kariru: init traefik

hosts/kariru/services/default.nix

@@ -1,4 +1,7 @@
 _: {
+  imports = [
+    ./traefik.nix
+  ];
   services.radarr = {
     enable = true;
     openFirewall = true;

hosts/kariru/services/traefik.nix

@@ -0,0 +1,56 @@
+_: {
+  networking.firewall.allowedTCPPorts = [80 443];
+  services.traefik = {
+    enable = true;
+    dynamicConfigOptions = {
+      http = {
+        routers = {
+          api = {
+            rule = "PathPrefix(`/api/`)";
+            entryPoints = ["websecure"];
+            service = "api@internal";
+          };
+          sonarr = {
+            rule = "Host(`sonarr.home.arpa`)";
+            entryPoints = ["web"];
+            service = "sonarr";
+          };
+          radarr = {
+            rule = "Host(`radarr.home.arpa`)";
+            entryPoints = ["web"];
+            service = "radarr";
+          };
+          prowlarr = {
+            rule = "Host(`prowlarr.home.arpa`)";
+            entrypoints = ["web"];
+            service = "prowlarr";
+          };
+        };
+        services = {
+          sonarr.loadBalancer.servers = [{url = "http://localhost:8989";}];
+          radarr.loadBalancer.servers = [{url = "http://localhost:7878";}];
+          prowlarr.loadBalancer.servers = [{url = "http://localhost:9696";}];
+        };
+      };
+    };
+    staticConfigOptions = {
+      log.level = "DEBUG";
+      api.dashboard = false;
+      api.insecure = false;
+      global = {
+        checkNewVersion = false;
+        sendAnonymousUsage = false;
+      };
+      entryPoints = {
+        websecure = {
+          address = ":443";
+          forwardedHeaders.insecure = true;
+        };
+        web = {
+          address = ":80";
+          forwardedHeaders.insecure = true;
+        };
+      };
+    };
+  };
+}