Personal-use NixOS configuration
Create HTTP proxy for rtorrent RPC
+23
-5
+23
-5
packages/server/sharing/rtorrent.nix
+23
-5
packages/server/sharing/rtorrent.nix
···
58
58
'';
59
59
};
60
60
61
-
# Required override for linux-hardened kernel
62
-
systemd.services.rtorrent.serviceConfig = {
63
-
SystemCallFilter = lib.mkForce "@system-service";
64
-
};
65
-
66
61
networking.firewall = lib.mkIf openFirewall {
67
62
allowedTCPPortRanges = [ listenPortRange ];
68
63
allowedUDPPortRanges = [ listenPortRange ];
69
64
};
70
65
66
+
# Required override for linux-hardened kernel
67
+
systemd.services.rtorrent.serviceConfig = {
68
+
SystemCallFilter = lib.mkForce "@system-service";
69
+
};
70
+
71
71
# Add Flood to the rtorrent group for file management
72
72
systemd.services.flood.serviceConfig.SupplementaryGroups = [ config.services.rtorrent.group ];
73
+
74
+
# Caddy reverse proxy configuration
75
+
users.users.caddy.extraGroups = [ config.services.rtorrent.group ];
76
+
77
+
services.caddy.virtualHosts.rtorrent = {
78
+
hostName = ":50000";
79
+
80
+
listenAddresses = [
81
+
"127.0.0.1"
82
+
"::1"
83
+
];
84
+
85
+
extraConfig = ''
86
+
reverse_proxy unix/${config.services.rtorrent.rpcSocket} {
87
+
transport scgi
88
+
}
89
+
'';
90
+
};
73
91
}