Remove the features directory

nix/modules/nixos/homelab/audiobookshelf.nix

@@ -0,0 +1,26 @@
+{ config, lib, ... }:
+
+with lib;
+
+let
+  cfg = config.nixosModules.audiobookshelf;
+in
+{
+  options.nixosModules.audiobookshelf.enable = mkEnableOption "Enable audiobookshelf";
+
+  config = mkIf cfg.enable {
+    services = {
+      audiobookshelf = {
+        enable = true;
+
+        port = 4001;
+      };
+
+      caddy.virtualHosts."audiobookshelf.oliverdavies.uk" = {
+        useACMEHost = "oliverdavies.uk";
+
+        extraConfig = "reverse_proxy localhost:${toString config.services.audiobookshelf.port}";
+      };
+    };
+  };
+}

nix/modules/nixos/homelab/containers/beaverhabits.nix

@@ -0,0 +1,102 @@
+# Auto-generated using compose2nix v0.3.2-pre.
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+
+with lib;
+
+let
+  cfg = config.nixosModules.beaverhabits;
+
+  port = 8084;
+in
+{
+  options.nixosModules.beaverhabits.enable = mkEnableOption "Enable beaverhabits";
+
+  config = mkIf cfg.enable {
+    virtualisation = {
+      docker = {
+        enable = true;
+        autoPrune.enable = true;
+      };
+
+      oci-containers = {
+        backend = "docker";
+
+        containers."beaverhabits" = {
+          image = "daya0576/beaverhabits:latest";
+
+          environment = {
+            "HABITS_STORAGE" = "DATABASE";
+          };
+
+          volumes = [
+            "/mnt/media/beaverhabits:/app/.user:rw"
+          ];
+
+          ports = [
+            "${toString port}:8080/tcp"
+          ];
+
+          user = "1000:1000";
+
+          log-driver = "journald";
+
+          extraOptions = [
+            "--network-alias=beaverhabits"
+            "--network=beaverhabits_default"
+          ];
+        };
+      };
+    };
+
+    systemd = {
+      services = {
+        "docker-beaverhabits" = {
+          serviceConfig = {
+            Restart = lib.mkOverride 90 "always";
+            RestartMaxDelaySec = lib.mkOverride 90 "1m";
+            RestartSec = lib.mkOverride 90 "100ms";
+            RestartSteps = lib.mkOverride 90 9;
+          };
+
+          after = [ "docker-network-beaverhabits_default.service" ];
+          requires = [ "docker-network-beaverhabits_default.service" ];
+          partOf = [ "docker-compose-beaverhabits-root.target" ];
+          wantedBy = [ "docker-compose-beaverhabits-root.target" ];
+        };
+
+        "docker-network-beaverhabits_default" = {
+          path = [ pkgs.docker ];
+
+          serviceConfig = {
+            Type = "oneshot";
+            RemainAfterExit = true;
+            ExecStop = "docker network rm -f beaverhabits_default";
+          };
+
+          script = ''
+            docker network inspect beaverhabits_default || docker network create beaverhabits_default
+          '';
+
+          partOf = [ "docker-compose-beaverhabits-root.target" ];
+          wantedBy = [ "docker-compose-beaverhabits-root.target" ];
+        };
+      };
+
+      targets."docker-compose-beaverhabits-root" = {
+        unitConfig.Description = "Root target generated by compose2nix.";
+        wantedBy = [ "multi-user.target" ];
+      };
+    };
+
+    services.caddy.virtualHosts."beaverhabits.oliverdavies.uk" = {
+      useACMEHost = "oliverdavies.uk";
+
+      extraConfig = "reverse_proxy localhost:${toString port}";
+    };
+  };
+}

nix/modules/nixos/homelab/containers/default.nix

@@ -0,0 +1,8 @@
+{
+  imports = [
+    ./beaverhabits.nix
+    ./freshrss.nix
+    ./pi-hole.nix
+    ./tubearchivist.nix
+  ];
+}

nix/modules/nixos/homelab/containers/freshrss.nix

@@ -0,0 +1,109 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+
+with lib;
+
+let
+  cfg = config.nixosModules.freshrss;
+  port = 4003;
+in
+{
+  options.nixosModules.freshrss.enable = mkEnableOption "Enable freshrss";
+
+  config = mkIf cfg.enable {
+    # Auto-generated using compose2nix v0.3.2-pre.
+    virtualisation = {
+      docker = {
+        enable = true;
+        autoPrune.enable = true;
+      };
+
+      oci-containers.backend = "docker";
+    };
+
+    virtualisation.oci-containers.containers."freshrss" = {
+      image = "lscr.io/linuxserver/freshrss:latest";
+
+      environment = {
+        "PGID" = "1000";
+        "PUID" = "1000";
+        "TZ" = "Etc/UTC";
+      };
+
+      volumes = [
+        "/home/opdavies/Code/dotfiles/freshrss-config:/config:rw"
+      ];
+
+      ports = [
+        "${toString port}:80/tcp"
+      ];
+
+      log-driver = "journald";
+
+      extraOptions = [
+        "--network-alias=freshrss"
+        "--network=freshrss_default"
+      ];
+    };
+
+    systemd.services."docker-freshrss" = {
+      serviceConfig = {
+        Restart = lib.mkOverride 90 "always";
+        RestartMaxDelaySec = lib.mkOverride 90 "1m";
+        RestartSec = lib.mkOverride 90 "100ms";
+        RestartSteps = lib.mkOverride 90 9;
+      };
+
+      after = [
+        "docker-network-freshrss_default.service"
+      ];
+
+      requires = [
+        "docker-network-freshrss_default.service"
+      ];
+
+      partOf = [
+        "docker-compose-freshrss-root.target"
+      ];
+
+      wantedBy = [
+        "docker-compose-freshrss-root.target"
+      ];
+    };
+
+    systemd.services."docker-network-freshrss_default" = {
+      path = [ pkgs.docker ];
+
+      serviceConfig = {
+        Type = "oneshot";
+        RemainAfterExit = true;
+        ExecStop = "docker network rm -f freshrss_default";
+      };
+
+      script = ''
+        docker network inspect freshrss_default || docker network create freshrss_default
+      '';
+
+      partOf = [ "docker-compose-freshrss-root.target" ];
+      wantedBy = [ "docker-compose-freshrss-root.target" ];
+    };
+
+    systemd.targets."docker-compose-freshrss-root" = {
+      unitConfig = {
+        Description = "Root target generated by compose2nix.";
+      };
+
+      wantedBy = [ "multi-user.target" ];
+    };
+
+    services.caddy.virtualHosts."freshrss.oliverdavies.uk" = {
+      useACMEHost = "oliverdavies.uk";
+
+      extraConfig = "reverse_proxy localhost:${toString port}";
+    };
+  };
+}

nix/modules/nixos/homelab/containers/pi-hole.nix

@@ -0,0 +1,101 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+
+with lib;
+
+let
+  port = 8082;
+in
+{
+  options.nixosModules.pihole.enable = mkEnableOption "Enable pihole";
+
+  config = mkIf config.nixosModules.pihole.enable {
+    virtualisation = {
+      docker = {
+        enable = true;
+        autoPrune.enable = true;
+      };
+
+      oci-containers = {
+        backend = "docker";
+
+        containers."pihole" = {
+          image = "pihole/pihole:latest";
+
+          environment = {
+            "PIHOLE_DNS_1" = "8.8.8.8";
+            "PIHOLE_DNS_2" = "8.8.4.4";
+            "TZ" = "Europe/London";
+          };
+
+          volumes = [
+            "/home/opdavies/pihole/etc-dnsmasq.d:/etc/dnsmasq.d:rw"
+            "/home/opdavies/pihole/etc-pihole:/etc/pihole:rw"
+          ];
+
+          ports = [
+            "53:53/tcp"
+            "53:53/udp"
+            "67:67/udp"
+            "${toString port}:80/tcp"
+          ];
+
+          log-driver = "journald";
+
+          extraOptions = [
+            "--cap-add=NET_ADMIN"
+            "--network-alias=pihole"
+            "--network=pihole_default"
+          ];
+        };
+      };
+    };
+
+    systemd = {
+      services = {
+        "docker-pihole" = {
+          serviceConfig = {
+            Restart = lib.mkOverride 90 "always";
+            RestartMaxDelaySec = lib.mkOverride 90 "1m";
+            RestartSec = lib.mkOverride 90 "100ms";
+            RestartSteps = lib.mkOverride 90 9;
+          };
+
+          after = [ "docker-network-pihole_default.service" ];
+          requires = [ "docker-network-pihole_default.service" ];
+          partOf = [ "docker-compose-pihole-root.target" ];
+          wantedBy = [ "docker-compose-pihole-root.target" ];
+        };
+
+        "docker-network-pihole_default" = {
+          path = [ pkgs.docker ];
+
+          serviceConfig = {
+            Type = "oneshot";
+            RemainAfterExit = true;
+            ExecStop = "docker network rm -f pihole_default";
+          };
+
+          script = ''
+            docker network inspect pihole_default || docker network create pihole_default
+          '';
+
+          partOf = [ "docker-compose-pihole-root.target" ];
+          wantedBy = [ "docker-compose-pihole-root.target" ];
+        };
+      };
+
+      targets."docker-compose-pihole-root" = {
+        unitConfig = {
+          Description = "Root target generated by compose2nix.";
+        };
+
+        wantedBy = [ "multi-user.target" ];
+      };
+    };
+  };
+}

nix/modules/nixos/homelab/containers/tubearchivist.nix

@@ -0,0 +1,296 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+
+with lib;
+
+let
+  cfg = config.nixosModules.tubearchivist-container;
+
+  port = 8085;
+  url = "tubearchivist.oliverdavies.uk";
+in
+{
+  options.nixosModules.tubearchivist-container = {
+    enable = mkEnableOption "Enable the tubearchivist-container service.";
+  };
+
+  config = mkIf cfg.enable {
+    virtualisation.docker = {
+      enable = true;
+      autoPrune.enable = true;
+    };
+
+    virtualisation.oci-containers.backend = "docker";
+
+    virtualisation.oci-containers.containers."archivist-es" = {
+      image = "bbilly1/tubearchivist-es";
+
+      environment = {
+        "ES_JAVA_OPTS" = "-Xms1g -Xmx1g";
+        "discovery.type" = "single-node";
+        "path.repo" = "/usr/share/elasticsearch/data/snapshot";
+        "xpack.security.enabled" = "true";
+      };
+
+      environmentFiles = [
+        config.age.secrets.tubearchivist.path
+      ];
+
+      volumes = [
+        "tubearchivist_es:/usr/share/elasticsearch/data:rw"
+      ];
+
+      log-driver = "journald";
+
+      extraOptions = [
+        "--network-alias=archivist-es"
+        "--network=tubearchivist_default"
+      ];
+    };
+
+    systemd.services."docker-archivist-es" = {
+      serviceConfig = {
+        Restart = mkOverride 90 "always";
+        RestartMaxDelaySec = mkOverride 90 "1m";
+        RestartSec = mkOverride 90 "100ms";
+        RestartSteps = mkOverride 90 9;
+      };
+
+      after = [
+        "docker-network-tubearchivist_default.service"
+        "docker-volume-tubearchivist_es.service"
+      ];
+
+      requires = [
+        "docker-network-tubearchivist_default.service"
+        "docker-volume-tubearchivist_es.service"
+      ];
+
+      partOf = [
+        "docker-compose-tubearchivist-root.target"
+      ];
+
+      wantedBy = [
+        "docker-compose-tubearchivist-root.target"
+      ];
+    };
+
+    virtualisation.oci-containers.containers."archivist-redis" = {
+      image = "redis/redis-stack-server";
+
+      volumes = [
+        "tubearchivist_redis:/data:rw"
+      ];
+
+      dependsOn = [
+        "archivist-es"
+      ];
+
+      log-driver = "journald";
+
+      extraOptions = [
+        "--network-alias=archivist-redis"
+        "--network=tubearchivist_default"
+      ];
+    };
+
+    systemd.services."docker-archivist-redis" = {
+      serviceConfig = {
+        Restart = mkOverride 90 "always";
+        RestartMaxDelaySec = mkOverride 90 "1m";
+        RestartSec = mkOverride 90 "100ms";
+        RestartSteps = mkOverride 90 9;
+      };
+
+      after = [
+        "docker-network-tubearchivist_default.service"
+        "docker-volume-tubearchivist_redis.service"
+      ];
+
+      requires = [
+        "docker-network-tubearchivist_default.service"
+        "docker-volume-tubearchivist_redis.service"
+      ];
+
+      partOf = [
+        "docker-compose-tubearchivist-root.target"
+      ];
+
+      wantedBy = [
+        "docker-compose-tubearchivist-root.target"
+      ];
+    };
+
+    virtualisation.oci-containers.containers."tubearchivist" = {
+      image = "bbilly1/tubearchivist";
+
+      environment = {
+        "ES_URL" = "http://archivist-es:9200";
+        "HOST_GID" = "1000";
+        "HOST_UID" = "1000";
+        "REDIS_HOST" = "archivist-redis";
+        "TA_HOST" = url;
+        "TZ" = "Europe/London";
+      };
+
+      environmentFiles = [
+        config.age.secrets.tubearchivist.path
+      ];
+
+      volumes = [
+        "/mnt/media/tubearchivist_cache:/cache:rw"
+        "/mnt/media/tubearchivist_media:/youtube:rw"
+      ];
+
+      ports = [
+        "${toString port}:8000/tcp"
+      ];
+
+      dependsOn = [
+        "archivist-es"
+        "archivist-redis"
+      ];
+
+      log-driver = "journald";
+
+      extraOptions = [
+        "--health-cmd=[\"curl\", \"-f\", \"http://localhost:8000/health\"]"
+        "--health-interval=2m0s"
+        "--health-retries=3"
+        "--health-start-period=30s"
+        "--health-timeout=10s"
+        "--network-alias=tubearchivist"
+        "--network=tubearchivist_default"
+      ];
+    };
+
+    systemd.services."docker-tubearchivist" = {
+      serviceConfig = {
+        Restart = mkOverride 90 "always";
+        RestartMaxDelaySec = mkOverride 90 "1m";
+        RestartSec = mkOverride 90 "100ms";
+        RestartSteps = mkOverride 90 9;
+      };
+
+      after = [
+        "docker-network-tubearchivist_default.service"
+        "docker-volume-tubearchivist_cache.service"
+        "docker-volume-tubearchivist_media.service"
+      ];
+
+      requires = [
+        "docker-network-tubearchivist_default.service"
+        "docker-volume-tubearchivist_cache.service"
+        "docker-volume-tubearchivist_media.service"
+      ];
+
+      partOf = [
+        "docker-compose-tubearchivist-root.target"
+      ];
+
+      wantedBy = [
+        "docker-compose-tubearchivist-root.target"
+      ];
+    };
+
+    systemd.services."docker-network-tubearchivist_default" = {
+      path = [ pkgs.docker ];
+
+      serviceConfig = {
+        Type = "oneshot";
+        RemainAfterExit = true;
+        ExecStop = "docker network rm -f tubearchivist_default";
+      };
+
+      script = ''
+        docker network inspect tubearchivist_default || docker network create tubearchivist_default
+      '';
+
+      partOf = [ "docker-compose-tubearchivist-root.target" ];
+      wantedBy = [ "docker-compose-tubearchivist-root.target" ];
+    };
+
+    systemd.services."docker-volume-tubearchivist_cache" = {
+      path = [ pkgs.docker ];
+
+      serviceConfig = {
+        Type = "oneshot";
+        RemainAfterExit = true;
+      };
+
+      script = ''
+        docker volume inspect tubearchivist_cache || docker volume create tubearchivist_cache
+      '';
+
+      partOf = [ "docker-compose-tubearchivist-root.target" ];
+      wantedBy = [ "docker-compose-tubearchivist-root.target" ];
+
+    };
+
+    systemd.services."docker-volume-tubearchivist_es" = {
+      path = [ pkgs.docker ];
+
+      serviceConfig = {
+        Type = "oneshot";
+        RemainAfterExit = true;
+      };
+
+      script = ''
+        docker volume inspect tubearchivist_es || docker volume create tubearchivist_es
+      '';
+
+      partOf = [ "docker-compose-tubearchivist-root.target" ];
+      wantedBy = [ "docker-compose-tubearchivist-root.target" ];
+    };
+
+    systemd.services."docker-volume-tubearchivist_media" = {
+      path = [ pkgs.docker ];
+
+      serviceConfig = {
+        Type = "oneshot";
+        RemainAfterExit = true;
+      };
+
+      script = ''
+        docker volume inspect tubearchivist_media || docker volume create tubearchivist_media
+      '';
+
+      partOf = [ "docker-compose-tubearchivist-root.target" ];
+      wantedBy = [ "docker-compose-tubearchivist-root.target" ];
+    };
+
+    systemd.services."docker-volume-tubearchivist_redis" = {
+      path = [ pkgs.docker ];
+
+      serviceConfig = {
+        Type = "oneshot";
+        RemainAfterExit = true;
+      };
+
+      script = ''
+        docker volume inspect tubearchivist_redis || docker volume create tubearchivist_redis
+      '';
+
+      partOf = [ "docker-compose-tubearchivist-root.target" ];
+      wantedBy = [ "docker-compose-tubearchivist-root.target" ];
+    };
+
+    systemd.targets."docker-compose-tubearchivist-root" = {
+      unitConfig = {
+        Description = "Root target generated by compose2nix.";
+      };
+
+      wantedBy = [ "multi-user.target" ];
+    };
+
+    services.caddy.virtualHosts."tubearchivist.oliverdavies.uk" = {
+      useACMEHost = "oliverdavies.uk";
+
+      extraConfig = "reverse_proxy localhost:${toString port}";
+    };
+  };
+}

nix/modules/nixos/homelab/default.nix

@@ -0,0 +1,12 @@
+{
+  imports = [
+    ./audiobookshelf.nix
+    ./containers
+    ./forgejo.nix
+    ./gitea.nix
+    ./immich.nix
+    ./jellyfin.nix
+    ./paperless.nix
+    ./vaultwarden.nix
+  ];
+}

nix/modules/nixos/homelab/forgejo.nix

@@ -0,0 +1,34 @@
+{ config, lib, ... }:
+
+with lib;
+
+{
+  options.nixosModules.forgejo.enable = mkEnableOption "Enable forgejo";
+
+  config = mkIf config.nixosModules.forgejo.enable {
+    services = {
+      forgejo = {
+        enable = true;
+        group = "media";
+        stateDir = "/mnt/media/forgejo";
+
+        settings = {
+          server = {
+            DOMAIN = "forgejo.oliverdavies.uk";
+            HTTP_PORT = 2223;
+          };
+
+          service = {
+            DISABLE_REGISTRATION = true;
+          };
+        };
+      };
+
+      caddy.virtualHosts."${config.services.forgejo.settings.server.DOMAIN}" = {
+        useACMEHost = "oliverdavies.uk";
+
+        extraConfig = "reverse_proxy localhost:${toString config.services.forgejo.settings.server.HTTP_PORT}";
+      };
+    };
+  };
+}

nix/modules/nixos/homelab/gitea.nix

@@ -0,0 +1,36 @@
+{ config, lib, ... }:
+
+with lib;
+
+let
+  port = 2222;
+in
+{
+  options.nixosModules.gitea.enable = mkEnableOption "Enable gitea";
+
+  config = mkIf config.nixosModules.gitea.enable {
+    services = {
+      gitea = {
+        enable = true;
+        group = "media";
+        stateDir = "/mnt/media/gitea";
+
+        settings = {
+          server = {
+            HTTP_PORT = port;
+          };
+
+          service = {
+            DISABLE_REGISTRATION = true;
+          };
+        };
+      };
+
+      caddy.virtualHosts."gitea.oliverdavies.uk" = {
+        useACMEHost = "oliverdavies.uk";
+
+        extraConfig = "reverse_proxy localhost:${toString port}";
+      };
+    };
+  };
+}

nix/modules/nixos/homelab/immich.nix

@@ -0,0 +1,28 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+
+with lib;
+
+{
+  options.nixosModules.immich.enable = mkEnableOption "Enable immich";
+
+  config = mkIf config.nixosModules.immich.enable {
+    services.immich = {
+      enable = true;
+      group = "media";
+      mediaLocation = "/mnt/media/immich";
+    };
+
+    environment.systemPackages = [ pkgs.immich-cli ];
+
+    services.caddy.virtualHosts."immich.oliverdavies.uk" = {
+      useACMEHost = "oliverdavies.uk";
+
+      extraConfig = "reverse_proxy localhost:${toString config.services.immich.port}";
+    };
+  };
+}

nix/modules/nixos/homelab/jellyfin.nix

@@ -0,0 +1,22 @@
+{ config, lib, ... }:
+
+with lib;
+
+{
+  options.nixosModules.jellyfin.enable = mkEnableOption "Enable jellyfin";
+
+  config = mkIf config.nixosModules.jellyfin.enable {
+    services.jellyfin = {
+      enable = true;
+      openFirewall = true;
+      group = "media";
+      configDir = "/mnt/media/jellyfin";
+    };
+
+    services.caddy.virtualHosts."jellyfin.oliverdavies.uk" = {
+      useACMEHost = "oliverdavies.uk";
+
+      extraConfig = "reverse_proxy localhost:8096";
+    };
+  };
+}

nix/modules/nixos/homelab/paperless.nix

@@ -0,0 +1,30 @@
+{ config, lib, ... }:
+
+with lib;
+
+let
+  url = "paperless.oliverdavies.uk";
+in
+{
+  options.nixosModules.paperless.enable = mkEnableOption "Enable paperless";
+
+  config = mkIf config.nixosModules.paperless.enable {
+    services = {
+      paperless = {
+        enable = true;
+
+        dataDir = "/mnt/media/paperless";
+
+        settings = {
+          PAPERLESS_URL = "https://${url}";
+        };
+      };
+
+      caddy.virtualHosts."${url}" = {
+        useACMEHost = "oliverdavies.uk";
+
+        extraConfig = "reverse_proxy localhost:28981";
+      };
+    };
+  };
+}

nix/modules/nixos/homelab/vaultwarden.nix

@@ -0,0 +1,31 @@
+{ config, lib, ... }:
+
+with lib;
+
+{
+  options.nixosModules.vaultwarden.enable = mkEnableOption "Enable vaultwarden";
+
+  config = mkIf config.nixosModules.vaultwarden.enable {
+    services = {
+      vaultwarden = {
+        enable = true;
+
+        config = {
+          DOMAIN = "https://vaultwarden.oliverdavies.uk";
+
+          # TODO: check registrations are disabled.
+          SIGNUPS_ALLOWED = false;
+
+          ROCKET_ADDRESS = "127.0.0.1";
+          ROCKET_PORT = 8222;
+        };
+      };
+
+      caddy.virtualHosts."vaultwarden.oliverdavies.uk" = {
+        useACMEHost = "oliverdavies.uk";
+
+        extraConfig = "reverse_proxy localhost:${toString config.services.vaultwarden.config.ROCKET_PORT}";
+      };
+    };
+  };
+}