M hosts/ivy/services/default.nix → hosts/ivy/services/default.nix

@@ -2,7 +2,7 @@ {
   imports = [
     # ./at
     ./vaultwarden.nix
-    # ./immich.nix
-    # ./navidrome.nix
+    ./immich.nix
+    ./navidrome.nix
   ];
 }

A hosts/ivy/services/immich.nix

@@ -0,0 +1,20 @@
+{ config, ... }:
+{
+  services.immich = {
+    enable = true;
+    secretsFile = "/var/secrets/immich";
+    port = config.svports.immich;
+    settings = {
+      server = {
+        externalDomain = "https://immich.vt3e.cat";
+      };
+    };
+  };
+
+  services.caddy.virtualHosts."immich.vt3e.cat" = {
+    extraConfig = ''
+      encode zstd gzip
+      reverse_proxy localhost:8081
+    '';
+  };
+}

A hosts/ivy/services/navidrome.nix

@@ -0,0 +1,17 @@
+{ config, ... }:
+{
+  services.navidrome = {
+    enable = true;
+    settings = {
+      Port = config.svports.navidrome;
+      MusicFolder = "/srv/music";
+    };
+  };
+
+  services.caddy.virtualHosts."music.vt3e.cat" = {
+    extraConfig = ''
+      encode zstd gzip
+      reverse_proxy localhost:${toString config.svports.navidrome}
+    '';
+  };
+}