tmp

hosts/nas/impermanence.nix

@@ -17,6 +17,10 @@
         group = "authentik";
         mode = "u=rwx,g=,o=";
       }
+      {
+        directory = "/var/lib/private";
+        mode = "u=rwx,g=rx,o=";
+      }
       {
         directory = "/var/lib/colord";
         user = "colord";

hosts/nas/services.nix

@@ -6,6 +6,24 @@ in
   # Services configs
   services = {
 
+    caddy = {
+      enable = false;
+      email = "jalle008@proton.me";
+      enableReload = true;
+      user = "nix-apps";
+      group = "jallen-nas";
+      dataDir = "/media/nas/ssd/nix-app-data/caddy";
+
+      virtualHosts = {
+        "authentik.mjallen.dev".extraConfig = ''
+          reverse_proxy http://10.0.1.18:9000
+        '';
+        "jellyfin.mjallen.dev".extraConfig = ''
+          reverse_proxy http://10.0.1.18:8096
+        '';
+      };
+    };
+
     minecraft-server = {
       enable = true;
       eula = true;
@@ -135,6 +153,7 @@ in
         "--advertise-exit-node"
         "--accept-dns=false"
         "--advertise-routes=10.0.1.0/24"
+        "--hostname=jallen-nas"
       ];
       extraSetFlags = [
         "--advertise-exit-node"