1
Fork 0
mirror of https://github.com/thegeneralist01/config.git synced 2026-03-07 10:59:55 +01:00

services: add jellyfin, archivebox, custom dns

- `internal.thegeneralist01.com` and `archive.thegeneralist01.com` are
  not public. I have Split DNS enabled on them (in Tailscale), with the
  IP of the DNS server set to a private Tailscale IP of my home server;
- CoreDNS (also on my home server) is used to resolve the two private
  domains' IPs to the home server itself;
- nginx only listens to its machine's (home server's) Tailscale IP;
- Therefore, all of it is hermetic!
This commit is contained in:
TheGeneralist 2025-08-03 14:48:21 +02:00
parent 8724801def
commit 572647d7c4
Signed by: thegeneralist01
SSH key fingerprint: SHA256:pp9qddbCNmVNoSjevdvQvM5z0DHN7LTa8qBMbcMq/R4
9 changed files with 194 additions and 11 deletions

View file

@ -5,14 +5,14 @@
{ config, pkgs, inputs, ... }:
{
imports = [ ./hardware-configuration.nix ./site.nix ./cache ];
imports = [ ./hardware-configuration.nix ./site.nix ./cache ./garage.nix ./archive ];
age.secrets.password.file = ./password.age;
users.users = {
thegeneralist = {
isNormalUser = true;
description = "thegeneralist";
extraGroups = [ "wheel" "audio" "video" "input" "scanner" ];
extraGroups = [ "wheel" "audio" "video" "input" "scanner" "docker" ];
shell = pkgs.zsh;
home = "/home/thegeneralist";
hashedPasswordFile = config.age.secrets.password.path;