diff --git a/hosts/tsuki/services/invidious.nix b/hosts/tsuki/services/invidious.nix index cba8908..56ddeaf 100644 --- a/hosts/tsuki/services/invidious.nix +++ b/hosts/tsuki/services/invidious.nix @@ -1,5 +1,6 @@ -{ config, ... }: -{ +{ config, ... }: let + cfg = config.services.invidious; +in { sops.secrets."postgres/invidious" = { restartUnits = [ "invidious.service" ]; }; @@ -22,5 +23,12 @@ # popular_enabled = false; }; }; + + local.socketActivation.invidious = { + enable = cfg.enable; + originalSocketAddress = "${cfg.settings.host_binding}:${toString cfg.port}"; + newSocketAddress = "/run/invidious.sock"; + privateNamespace = false; + }; } diff --git a/hosts/tsuki/services/nginx/default.nix b/hosts/tsuki/services/nginx/default.nix index add2090..72acfba 100644 --- a/hosts/tsuki/services/nginx/default.nix +++ b/hosts/tsuki/services/nginx/default.nix @@ -49,7 +49,7 @@ "hedgedoc".servers."unix:${srv.hedgedoc.settings.path}" = { }; "hydra".servers."localhost:${s srv.hydra.port}" = { }; "idrac".servers."${ips.idrac}" = { }; - "invidious".servers."localhost:${s config.services.invidious.port}" = { }; + "invidious".servers."unix:${sa.invidious.newSocketAddress}" = { }; "jupyter".servers."unix:${sa.jupyter.newSocketAddress}" = { }; "kanidm".servers."localhost:8300" = { }; "navidrome".servers."unix:${sa.navidrome.newSocketAddress}" = { };