:53:37 +02:00
parent 8c726db73a
commit f5e3ef7c5b
17 changed files with 502 additions and 192 deletions
Download Patch File Download Diff File Expand all files Collapse all files
hosts/sin/actual.nix
+12
View File
@@ -0,0 +1,12 @@
{ inputs, pkgs, ... }:
let
unstable = import inputs.unstable { system = pkgs.stdenv.system; };
in
{
services.actual = {
package = unstable.actual-server;
enable = true;
openFirewall = true;
settings.port = 3001;
};
}
hosts/sin/configuration.nix
+1
View File
@@ -18,6 +18,7 @@
./coredns
./copyparty.nix
./trilium.nix
./actual.nix
];
boot.initrd.kernelModules = [ "usb_storage" ];
hosts/sin/copyparty.nix
+38 -5
View File
@@ -15,8 +15,8 @@
settings = {
p = [ 8086 ];
e2dsa = true;
e2ts = true;
e2dsa = true; # files indexing
e2ts = true; # multimedia indexing
z = true;
qr = true;
xff-hdr = "X-Real-IP";
@@ -25,6 +25,13 @@
http-only = true;
og = true;
shr = "/shares";
ansi = true; # color in log messages
re-maxage = 60 * 60 * 12; # reindex every 12h
# idp-h-usr = "remote-user";
# idp-h-grp = "remote-group";
# idp-login = "https://auth.shobu.fr/?rd=https://files.shobu.fr";
# idp-logout = "https://auth.shobu.fr/";
};
accounts = {
@@ -54,9 +61,9 @@
};
};
"/mediacenter" = {
path = "/mnt/mediacenter/media";
path = "/mnt/mediacenter/";
access = {
rw = ["serhao"];
rw = [ "serhao" ];
};
flags = {
e2d = true;
@@ -65,12 +72,38 @@
"/data" = {
path = "/mnt/data";
access = {
rwd = ["serhao"];
rwd = [ "serhao" ];
};
flags = {
e2d = true;
};
};
"/dump" = {
path = "/mnt/data/dump";
access = {
rw = "*";
rwd = [ "serhao" ];
};
flags = {
lifetime = 86400;
df = "100g";
vmaxb = "10g";
};
};
"/dump/quick" = {
path = "/mnt/data/dump/quick";
access = {
rw = "*";
rwd = [ "serhao" ];
};
flags = {
e2ds = true;
pk = "gz,9";
lifetime = 300;
df = "100g";
vmaxb = "10g";
};
};
};
};
hosts/sin/glances.nix
+6 -1
View File
@@ -4,6 +4,11 @@
enable = true;
openFirewall = true;
# TODO Change secrets
extraArgs = [ "--webserver" ];
extraArgs = [
"--webserver"
"--disable-webui"
"--disable-plugin"
"processcount"
];
};
}
hosts/sin/homepage.nix
+163 -6
View File
@@ -12,7 +12,6 @@
headerStyle = "boxed";
providers = {
"finnhub" = "cuvq5e9r01qub8tv03g0cuvq5e9r01qub8tv03gg";
};
layout = [
@@ -38,6 +37,20 @@
header = false;
};
}
{
"admin" = {
tab = "Admin";
header = false;
sin = {
style = "row";
columns = 3;
};
thea = {
style = "row";
columns = 3;
};
};
}
];
};
@@ -56,9 +69,7 @@
}
{
glances = {
url = "https://zimablade-admin.shobu.fr";
user = "shobu";
password = "shobu";
url = "http://sin.home:61208";
version = 4;
disk = [
"/"
@@ -154,7 +165,7 @@
widget = {
type = "jellyseerr";
url = "https://jellyseerr.shobu.fr";
key = "MTczNzkyNzMxMzgwODk4N2FlZWJkLTQ0N2QtNGU0MS1iOWE1LTJmZmE3OTI4ZGQ5OQ==";
key = "MTc0OTMzOTE2MDMwODgxNzdlYjNlLTU4N2ItNDc0Mi1iZTY4LTM3NzVhMWZiMDUzZg==";
};
};
}
@@ -227,7 +238,7 @@
href = "https://transmission.shobu.fr";
widget = {
type = "transmission";
url = "https://transmission.shobu.fr";
url = "http://sin.home:9091";
};
};
}
@@ -235,6 +246,152 @@
}
];
}
{
"admin" = [
(
let
name = "sin";
address = "http://sin.home:61208";
in
{
"${name}" = [
{
"info" = {
widget = {
type = "glances";
url = address;
version = 4;
metric = "info";
};
};
}
{
"main storage" = {
widget = {
type = "glances";
url = address;
version = 4;
metric = "fs:/mnt/fs";
};
};
}
{
"system storage" = {
widget = {
type = "glances";
url = address;
version = 4;
metric = "fs:/";
};
};
}
{
"memory" = {
widget = {
type = "glances";
url = address;
version = 4;
metric = "memory";
};
};
}
{
"cpu" = {
widget = {
type = "glances";
url = address;
version = 4;
metric = "cpu";
};
};
}
{
"network" = {
widget = {
type = "glances";
url = address;
version = 4;
metric = "network:enp2s0";
};
};
}
];
}
)
(
let
name = "thea";
address = "http://thea.home:61208";
in
{
"${name}" = [
{
"info" = {
widget = {
type = "glances";
url = address;
version = 4;
metric = "info";
};
};
}
{
"main storage" = {
widget = {
type = "glances";
url = address;
version = 4;
metric = "fs:/mnt/fs";
};
};
}
{
"system storage" = {
widget = {
type = "glances";
url = address;
version = 4;
metric = "fs:/";
};
};
}
{
"memory" = {
widget = {
type = "glances";
url = address;
version = 4;
metric = "memory";
};
};
}
{
"cpu" = {
widget = {
type = "glances";
url = address;
version = 4;
metric = "cpu";
};
};
}
{
"network" = {
widget = {
type = "glances";
url = address;
version = 4;
metric = "network:enp2s0";
};
};
}
];
}
)
];
}
];
};
}
hosts/sin/jellyfin.nix
+99 -66
View File
@@ -1,22 +1,44 @@
{ pkgs, inputs, ... }:
{
pkgs,
inputs,
...
}:
let
unstable = import inputs.unstable { system = pkgs.system; };
nixpkgs-2505 = import inputs.nixpkgs-2505 {
system = pkgs.stdenv.system;
config.allowUnfree = true;
config.permittedInsecurePackages = [ "intel-media-sdk-23.2.2" ];
};
in
{systemd.services.jellyfin.environment.LIBVA_DRIVER_NAME = "iHD"; # or i965 for older GPUs
environment.sessionVariables = { LIBVA_DRIVER_NAME = "iHD"; };
{
systemd.services.jellyfin.environment = {
LIBVA_DRIVER_NAME = "iHD"; # or i965 for older GPUs
NEOReadDebugKeys = "1";
OverrideGpuAddressSpace = "48";
};
environment.sessionVariables = {
LIBVA_DRIVER_NAME = "iHD";
NEOReadDebugKeys = "1";
OverrideGpuAddressSpace = "48";
};
hardware.graphics = {
enable = true;
extraPackages = with pkgs; [
intel-ocl # Generic OpenCL support
# For Broadwell and newer (ca. 2014+), use with LIBVA_DRIVER_NAME=iHD:
intel-compute-runtime-legacy1
intel-media-driver
nixpkgs-2505.intel-media-sdk
];
};
hardware.enableRedistributableFirmware = true;
boot.kernelParams = [ "i915.enable_guc=3" ];
nixpkgs.config.permittedInsecurePackages = [
"dotnet-sdk-6.0.428"
"aspnetcore-runtime-6.0.36"
# "dotnet-sdk-6.0.428"
# "aspnetcore-runtime-6.0.36"
"intel-media-sdk-23.2.2"
];
users.users."starr" = {
@@ -63,70 +85,81 @@ in
"radarr"
"sonarr"
];
users.users.jellyfin.extraGroups = [
"render"
"video"
];
users.groups = {
starr = { };
};
services = {
jellyfin = {
enable = true;
openFirewall = true;
};
sonarr = {
enable = true;
openFirewall = true;
group = "starr";
settings = {
authentication.AuthenticationMethod = "external";
authentication.AuthenticationType = "enabled";
};
};
radarr = {
enable = true;
openFirewall = true;
group = "starr";
settings = {
authentication.AuthenticationMethod = "external";
authentication.AuthenticationType = "enabled";
};
};
prowlarr = {
enable = true;
openFirewall = true;
settings = {
authentication.AuthenticationMethod = "external";
authentication.AuthenticationType = "enabled";
};
};
bazarr = {
enable = true;
openFirewall = true;
};
lidarr = {
enable = true;
openFirewall = true;
settings = {
authentication.AuthenticationMethod = "external";
authentication.AuthenticationType = "enabled";
};
};
whisparr = {
enable = true;
openFirewall = true;
settings = {
authentication.AuthenticationMethod = "external";
authentication.AuthenticationType = "enabled";
};
};
jellyseerr = {
enable = true;
openFirewall = true;
starr = {
gid = 990;
};
};
services =
let
mkEnvFile =
name:
(pkgs.writeText "${name}.env" ''
${name}__AUTH__ENABLED=false
${name}__AUTH__METHOD=External
'');
in
{
jellyfin = {
enable = true;
openFirewall = true;
};
sonarr = {
enable = true;
openFirewall = true;
group = "starr";
environmentFiles = [
(mkEnvFile "SONARR")
];
};
radarr = {
enable = true;
openFirewall = true;
group = "starr";
environmentFiles = [
(mkEnvFile "RADARR")
];
};
prowlarr = {
enable = true;
openFirewall = true;
environmentFiles = [
(mkEnvFile "PROWLARR")
];
};
bazarr = {
enable = true;
openFirewall = true;
group = "starr";
};
lidarr = {
enable = true;
openFirewall = true;
environmentFiles = [
(mkEnvFile "LIDARR")
];
};
whisparr = {
enable = true;
openFirewall = true;
environmentFiles = [
(mkEnvFile "WHISPARR")
];
};
jellyseerr = {
enable = true;
openFirewall = true;
};
};
environment.systemPackages = [
pkgs.jellyfin
pkgs.jellyfin-web
hosts/sin/mailserver.nix
-37
View File
@@ -1,37 +0,0 @@
{
inputs,
config,
lib,
...
}:
let
inherit (lib)
mkDefault
;
in
{
imports = [
inputs.simple-mailserver.default
];
security.acme = {
acceptTerms = mkDefault true;
certs.${config.mailserver.fqdn} = {
};
};
mailserver = {
enable = true;
stateVersion = 3;
fqdn = "mail.shobu.fr";
domains = [ "shobu.fr" ];
x509.useACMEHost = config.mailserver.fqdn;
loginAccounts = {
"auth@shobu.fr" = {
password = "$y$j9T$aLAZYUOUrc2jxcNYGy1qt/$B1ZdufZtzJJmnLYIYW11nk1BwIIy1Xkjxb7lx3ge/Z3";
};
};
};
}
hosts/sin/transmission.nix
+1 -1
View File
@@ -86,7 +86,7 @@
];
environment = {
PUID = toString config.users.users.transmission.uid;
GUID = toString config.users.groups.transmission.gid;
PGID = toString config.users.groups.starr.gid;
PEERPORT = peerport;
};
};
hosts/sin/trilium.nix
+2 -1
View File
@@ -4,6 +4,7 @@
enable = true;
port = 12783;
host = "0.0.0.0";
noAuthentication = true;
# noAuthentication = true;
environmentFile = "/secrets/trilium.env";
};
}