hoarder: proxy to omo from gum

2configs/deployment/hoarder-proxy.nix

@@ -0,0 +1,19 @@
+{config, ... }:
+let
+  port = 3011;
+in
+{
+  services.nginx = {
+    enable = lib.mkDefault true;
+    virtualHosts."bookmark.euer.krebsco.de" = {
+      useACMEHost = "euer.krebsco.de";
+      # enableACME = true;
+      forceSSL = true;
+      locations."/" = {
+        proxyPass = "http://omo.w:${toString port}";
+        proxyWebsockets = true;
+      };
+    };
+  };
+
+}

2configs/home/hoarder/default.nix

@@ -4,9 +4,7 @@ let
   port = 3011;
 in
 {
-
-  networking.firewall.allowedTCPPorts = [ port ];
-  # TODO: nginx
+  # nginx proxy config is stored under deployment/hoarder-proxy
   sops.secrets.hoarder-app = {};
   # Runtime
   virtualisation.podman = {
@@ -54,7 +52,7 @@ in
   };
   virtualisation.oci-containers.containers."hoarder-meilisearch" = {
     image = "getmeili/meilisearch:v1.11.1";
-    environmentFile = config.sops.secrets.hoarder-app.path;
+    environmentFiles = [ config.sops.secrets.hoarder-app.path ];
     environment = {
       "HOARDER_VERSION" = "release";
       "MEILI_NO_ANALYTICS" = "true";
@@ -90,7 +88,7 @@ in
   };
   virtualisation.oci-containers.containers."hoarder-web" = {
     image = "ghcr.io/hoarder-app/hoarder:release";
-    environmentFile = config.sops.secrets.hoarder-app.path;
+    environmentFiles = [ config.sops.secrets.hoarder-app.path ];
     environment = {
       "BROWSER_WEB_URL" = "http://chrome:9222";
       "DATA_DIR" = "/data";
@@ -102,7 +100,7 @@ in
       "hoarder_data:/data:rw"
     ];
     ports = [
-      "${port}:3000/tcp"
+      "${toString port}:3000/tcp"
     ];
     log-driver = "journald";
     extraOptions = [

machines/gum/config.nix

@@ -201,7 +201,7 @@ in {
 
       ../../2configs/deployment/wiki.euer.nix
 
-      # ../../2configs/shiori.nix
+      ../../2configs/deployment/hoarder-proxy.nix
       #../../2configs/workadventure
 
       ../../2configs/bgt/download.binaergewitter.de.nix

machines/omo/config.nix

@@ -135,6 +135,7 @@ in {
       ../../2configs/home/streams.nix
       ../../2configs/home/esphome.nix
       ../../2configs/home/audio-dl.nix
+      ../../2configs/home/hoarder
       {
         makefu.ps3netsrv = {
           enable = true;