swarsel/.dotfiles
1
0
Fork 0
mirror of https://github.com/Swarsel/.dotfiles.git synced 2025-12-06 09:07:21 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat: winters: prepare navidrome

Browse source
This commit is contained in:
Swarsel 2024-09-24 00:24:11 +02:00
parent 33cfbba58b
commit 2789b8eefd
Signed by: swarsel
GPG key ID: 26A54C31F2A4FD84
4 changed files with 46 additions and 52 deletions
Download patch file Download diff file Expand all files Collapse all files

49
SwarselSystems.org
View file

@ -2032,6 +2032,7 @@ My work machine. Built for more security, this is the gold standard of my config
hostName = "winters"; hostName = "winters";
hostId = "b7778a4a"; hostId = "b7778a4a";
firewall.enable = true; firewall.enable = true;
allowPing = true;
}; };
@ -6587,27 +6588,23 @@ Also, the system state version is set here. No need to touch it.
{ pkgs, lib, config, ... }: { pkgs, lib, config, ... }:
{ {
services = { services = {
# Network shares
# add a user with sudo smbpasswd -a <user> # add a user with sudo smbpasswd -a <user>
samba = { samba = {
package = pkgs.samba4Full; package = pkgs.samba4Full;
extraConfig = '' # extraConfig = ''
workgroup = WORKGROUP # workgroup = WORKGROUP
server role = standalone server # server role = standalone server
dns proxy = no # dns proxy = no
pam password change = yes # pam password change = yes
map to guest = bad user # map to guest = bad user
create mask = 0664 # create mask = 0664
force create mode = 0664 # force create mode = 0664
directory mask = 0775 # directory mask = 0775
force directory mode = 0775 # force directory mode = 0775
follow symlinks = yes # follow symlinks = yes
''; # '';
# ^^ `samba4Full` is compiled with avahi, ldap, AD etc support compared to the default package, `samba`
# Required for samba to register mDNS records for auto discovery
# See https://github.com/NixOS/nixpkgs/blob/592047fc9e4f7b74a4dc85d1b9f5243dfe4899e3/pkgs/top-level/all-packages.nix#L27268
enable = true; enable = true;
openFirewall = true; openFirewall = true;
shares.Eternor = { shares.Eternor = {
@ -6617,23 +6614,21 @@ Also, the system state version is set here. No need to touch it.
path = "/Vault/Eternor"; path = "/Vault/Eternor";
writable = "true"; writable = "true";
comment = "Eternor"; comment = "Eternor";
"valid users" = "@Swarsel"; "valid users" = "Swarsel";
}; };
}; };
avahi = { avahi = {
publish.enable = true; publish.enable = true;
publish.userServices = true; publish.userServices = true; # Needed to allow samba to automatically register mDNS records without the need for an `extraServiceFile`
# ^^ Needed to allow samba to automatically register mDNS records without the need for an `extraServiceFile`
nssmdns4 = true; nssmdns4 = true;
# ^^ Not one hundred percent sure if this is needed- if it aint broke, don't fix it
enable = true; enable = true;
openFirewall = true; openFirewall = true;
}; };
samba-wsdd = {
# This enables autodiscovery on windows since SMB1 (and thus netbios) support was discontinued # This enables autodiscovery on windows since SMB1 (and thus netbios) support was discontinued
samba-wsdd = {
enable = true; enable = true;
openFirewall = true; openFirewall = true;
}; };
@ -6820,22 +6815,24 @@ Also, the system state version is set here. No need to touch it.
hardware.enableAllFirmware = true; hardware.enableAllFirmware = true;
networking.firewall.allowedTCPPorts = [ 4040 ];
services.navidrome = { services.navidrome = {
enable = true; enable = true;
openFirewall = true; openFirewall = true;
settings = { settings = {
Address = "0.0.0.0"; Address = "0.0.0.0";
Port = 4040; Port = 4040;
MusicFolder = "/media"; MusicFolder = "/Vault/Eternor/Musik";
EnableSharing = true; EnableSharing = true;
EnableTranscodingConfig = true; EnableTranscodingConfig = true;
Scanner.GroupAlbumReleases = true; Scanner.GroupAlbumReleases = true;
ScanSchedule = "@every 1d"; ScanSchedule = "@every 1d";
# Insert these values locally as sops-nix does not work for them # Insert these values locally as sops-nix does not work for them
# LastFM.ApiKey = TEMPLATE; LastFM.ApiKey = builtins.readFile /home/swarsel/api/lastfm-secret;
# LastFM.Secret = TEMPLATE; LastFM.Secret = builtins.readFile /home/swarsel/api/lastfm-key;
# Spotify.ID = TEMPLATE; Spotify.ID = builtins.readFile /home/swarsel/api/spotify-id;
# Spotify.Secret = TEMPLATE; Spotify.Secret = builtins.readFile /home/swarsel/api/spotify-secret;
UILoginBackgroundUrl = "https://i.imgur.com/OMLxi7l.png"; UILoginBackgroundUrl = "https://i.imgur.com/OMLxi7l.png";
UIWelcomeMessage = "~SwarselSound~"; UIWelcomeMessage = "~SwarselSound~";
}; };

12
profiles/server/common/navidrome.nix
View file

@ -27,22 +27,24 @@
hardware.enableAllFirmware = true; hardware.enableAllFirmware = true;
networking.firewall.allowedTCPPorts = [ 4040 ];
services.navidrome = { services.navidrome = {
enable = true; enable = true;
openFirewall = true; openFirewall = true;
settings = { settings = {
Address = "0.0.0.0"; Address = "0.0.0.0";
Port = 4040; Port = 4040;
MusicFolder = "/media"; MusicFolder = "/Vault/Eternor/Musik";
EnableSharing = true; EnableSharing = true;
EnableTranscodingConfig = true; EnableTranscodingConfig = true;
Scanner.GroupAlbumReleases = true; Scanner.GroupAlbumReleases = true;
ScanSchedule = "@every 1d"; ScanSchedule = "@every 1d";
# Insert these values locally as sops-nix does not work for them # Insert these values locally as sops-nix does not work for them
# LastFM.ApiKey = TEMPLATE; LastFM.ApiKey = builtins.readFile /home/swarsel/api/lastfm-secret;
# LastFM.Secret = TEMPLATE; LastFM.Secret = builtins.readFile /home/swarsel/api/lastfm-key;
# Spotify.ID = TEMPLATE; Spotify.ID = builtins.readFile /home/swarsel/api/spotify-id;
# Spotify.Secret = TEMPLATE; Spotify.Secret = builtins.readFile /home/swarsel/api/spotify-secret;
UILoginBackgroundUrl = "https://i.imgur.com/OMLxi7l.png"; UILoginBackgroundUrl = "https://i.imgur.com/OMLxi7l.png";
UIWelcomeMessage = "~SwarselSound~"; UIWelcomeMessage = "~SwarselSound~";
}; };

36
profiles/server/common/nfs.nix
View file

@ -1,27 +1,23 @@
{ pkgs, lib, config, ... }: { pkgs, lib, config, ... }:
{ {
services = { services = {
# Network shares
# add a user with sudo smbpasswd -a <user> # add a user with sudo smbpasswd -a <user>
samba = { samba = {
package = pkgs.samba4Full; package = pkgs.samba4Full;
extraConfig = '' # extraConfig = ''
workgroup = WORKGROUP # workgroup = WORKGROUP
server role = standalone server # server role = standalone server
dns proxy = no # dns proxy = no
pam password change = yes # pam password change = yes
map to guest = bad user # map to guest = bad user
create mask = 0664 # create mask = 0664
force create mode = 0664 # force create mode = 0664
directory mask = 0775 # directory mask = 0775
force directory mode = 0775 # force directory mode = 0775
follow symlinks = yes # follow symlinks = yes
''; # '';
# ^^ `samba4Full` is compiled with avahi, ldap, AD etc support compared to the default package, `samba`
# Required for samba to register mDNS records for auto discovery
# See https://github.com/NixOS/nixpkgs/blob/592047fc9e4f7b74a4dc85d1b9f5243dfe4899e3/pkgs/top-level/all-packages.nix#L27268
enable = true; enable = true;
openFirewall = true; openFirewall = true;
shares.Eternor = { shares.Eternor = {
@ -31,23 +27,21 @@
path = "/Vault/Eternor"; path = "/Vault/Eternor";
writable = "true"; writable = "true";
comment = "Eternor"; comment = "Eternor";
"valid users" = "@Swarsel"; "valid users" = "Swarsel";
}; };
}; };
avahi = { avahi = {
publish.enable = true; publish.enable = true;
publish.userServices = true; publish.userServices = true; # Needed to allow samba to automatically register mDNS records without the need for an `extraServiceFile`
# ^^ Needed to allow samba to automatically register mDNS records without the need for an `extraServiceFile`
nssmdns4 = true; nssmdns4 = true;
# ^^ Not one hundred percent sure if this is needed- if it aint broke, don't fix it
enable = true; enable = true;
openFirewall = true; openFirewall = true;
}; };
# This enables autodiscovery on windows since SMB1 (and thus netbios) support was discontinued
samba-wsdd = { samba-wsdd = {
# This enables autodiscovery on windows since SMB1 (and thus netbios) support was discontinued
enable = true; enable = true;
openFirewall = true; openFirewall = true;
}; };

1
profiles/server/winters/default.nix
View file

@ -29,6 +29,7 @@
hostName = "winters"; hostName = "winters";
hostId = "b7778a4a"; hostId = "b7778a4a";
firewall.enable = true; firewall.enable = true;
allowPing = true;
}; };