Add Genesis

2023-08-18 20:47:44 -05:00
parent 9c22f7414c
commit 64834c6f83
8 changed files with 355 additions and 1 deletions
@@ -0,0 +1,75 @@
+{ ... }:
+
+{
+	greg.tailscale.enable = true;
+
+	networking = {
+		# This value is deprecated, you now set it per interface
+		useDHCP = false;
+		defaultGateway = "10.42.1.1";
+		# 100.100.100.100 is the tailscale DNS
+		nameservers = [ "100.100.100.100" "127.0.0.1" ];
+		interfaces = {
+			eth0.ipv4.addresses = [ {
+				address = "10.42.1.2";
+				prefixLength = 16;
+			} ];
+			wlan0.useDHCP = true;
+
+			vlan66.ipv4.addresses = [ {
+				address = "192.168.66.2";
+				prefixLength = 24;
+			} ];
+		};
+
+		vlans = {
+			vlan66 = {
+				id = 66;
+				interface = "eth0";
+			};
+		};
+	};
+
+	# Open ports in the firewall.
+	# networking.firewall.allowedTCPPorts = [ ... ];
+	# networking.firewall.allowedUDPPorts = [ ... ];
+	# Or disable the firewall altogether.
+	# networking.firewall.enable = false;
+
+	fileSystems."/media" = {
+		device = "10.42.1.4:/volume1/video/";
+		fsType = "nfs";
+		options = [ "ro" ];
+	};
+
+	services.jellyfin = {
+		enable = true;
+		openFirewall = true;
+	};
+
+	greg.proxies."jellyfin.thehellings.lan".target = "http://localhost:8096";
+	greg.proxies."jellyfin.me.ts".target = "http://localhost:8096";
+
+	#########
+	# Blind service proxy behind the walls of the VPN
+	########
+	services._3proxy = {
+		enable = true;
+		services = [ {
+			type = "socks";
+			auth = [ "strong" ];
+			bindPort = 3128;
+			acl = [ {
+				rule = "allow";
+				users = [ "greg" ];
+			} ];
+		} ];
+		usersFile = "/run/agenix/3proxy";
+		denyPrivate = false;
+	};
+	age.secrets."3proxy" = {
+		file = ../../secrets/3proxy.age;
+		mode = "777";
+	};
+	networking.firewall.allowedTCPPorts = [ 3128 ];
+}