sora: init justlog

hosts/sakura/hardware-configuration.nix

@@ -16,6 +16,10 @@
     device = "/dev/disk/by-uuid/db3e4722-35a6-44fb-8e4d-a75166b845cb";
     fsType = "ext4";
   };
+  fileSystems."/home/notoh/justlog/logs" = {
+    device = "192.168.1.199:/mnt/Sutoreji/twitchlogs";
+    fsType = "nfs";
+  };
 
   swapDevices = [
     {device = "/dev/disk/by-uuid/c5afba13-f1af-4e7f-994b-f565c52d92fc";}

hosts/sakura/services/default.nix

@@ -9,5 +9,6 @@
     ./conduit.nix
     ./tailscale.nix
     ./searxng.nix
+    ./justlog.nix
   ];
 }

hosts/sakura/services/justlog.nix

@@ -0,0 +1,11 @@
+{...}: {
+  networking.firewall.allowedTCPPorts = [8025];
+  virtualisation.oci-containers.containers.justlog = {
+    image = "ghcr.io/gempir/justlog";
+    ports = ["8025:8025"];
+    volumes = [
+      "/home/notoh/justlog/config.json:/etc/justlog.json"
+      "/home/notoh/justlog/logs:/logs"
+    ];
+  };
+}

hosts/sora/services/traefik.nix

@@ -189,6 +189,19 @@
             tls.domains = [{main = "*.flake.sh";}];
             tls.certresolver = "production";
           };
+          justlog-insecure = {
+            rule = "Host(`logs.flake.sh`)";
+            entrypoints = ["web"];
+            service = "justlog";
+            middlewares = "redirect-to-https";
+          };
+          justlog = {
+            rule = "Host(`logs.flake.sh`)";
+            entrypoints = ["websecure"];
+            service = "justlog";
+            tls.domains = [{main = "*.flake.sh";}];
+            tls.certresolver = "production";
+          };
         };
         services = {
           gitssh.loadBalancer.servers = [{url = "tcp://100.121.201.47:2222";}];
@@ -204,6 +217,7 @@
           vaultwarden.loadBalancer.servers = [{url = "http://100.121.201.47:8222";}];
           searxng.loadBalancer.servers = [{url = "http://100.121.201.47:8100";}];
           neko.loadBalancer.servers = [{url = "http://100.104.42.96:8085";}];
+          justlog.loadBalancer.servers = [{url = "http://100.121.201.47:8025";}];
         };
       };
     };