sora: init working neko config

hosts/sora/services/neko.nix

@@ -0,0 +1,23 @@
+{config, ...}: {
+  sops.secrets.neko-admin = {};
+  networking.firewall.allowedTCPPorts = [8085];
+  networking.firewall.allowedUDPPorts = [52000 52100];
+  virtualisation.oci-containers.containers.neko = {
+    image = "m1k1o/neko:firefox";
+    ports = [
+      "8085:8080"
+      "52000-52100:52000-52100/udp"
+    ];
+    environment = {
+      NEKO_SCREEN = "1600x900@60";
+      NEKO_PASSWORD = "forsen";
+      NEKO_EPR = "52000-52100";
+      NEKO_NAT1TO1 = "5.161.102.107";
+      NEKO_CONTROL_PROTECTION = "true";
+      NEKO_VIDEO_CODEC = "vp8";
+    };
+    environmentFiles = [
+      /run/secrets/neko-admin
+    ];
+  };
+}

hosts/sora/services/traefik.nix

@@ -189,6 +189,19 @@
             tls.domains = [{main = "*.flake.sh";}];
             tls.certresolver = "production";
           };
+          neko-insecure = {
+            rule = "Host(`neko.flake.sh`)";
+            entrypoints = ["web"];
+            service = "neko";
+            middlewares = "redirect-to-https";
+          };
+          neko = {
+            rule = "Host(`neko.flake.sh`)";
+            entrypoints = ["websecure"];
+            service = "neko";
+            tls.domains = [{main = "*.flake.sh";}];
+            tls.certresolver = "production";
+          };
         };
         services = {
           gitssh.loadBalancer.servers = [{url = "tcp://100.121.201.47:2222";}];
@@ -203,6 +216,7 @@
           hedgedoc.loadBalancer.servers = [{url = "http://100.121.201.47:3300";}];
           vaultwarden.loadBalancer.servers = [{url = "http://100.121.201.47:8222";}];
           searxng.loadBalancer.servers = [{url = "http://100.121.201.47:8100";}];
+          neko.loadBalancer.servers = [{url = "http://100.104.42.96:8085";}];
         };
       };
     };