diff --git a/dns/dnsconfig.js b/dns/dnsconfig.js index 2d9ff1a1..21fae484 100644 --- a/dns/dnsconfig.js +++ b/dns/dnsconfig.js @@ -40,7 +40,8 @@ D('sealight.xyz', REG_NONE, DnsProvider(DNS_HEDNS), A('bin', '69.61.2.203', TTL(300)), A('ci', '69.61.2.203', TTL(300)), A('write', '69.61.2.203', TTL(300)), - // vultr -> nulled: lituus + A('photos', '69.61.2.203', TTL(300)), + // vultr: lituus A('@', '45.77.48.108', TTL(300)), A('jitsi', '45.77.48.108', TTL(300)), A('chat', '45.77.48.108', TTL(300)), diff --git a/hosts/box/default.nix b/hosts/box/default.nix index 87a7c714..af1ea004 100644 --- a/hosts/box/default.nix +++ b/hosts/box/default.nix @@ -50,6 +50,8 @@ # "/home/anish/usr/nonfiction" # syncthing "/home/anish/usr/finance" # beancount "/mnt/two/postgres" # sealight postgres backups TODO remove once moved to capsul + "/mnt/two/photos" + "/mnt/two/music" ]; # seafile }; diff --git a/hosts/helix/default.nix b/hosts/helix/default.nix index 2de21dda..62bf1836 100644 --- a/hosts/helix/default.nix +++ b/hosts/helix/default.nix @@ -31,20 +31,20 @@ }; # Reverse proxy for immich - services.nginx.virtualHosts."photos.sealight.xyz" = { - enableACME = true; - forceSSL = true; + # services.nginx.virtualHosts."photos.sealight.xyz" = { + # enableACME = true; + # forceSSL = true; - locations."/" = { - extraConfig = '' - proxy_pass http://10.0.69.4:8567; - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Proto $scheme; - ''; - }; - }; + # locations."/" = { + # extraConfig = '' + # proxy_pass http://10.0.69.4:8567; + # proxy_set_header Host $host; + # proxy_set_header X-Real-IP $remote_addr; + # proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + # proxy_set_header X-Forwarded-Proto $scheme; + # ''; + # }; + # }; services.postgresql.package = pkgs.postgresql_15; services.postgresqlBackup = { diff --git a/hosts/profiles/immich/default.nix b/hosts/profiles/immich/default.nix index 7cfba5b6..c94c8b65 100644 --- a/hosts/profiles/immich/default.nix +++ b/hosts/profiles/immich/default.nix @@ -1,4 +1,4 @@ -{ ... }: +{ pkgs, config, ... }: { services.immich = { enable = true; @@ -7,16 +7,23 @@ }; host = "0.0.0.0"; port = 8567; - mediaLocation = "/data/photos"; - externalDomain = "https://photos.sealight.xyz"; + mediaLocation = "/mnt/two/photos"; + openFirewall = true; + settings.server.externalDomain = "https://photos.sealight.xyz"; }; services.nginx.virtualHosts."photos.mossnet.lan" = { enableACME = false; forceSSL = false; locations."/" = { + proxyPass = "http://127.0.0.1:${toString config.services.immich.port}"; + proxyWebsockets = true; + recommendedProxySettings = true; extraConfig = '' - proxy_pass http://127.0.0.1:8567/; + client_max_body_size 50000M; + proxy_read_timeout 600s; + proxy_send_timeout 600s; + send_timeout 600s; ''; }; };