Home: Add Tandoor.

host/x86_64-linux/home/Bind.nix

@@ -22,6 +22,7 @@ let
     (mkBind "privatebin" "/var/lib/privatebin")
     (mkBind "rabbitmq" "/var/lib/rabbitmq")
     (mkBind "sieve" "/var/sieve")
+    (mkBind "tandoor" "/var/lib/tandoor-recipes")
     (mkBind "terraria" "/var/lib/terraria")
     (mkBind "uptime_kuma" "/var/lib/uptime-kuma")
     (mkBind "vaultwarden" "/var/lib/vaultwarden")

host/x86_64-linux/home/Tandoor.nix

@@ -0,0 +1,7 @@
+{ ... }: {
+  services.tandoor-recipes = {
+    enable = true;
+    address = "[::1]";
+    port = 33122;
+  };
+}

host/x86_64-linux/home/nginx/Tandoor.nix

@@ -0,0 +1,20 @@
+{ ... }:
+{
+  "craft.voronind.com".extraConfig = ''
+    listen 443 ssl;
+
+    location / {
+      allow 10.0.0.0/8;
+      allow fd09:8d46:b26::/48;
+      deny all;
+
+      proxy_pass http://[::1]:33122$request_uri;
+    }
+
+    ssl_certificate /etc/letsencrypt/live/voronind.com/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/voronind.com/privkey.pem;
+    include /etc/letsencrypt/conf/options-ssl-nginx.conf;
+    ssl_dhparam /etc/letsencrypt/conf/ssl-dhparams.pem;
+  '';
+}
+

package/homer/Config.nix

@@ -6,6 +6,7 @@ let
     (mkGroup "App" "fa-server" [
       (mkLink "Change" "fa-user-secret" "https://change.voronind.com")
       (mkLink "Cloud" "fa-cloud" "https://cloud.voronind.com")
+      (mkLink "Craft" "fa-pen-ruler" "https://craft.voronind.com")
       (mkLink "Download" "fa-download" "https://download.voronind.com")
       (mkLink "Git" "fab fa-git-alt" "https://git.voronind.com")
       (mkLink "Iot" "fa-home" "https://iot.voronind.com")