(refactor): preparing new hosts

features/server/default.nix

@@ -0,0 +1,33 @@
+{ config, pkgs, ... }:
+{
+  imports = [
+    ./containers/default.nix
+    ./multimedia/default.nix
+    ./databases/default.nix
+    ./services/default.nix
+    ./backups.nix
+    ./caddy.nix
+    ./prometheus.nix
+    ./samba-shares.nix
+    ./ssh.nix
+    ./tailscale.nix
+  ];
+
+  environment.systemPackages = with pkgs; [
+    jellyfin
+    jellyfin-web
+    jellyfin-ffmpeg
+    transmission
+    sonarr
+    radarr
+    prowlarr
+    readarr
+    jellyseerr
+    homepage-dashboard
+    slskd
+    bazarr
+    ethtool
+    networkd-dispatcher
+    transcrypt
+  ];
+}

features/server/fail2ban.nix

@@ -0,0 +1,9 @@
+{ config, ... }:
+{
+  services.fail2ban = {
+    enable = true;
+    ignoreIP = [ "192.168.1.0/24" ];
+    extraPackages = [ ];
+    jails = { };
+  };
+}

features/server/multimedia/default.nix

@@ -4,5 +4,6 @@
     ./calibre-web.nix
     ./slskd.nix
     ./transmission.nix
+    ./jellyfin.nix
   ];
 }

features/server/multimedia/jellyfin.nix

@@ -0,0 +1,7 @@
+{ config, ... }:
+{
+  services.jellyfin = {
+    enable = true;
+    openFirewall = true;
+  };
+}

features/server/tailscale.nix

@@ -4,4 +4,14 @@
     enable = true;
     useRoutingFeatures = "server";
   };
+
+  services.networkd-dispatcher = {
+    enable = true;
+    rules."50-tailscale" = {
+      onState = [ "routable" ];
+      script = ''
+        ${pkgs.ethtool}/bin/ethtool -K ens18 rx-udp-gro-forwarding on rx-gro-list off
+      '';
+    };
+  };
 }