path: root/hosts/tahoe/services.nix

{ config, ... }:
let secrets = config.age.secrets;
in {
  my.services = {
    samba = {
      enable = true;
      publicShares = [ "/data/fast/music" "/data/fast/videos" ];
    };
    navidrome = {
      enable = true;
      musicFolder = "/data/fast/music";
    };
    unifi = { enable = true; };
    prometheus = { enable = true; };
    grafana = { enable = true; };
    gitea = {
      enable = true;
      stateDir = "/var/lib/gitea";
    };
    rclone = { enable = true; };
    traefik = { enable = false; };
    nginx = {
      enable = true;
      acme = { credentialsFile = secrets."acme/dns-key".path; };
      sso = {
        authKeyFile = secrets."sso/auth-key".path;
        users = {
          fcuny = {
            passwordHashFile = secrets."sso/fcuny/password-hash".path;
          };
        };
        groups = { root = [ "fcuny" ]; };
      };
    };
    transmission = { enable = true; };
    metrics-exporter = { enable = true; };
    backup = {
      enable = true;
      repository = "/data/slow/backups/systems";
      timerConfig = { OnCalendar = "00:15"; };
      passwordFile = secrets."restic/repo-systems".path;
      paths = [ "/data/fast/music" "/data/fast/photos" "/data/fast/videos" ];
    };
  };
}