feat: Added sunshine

This commit is contained in:
uttarayan21
2025-02-04 03:01:46 +05:30
parent 3b2c51d045
commit e50d4aeee1
4 changed files with 55 additions and 3 deletions

View File

@@ -35,6 +35,10 @@
domain = "darksailor.dev";
policy = "one_factor";
}
{
domain = "cloud.darksailor.dev";
policy = "one_factor";
}
{
domain = "code.darksailor.dev";
policy = "one_factor";

View File

@@ -2,6 +2,7 @@
imports = [
./atuin.nix
./authelia.nix
./seafile.nix
# ./home-assistant.nix
# ./navidrome.nix
# ./llama.nix

View File

@@ -0,0 +1,47 @@
{config, ...}: {
# sops = {
# # secrets."nextcloud/adminpass".owner = config.users.users..name;
# };
services = {
seafile = {
enable = false;
adminEmail = "admin@uttarayan.me";
initialAdminPassword = "foobar";
seafileSettings = {
fileserver.host = "unix:/run/seafile/server.sock";
};
seahubExtraConf =
/*
python
*/
''
ENABLE_REMOTE_USER_AUTHENTICATION = True
# Optional, HTTP header, which is configured in your web server conf file,
# used for Seafile to get user's unique id, default value is 'HTTP_REMOTE_USER'.
REMOTE_USER_HEADER = 'HTTP_REMOTE_USER'
# Optional, when the value of HTTP_REMOTE_USER is not a valid email address
# Seafile will build a email-like unique id from the value of 'REMOTE_USER_HEADER'
# and this domain, e.g. user1@example.com.
REMOTE_USER_DOMAIN = 'uttarayan.me'
# Optional, whether to create new user in Seafile system, default value is True.
# If this setting is disabled, users doesn't preexist in the Seafile DB cannot login.
# The admin has to first import the users from external systems like LDAP.
REMOTE_USER_CREATE_UNKNOWN_USER = True
# Optional, whether to activate new user in Seafile system, default value is True.
# If this setting is disabled, user will be unable to login by default.
# the administrator needs to manually activate this user.
REMOTE_USER_ACTIVATE_USER_AFTER_CREATION = True
'';
};
caddy = {
virtualHosts."cloud.darksailor.dev".extraConfig = ''
forward_auth localhost:5555 {
uri /api/authz/forward-auth
copy_headers Remote-User Remote-Groups Remote-Email Remote-Name
}
reverse_proxy unix//run/seafile/server.sock
'';
};
};
}

View File

@@ -5,7 +5,7 @@
];
services.sunshine = {
enable = false;
enable = true;
openFirewall = true;
capSysAdmin = true;
autoStart = true;
@@ -20,7 +20,7 @@
name = "Steam Big Picture";
icon = "steam";
# detached = ["setsid steam steam://open/gamepadui"];
detached = ["${pkgs.util-linux}/bin/setsid ${pkgs.steam}/bin/steam steam://open/gamepadui"];
detached = ["/run/wrappers/bin/sudo -u servius ${pkgs.util-linux}/bin/setsid ${pkgs.steam}/bin/steam steam://open/gamepadui"];
exclude-global-prep-cmd = "false";
auto-detach = "true";
}
@@ -31,7 +31,7 @@
exclude-global-prep-cmd = "false";
prep-cmd = [];
# detached = ["setsid steam steam://rungameid/1086940"];
detached = ["${pkgs.util-linux}/bin/setsid ${pkgs.steam}/bin/steam steam://rungameid/1086940"];
detached = ["/run/wrappers/bin/sudo -u servius ${pkgs.util-linux}/bin/setsid ${pkgs.steam}/bin/steam steam://rungameid/1086940"];
wait-all = true;
exit-timeout = 5;
}