48 lines
1.5 KiB
Nix
48 lines
1.5 KiB
Nix
{ lib, config, proxyReverse, ... }:
|
|
let
|
|
port = 5005;
|
|
portSecret = 5007;
|
|
in {
|
|
options.my.servers = {
|
|
flame.enable = lib.mkEnableOption "enable";
|
|
flameSecret.enable = lib.mkEnableOption "enable";
|
|
};
|
|
config = lib.mkIf config.my.servers.flame.enable {
|
|
sops.secrets.flame.sopsFile = ../../secrets/env.yaml;
|
|
virtualisation.oci-containers.containers = {
|
|
flame = {
|
|
autoStart = true;
|
|
image = "pawelmalak/flame";
|
|
ports = [ "${toString port}:${toString port}" ];
|
|
volumes = [
|
|
"${config.my.containerData}/flame:/app/data"
|
|
"${config.my.containerSocket}:${config.my.containerSocket}"
|
|
];
|
|
environmentFiles = [ config.sops.secrets.flame.path ];
|
|
environment = {
|
|
TZ = "America/Mexico_City";
|
|
PUID = "1000";
|
|
PGID = "100";
|
|
};
|
|
};
|
|
flame-nsfw = {
|
|
autoStart = true;
|
|
image = "pawelmalak/flame";
|
|
ports = [ "${toString portSecret}:${toString port}" ];
|
|
volumes = [ "${config.my.containerData}/flame-nsfw:/app/data" ];
|
|
environmentFiles = [ config.sops.secrets.flame.path ];
|
|
environment = {
|
|
TZ = "America/Mexico_City";
|
|
PUID = "1000";
|
|
PGID = "100";
|
|
};
|
|
};
|
|
};
|
|
services.nginx = {
|
|
virtualHosts."start.${config.my.domain}" = proxyReverse port // { };
|
|
virtualHosts."qampqwn4wprhqny8h8zj.${config.my.domain}" =
|
|
proxyReverse portSecret // { };
|
|
};
|
|
};
|
|
}
|