tsuki: set up invidious

hosts/tsuki/configuration.nix

@@ -9,6 +9,7 @@
     ./services/headscale.nix
     ./services/hedgedoc.nix
     ./services/hydra.nix
+    ./services/invidious.nix
     # ./services/jitsi.nix
     ./services/jupyter.nix
     ./services/kanidm.nix

hosts/tsuki/services/invidious.nix

@@ -0,0 +1,25 @@
+{ config, ... }:
+{
+  sops.secrets."postgres/invidious" = {
+    restartUnits = [ "invidious.service" ];
+  };
+
+  services.invidious = {
+    enable = true;
+    domain = "yt.nani.wtf";
+
+    port = 19283;
+
+    database = {
+      createLocally = true;
+      passwordFile = config.sops.secrets."postgres/invidious".path;
+    };
+
+    settings = {
+      registration_enabled = false;
+
+      # popular_enabled = false;
+    };
+  };
+}
+

hosts/tsuki/services/nginx/default.nix

@@ -117,6 +117,7 @@
       })
       (proxy ["docs"] "http://localhost:${s config.services.hedgedoc.settings.port}" {})
       (proxy ["map"] "http://localhost:${s ports.minecraft.dynmap}" {})
+      (proxy ["yt"] "http://localhost:${s config.services.invidious.port}" {})
       (proxy ["osu"] "http://localhost:${s ports.osuchan}" {})
       (proxy ["auth"] "https://localhost:8300" {
         extraConfig = ''