move some services from dead hypervisor to workstation

machines/AMD-Workstation/default.nix

@@ -20,6 +20,25 @@
     customProfiles.ollama
     customProfiles.ccache
 
+    customProfiles.acme
+    customProfiles.media-stack
+    customProfiles.tinyproxy
+    ./nginx.nix
+    ../Home-Hypervisor/usb-hdd.nix
+  ];
+
+  networking.extraHosts = ''
+    127.0.0.1 jackett.ataraxiadev.com
+    127.0.0.1 jellyfin.ataraxiadev.com
+    127.0.0.1 kavita.ataraxiadev.com
+    127.0.0.1 lidarr.ataraxiadev.com
+    127.0.0.1 medusa.ataraxiadev.com
+    127.0.0.1 qbit.ataraxiadev.com
+    127.0.0.1 radarr.ataraxiadev.com
+    127.0.0.1 recyclarr.ataraxiadev.com
+    127.0.0.1 sonarr.ataraxiadev.com
+  '';
+
   security.pki.certificateFiles = [ ../../misc/mitmproxy-ca-cert.pem ];
 
   virtualisation.libvirt.guests = {

machines/AMD-Workstation/nginx.nix

@@ -0,0 +1,68 @@
+{ ... }:
+{
+  services.nginx = {
+    enable = true;
+    group = "acme";
+    recommendedBrotliSettings = true;
+    recommendedGzipSettings = true;
+    recommendedOptimisation = true;
+    recommendedTlsSettings = true;
+    recommendedZstdSettings = true;
+    clientMaxBodySize = "250m";
+    commonHttpConfig = ''
+      proxy_hide_header X-Frame-Options;
+    '';
+    virtualHosts = let
+      default = {
+        useACMEHost = "ataraxiadev.com";
+        enableACME = false;
+        forceSSL = true;
+      };
+      proxySettings = ''
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header X-Forwarded-Host $host;
+        proxy_set_header X-Forwarded-Server $host;
+      '';
+    in {
+      "media-stack" = {
+        serverAliases = [
+          "jellyfin.ataraxiadev.com"
+          "qbit.ataraxiadev.com"
+          "prowlarr.ataraxiadev.com"
+          "jackett.ataraxiadev.com"
+          "sonarr.ataraxiadev.com"
+          "radarr.ataraxiadev.com"
+          "lidarr.ataraxiadev.com"
+          "kavita.ataraxiadev.com"
+        ];
+        locations."/" = {
+          proxyPass = "http://127.0.0.1:8180";
+          proxyWebsockets = true;
+          extraConfig = ''
+            proxy_buffer_size 128k;
+            proxy_buffers 4 256k;
+            proxy_busy_buffers_size 256k;
+            send_timeout 15m;
+            proxy_connect_timeout 600;
+            proxy_send_timeout 600;
+            proxy_read_timeout 15m;
+          '' + proxySettings;
+        };
+      } // default;
+      "medusa.ataraxiadev.com" = {
+        locations."/" = {
+          proxyPass = "http://127.0.0.1:8180";
+          proxyWebsockets = true;
+          extraConfig = ''
+            add_header Content-Security-Policy "upgrade-insecure-requests";
+          '' + proxySettings;
+        };
+      } // default;
+    };
+  };
+
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
+}