feat: gonic

Author: DieracDelta

custom_modules/comfyui.nix

@@ -28,6 +28,39 @@ in
       # extraArgs = [ "--lowvram" ];
       # environment = { };
     };
+    services.gonic = {
+      enable = true;
+      settings = {
+        music-path = [ "/var/lib/gonic/example_music" ];
+        listen-addr = "0.0.0.0:4747";
+        cache-path = "/var/cache/gonic";
+        podcast-path = "/var/lib/gonic/podcasts";
+        playlists-path = "/var/lib/gonic/playlists";
+        proxy-prefix = "/gonic";
+      };
+    };
+    systemd.services.gonic.serviceConfig = {
+      SupplementaryGroups = [ "users" ];
+      ProtectHome = lib.mkForce "read-only";
+      ReadWritePaths = [
+        "/var/cache/gonic"
+        "/var/lib/gonic"
+      ];
+      ProtectSystem = "full";
+      NoNewPrivileges = true;
+    };
+    # THIS DIDNT WORK AT ALL AND LOCKED ME TF OUT
+    # systemd.services.tailscaled-sidecar = {
+    #   description = "Temporary Tailscale sidecar for Apple Review";
+    #   after = [ "network.target" ];
+    #   wantedBy = [ "multi-user.target" ];
+    #   serviceConfig = {
+    #     # --tun=user runs in userspace (no conflict with your main tailscale0 interface)
+    #     # --socket and --statedir keep it isolated from your main config
+    #     ExecStart = "${pkgs.tailscale}/bin/tailscaled --statedir=/var/lib/tailscale/sidecar --socket=/run/tailscale/sidecar.socket --port=0 --tun=user";
+    #     Restart = "on-failure";
+    #   };
+    # };
 
   };
 

custom_modules/core_services.nix

@@ -124,6 +124,10 @@ in
             reverse_proxy 127.0.0.1:3000
           }
 
+          handle_path /gonic* {
+            reverse_proxy 127.0.0.1:4747
+          }
+
           handle_path /sunshine* {
             reverse_proxy https://127.0.0.1:48012 {
               transport http {
@@ -187,6 +191,13 @@ in
                 description = "Music Streamer";
               };
             }
+            {
+              "Gonic" = {
+                icon = "gonic";
+                href = "/gonic/";
+                description = "Subsonic Music Server";
+              };
+            }
             {
               "SearX" = {
                 icon = "searxng"; # or "searx"

custom_modules/workstation_services.nix

@@ -40,6 +40,8 @@ let
     gemini-cli
     crush
     pam-insults
+    nix-eval-jobs
+    nix-diff
     scrutiny
     scrutiny-collector
     ethtool