all repos — nixfiles @ 9d93116a070cfd02c575bd26ac4e0c985c0be93a

System and user configuration, managed by nix and home-manager

video-library: enable running on local network

Alin
commit

9d93116a070cfd02c575bd26ac4e0c985c0be93a

parent

24f11cbc065cd6346b6edeeee91030a21c74822d

1 file changed, 23 insertions(+), 5 deletions(-)

changed files
M system/roles/video-library.nix → system/roles/video-library.nix
@@ -1,23 +1,41 @@
 {
   config,
+  lib,
   ...
 }:
+let
+  inherit (config.networking) domain fqdn;
+  inherit (import ../../data) homenet pubnet;
+in
 {
   services.jellyfin = {
     enable = true;
   };
 
   services.caddy.virtualHosts = {
-    "jf.${config.networking.domain}" = {
+    "jf.${domain}" = {
       extraConfig = ''
+        ${lib.optionalString (domain == homenet) ''
+          tls {
+            issuer internal {
+              ca home
+            }
+          }
+        ''}
         reverse_proxy localhost:8096
       '';
     };
   };
 
-  fileSystems."/srv/video" = {
-    device = "172.16.129.30:/nas/6567/video";
-    fsType = "nfs";
-    options = [ "nofail" ];
+  services.dnsmasq.settings.cname = [
+    "jf.${domain},${fqdn}"
+  ];
+
+  fileSystems = lib.mkIf (domain == pubnet) {
+    "/srv/video" = {
+      device = "172.16.129.30:/nas/6567/video";
+      fsType = "nfs";
+      options = [ "nofail" ];
+    };
   };
 }