added rss downloader

hosts/nixserve/default.nix

@@ -49,6 +49,7 @@
 
   networking.firewall.allowedTCPPorts = [ 80 443 /* HTTP */ 111 2049 4000 4001 4002 20048 /* NFS */ 3923 /* copyparty */ ];
   networking.firewall.allowedUDPPorts = [ 111 2049 4000 4001 4002 20048 /* NFS */ ];
+  networking.firewall.trustedInterfaces = [ "tailscale0" ];
 
   programs.zsh.enable = true;
   security.polkit.enable = true;

hosts/nixserve/health.nix

@@ -8,7 +8,7 @@ let
     bad()    { echo -e "  ''${R}✗''${N} $*"; }
     section(){ echo -e "\n''${W}''${B}$*''${N}"; }
 
-    echo -e "''${W}nixserve''${N} — $(date '+%Y-%m-%d %H:%M')  uptime: $(uptime -p | sed 's/up //')  load: $(cut -d' ' -f1-3 /proc/loadavg)"
+    echo -e "''${W}nixserve''${N} — $(date '+%Y-%m-%d %H:%M')  uptime: $(uptime | sed 's/.*up //; s/,.*//')  load: $(cut -d' ' -f1-3 /proc/loadavg)"
 
     # ── ZFS ────────────────────────────────────────────────────────────────────
     section "ZFS"

hosts/nixserve/rssdownloader.nix

@@ -0,0 +1,7 @@
+{ pkgs, src }:
+pkgs.buildGoModule {
+  pname = "rssdownloader";
+  version = "0.1.0";
+  inherit src;
+  vendorHash = null;
+}

hosts/nixserve/services.nix

@@ -1,6 +1,8 @@
-{ pkgs, ... }:
+{ pkgs, rssdownloader-src, ... }:
 
 let
+  rssdownloader = pkgs.callPackage ./rssdownloader.nix { src = rssdownloader-src; };
+
   proxyVhost = { upstream, websockets ? true, maxBodySize ? "1g" }: {
     forceSSL = true;
     enableACME = true;
@@ -41,7 +43,8 @@ in
     lockdPort = 4001;
     mountdPort = 4002;
     exports = ''
-      /media  192.168.50.0/24(rw,sync,no_subtree_check,all_squash,anonuid=1000,anongid=1000,fsid=0)
+      /media  192.168.50.0/24(rw,sync,no_subtree_check,all_squash,anonuid=1000,anongid=1000,fsid=0,insecure)
+      /media  100.64.0.0/10(rw,sync,no_subtree_check,all_squash,anonuid=1000,anongid=1000,fsid=0,insecure)
     '';
   };
 
@@ -107,6 +110,19 @@ in
     };
   };
 
+  systemd.services.rssdownloader = {
+    description = "RSS Torrent Downloader";
+    after = [ "network.target" ];
+    wantedBy = [ "multi-user.target" ];
+    path = [ pkgs.transmission_4 ];
+    serviceConfig = {
+      Type = "simple";
+      ExecStart = "${rssdownloader}/bin/rssdownloader -config /home/ulve/code/rssdownloader/config.json";
+      Restart = "on-failure";
+      User = "ulve";
+    };
+  };
+
   systemd.services.transmission = dockerService {
     name = "transmission";
     description = "Transmission via Mullvad VPN";