From 92dad289e9fd2429a7cdf1b35526d040dde3c52a Mon Sep 17 00:00:00 2001
From: Daniel Kempkens <daniel+git@kempkens.io>
Date: Thu, 20 Apr 2023 15:02:34 +0200
Subject: [PATCH] mediaserver: wip tubearchivist

---
 agenix/hosts/mediaserver/config.nix           |   8 ++++
 .../tubearchivist/environmentES.age           |   9 +++++
 .../tubearchivist/environmentTA.age           |   9 +++++
 container/tubearchivist/default.nix           |  38 ++++++++++++++++++
 secret/container/additional-media/default.nix | Bin 2502 -> 2500 bytes
 secrets.nix                                   |   4 ++
 system/hosts/mediaserver.nix                  |   1 +
 7 files changed, 69 insertions(+)
 create mode 100644 agenix/hosts/mediaserver/tubearchivist/environmentES.age
 create mode 100644 agenix/hosts/mediaserver/tubearchivist/environmentTA.age
 create mode 100644 container/tubearchivist/default.nix

diff --git a/agenix/hosts/mediaserver/config.nix b/agenix/hosts/mediaserver/config.nix
index 39f2edb..5196bcf 100644
--- a/agenix/hosts/mediaserver/config.nix
+++ b/agenix/hosts/mediaserver/config.nix
@@ -17,5 +17,13 @@
     wireguard-config = {
       file = ./wireguard/config.age;
     };
+
+    tubearchivist-environment-ta = {
+      file = ./tubearchivist/environmentTA.age;
+    };
+
+    tubearchivist-environment-es = {
+      file = ./tubearchivist/environmentES.age;
+    };
   };
 }
diff --git a/agenix/hosts/mediaserver/tubearchivist/environmentES.age b/agenix/hosts/mediaserver/tubearchivist/environmentES.age
new file mode 100644
index 0000000..1a96248
--- /dev/null
+++ b/agenix/hosts/mediaserver/tubearchivist/environmentES.age
@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 MtGp6g ieA0BUCb36AR1ElLDpVwymxSpZFLJk0Ky95oy8ArdHA
+IGJpaxn0ddD1OsVMK6zaMOOk4pnnp8nrQKeRQ0riBT8
+-> ssh-ed25519 Y94Yig ZLZDGMPbK6LHx2PzYIWSEBYKURRCvkJJL7fSBapnwQU
+/pASdlY8V1kxr5TUfAXkOPEIqTLlLyB4VY1BH9pHpoM
+-> q5kUUD^-grease
+3Ilo/+uADYf2hqTaXsQR1UtCV4YZosoOYnxjY1hrmssCHJY
+--- TPwvrGYvKfDME3WTFgyv9pOR7nOPHPCFylQzE4qV2kk
+\.��ꋶ�}�?�BG����6,ky�����$�宽O\-��A'��s&[8_f���{�5s'm��LZJV�|�R\�Ϳ�/��Dr@Xœ��!Q��4o���AS�������(�W
R��Q��>��`�c\� f��(٧6�Ǚ�a���������t܁�M$x���;�`b�O}�]�ą��	Iy��=Vk��|
\ No newline at end of file
diff --git a/agenix/hosts/mediaserver/tubearchivist/environmentTA.age b/agenix/hosts/mediaserver/tubearchivist/environmentTA.age
new file mode 100644
index 0000000..5574cd1
--- /dev/null
+++ b/agenix/hosts/mediaserver/tubearchivist/environmentTA.age
@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> ssh-ed25519 MtGp6g ursvuiyjKkXNcAPEn5iOK7Nsg1x+RJhAHdNwWB/1hho
+OdN5lEWaQgd+B/U6wKszQbDyp6MzepIq5xnsvJ/uiYQ
+-> ssh-ed25519 Y94Yig FCpPV0eILzRUfABR8vY1X48Tw+VBrBtPd9ZoGq/k2V4
+uS5pUgxD/5wwCFVH5UX6h4GRCvs7ajEqM9HUkgpiMVE
+-> ?`.}^-grease }s:[/Y+} 81$^9e 1 /'
+hyFuWow2oXRk+HRjPQJHQputCUFLWUxcOthm5aQ
+--- RTAPvC+ShrGZPxz9EEyeCOERlBtwkLSczpqz0s6k058
+�爸�4^%!�'�/�kF1x��)u�b?�'z,���jiN�@r�=:��}3��"�2h�n迄����v{=�����Ls&��M-y�<R�W�dzUc�!6��Ғ��+���A��m|Sc�M�}U4��}E�rv�ȹ�DS�`�A�7���^3�K�0z��/!3��W�V���a1]J�E����xZ�T@�����vl�[���u~;�U�ht}�[�;��F����
O~r�(2��/a�:�Q�[VS5{�s(,4{z�]7��[Rb��z�+d�Z�
\ No newline at end of file
diff --git a/container/tubearchivist/default.nix b/container/tubearchivist/default.nix
new file mode 100644
index 0000000..e1ebd6e
--- /dev/null
+++ b/container/tubearchivist/default.nix
@@ -0,0 +1,38 @@
+{ config, ... }:
+
+{
+  systemd.tmpfiles.rules = [
+    "d /var/lib/tubearchivist 0755 root root"
+    "d /var/lib/tubearchivist/redis 0755 root root"
+    "d /var/lib/tubearchivist/es 0755 root root"
+  ];
+
+  # virtualisation.oci-containers.containers = {
+  #   tubearchivist = {
+  #     image = "docker.io/bbilly1/tubearchivist:latest";
+  #     dependsOn = [ "archivist-es" "archivist-redis" ];
+  #     ports = [ "127.0.0.1:9887:8000" ];
+  #     environmentFiles = [ config.age.secrets.tubearchivist-environment-ta.path ];
+  #     volumes = [
+  #       "/mnt/media/YTDL/Downloads:/youtube"
+  #       "/mnt/media/YTDL/Cache:/cache"
+  #     ];
+  #   };
+  #
+  #   archivist-redis = {
+  #     image = "docker.io/redis/redis-stack-server:latest";
+  #     volumes = [
+  #       "/var/lib/tubearchivist/redis:/data"
+  #     ];
+  #   };
+  #
+  #   archivist-es = {
+  #     image = "docker.io/bbilly1/tubearchivist-es:latest";
+  #     environmentFiles = [ config.age.secrets.tubearchivist-environment-es.path ];
+  #     extraOptions = [ "--ulimit memlock=-1:-1" ];
+  #     volumes = [
+  #       "/var/lib/tubearchivist/es:/usr/share/elasticsearch/data"
+  #     ];
+  #   };
+  # };
+}
diff --git a/secret/container/additional-media/default.nix b/secret/container/additional-media/default.nix
index a7c8b912c34f0a08392b1ba8bebd3b334736e4e5..0a4793bda39c3c3a885838b3d807a1e8e5ed1d44 100644
GIT binary patch
literal 2500
zcmV;#2|M-xM@dveQdv+`0M9og;%fB~x0t*)_4q>0RlE{prcwAb^B=wl)<v2k2hR0d
z3Vz+R(^)EkHjaD}M{J^oa4Zk64s@$OIK5w1_Y8${5ZSDpt?A&iDmx6^&aN>6C&7=P
zzy4Q5(pb(Kl`%bp=C2SNmHW#qk3Y=`hpE}qW4^P=3><+}GBx(fing1h-?~q@M5|=a
z_fEPOydttm)Pu*bl?Ehm8=nw6qmcd{l<TA4-m=&gbH6`kxv?iCy|#}Pm$PoKl8=c8
z16*MT3bJCZ8_TO-skw?v^%!?G(-sT2laT-wv<MwAq+J(1@HY5CRD#MaF~6%W24dA5
zT-XxCSiJdcrbB3m5nR|^2?2IW+ahhFCPM3y9gligx)i=4b85tTduaDy@OoaxWdT~H
zE^Wh&V0*`*>MRMha@1@=aYBDTeDiKwf@FqC@0J@;nc~LVGy~pN=~+VpM__H;%b@;F
z%V)xw7*g%3XCd;Ba^b|U4B@G|bAluLsxUHl5T=EAh64GN9lDIaFmum2)9p1jYiKbS
zy~F~1#^6x*8Tsi6xG8x?Zjd;^%lCJ?;g>rUm!^g>#i`W9fdYD(qQw76?egF9z^x0?
zsfTeVVS!cX48bkCseXZh1MxWyJ0mkiSdbspmtxxdZtU@4Dpp52uo4g-6k5yrBPuZ?
zy$@M)#I->mqvf?jP*V$UWPiB8R97>PEs$6yxR>nue#it~4N2o_g4$~R&ddFYEOA@<
z3=@Hqf3ax^wK-VD3YyXJ)|@A;Q()?!Na|JxJgxZFVmmWTbca?F<GHgoLE-Y6jlrzw
zkfnacHf)SI3)rS76JWpk72xVIOA*<?R%Y{PzGa}@Ks4_;z0M{qE+xspOfrpU;$A*J
zm~pz7Y~*Bgff;76;oi5x4znpE0+WA1dX35(kOym>3C3&Y^h|-RkY=@Wh_<-TwTg$L
z;7c&+g@oU#7@YFO;C2l7H2B`_6N@@U9XaGErn-eLgNmO>>%l=rx-7prZqiGbpEIXL
zhIYFLXMt_Sz><QDugzIQQ?nW-SvfA{g(}4a5Yd3f`5e%eVr3i(p$1xp(x4@X@d*I}
zNY|Y5_Q_NtknL=6Z<A_Ly6M!@vM4c8Z(qVo4v^gkAVZfuT$70MH4l|4jM8i^57VeU
zfU3|g7b70}YELjez#K%ui#abRBc~ovElS39PNpTm)lhz{p$C|)n8-f~fh_MZ!?%!3
zhn-qw8ph5|gYsy;v6j7#e<qmkHO^g#4f}OmwbxPj><l&5!I&ftT-VEMff)8??#U8d
z4S8^Qk&{hA^qr!J;G{`UOe~B|(qr+Jw~qt~yJSLHcZ~3Fr}kXaEapFRyLt|02OA8K
z?#u(drP8bb2AS+E{HJWDxBHIfXYo>XHEdaKIj<v$+50IpOlyYb)HzzU(o#U!W-2CQ
z?9@~wP;l=t19}dgBVM<Dn&}o=RbEV<&O7eT$7DBb^yB4VuJcc|$Qq%ba2)zFg<|7h
zqSm5SPT>x!gQ$<C+JuLD?guL|!oy6?n9=xAI=<RBNXLucj;*%~h<OqnjWc~NreQor
zL#ub`0d!@a2oUB)g`d8lNv26NpkoZWujiIxv{08e+4n<338ug9>bHQ~%!OI<^D)WB
zOCEG5Rh+?_jJTk)bSB=}K0YSR$8*|V+2q%EP!ALA(?RX?<^EVg6^Rl?>v(Q7>}K`K
zU4adWC=4w;D|TKZapOx(UO4Rtvd96hbg$GS-~Y++9sc`zZ;xz7y7YgtQ6Z=LqP9s)
zE%g7QZ0X3Rq1WIi4ctKmD=i@+%ATA7JUECvfHjRse)-%i+(Ht7k`<eLRXF+sdy_k^
z6P=@x6Q);a=Uk=MwKoT_J_uCR!Znronh`UmtGZ0GFY|Rcmfpo65+1qt4?yU^7Y`D`
z5#iLoVavo79{Kz&(!tBy&V0{vO|<w2+b+g-$<f*@6+=>yeqVn7pV_oNh?^fFPlIO3
ztP#KY%rc_s5wnPWBNGL$*tRPb@O-($tA2p&6TPv6u>Ai=qkTYqa(qXC;WklHI2MZT
zorj98FST99(>gtP><asCTeTcx6qP<DA)<oJJVSrJ-@}#{W2+#nh24Wt#xD!ROLe}R
zm^7~{z;&(^o3e%6-{=@ABP=4+z~)_KEE31WIQAHB&H~~7oeMu7NvM+LkD-Q5SFK73
z0^I?Y+M*O?`Kt)!=BM+HRP9s9mMBzk!6(u0a6JHU?-I-HSbggkz-J6YO9oOnGOL4`
z*4}QZ7)2I<@d$P&VW<UJe(&w+pMt)cMvZMe@+<8syIIfCvvBaC$7Xno9MTDI6tn#F
z4E<|ofh7u(wq4y4%S3#aN!<TXs|i&nZ^{rHHQSU(2Ak3|uj=CoEYQ_JsGF@05F9hK
z-MTr$Vb+c;*3m2B&QyK8l)#^SP+coV9<U(mk5~9|jF$(Y&k1}$&ja3ul5XZwFUaEa
zLc4<(PP?%vh8_wm;LHkTUj8PdgoorNwjMW3PU9v{5b(fv4`%Pgy41L;xHg}tf^061
z$R35&7gy)(KDk5hKH$QDM$w<PX>2Tp=lX4ETrWYX?-fAgTyR?DdTIgMKh^>lED;iC
z$}~FQo>iS>Z&m0$RqBRx)$13+qm-Z425tmVty|AetdVQS`>w2s@HlU?#8M1d<hjk0
z${v(74tBZ=n{2hu{&#AkILGfZBA!=f0%{<|x6cxB_XmY!kn=eg2QZRJ2_Hl#X3G5%
z;|61{*CM3XU779@iuwi&mYN=g<&FTgHMdzxXLqgOmF0EI+xo|2q+c(pSzvBeh{X&!
z-V-hUY$y2rx_p=PK425Z$b!2@wcuwx8ky8^f43g=^+2fV8OOxi&w!Q#MO6Wq7W5+A
z(d{9a<Fp0d+9MiX8Q|U!tyVQ|sr<$jQYy;;WPC?9l32LW86xZF66fPz7=sbEZ=$H7
z^Yev=b8!B?h|FyB&q&J&j-3JHw)68M+scank~>Nb8PqPsj3iox6yVP}MgvYzv|?qU
zRpbL!6{H}8^pHh-T&QjHLx0qdw_QJp&pekaFk+weTX;^Xq9Mou-`Thb2V)@`AK8pq
zgt=Pv80YUp`>_L+agJ6LRULaqvq<3Ff`e%Q9LQ-ocD0rWz;~xgvLmrAruKK7B+@^P
zD2v^D@a}z9>aVXkhxeFt;dPtDkhFwNmZW^*U~rV%xaY0SdG^A{1l}jym}yLT#?VOy
zEUKO{!E@!<J`i@`I3&L}9^EeOfC2BDTpVO|*9Rx!dXcl0mFQ>&Y~>Z<W%3~mpuu@g
OoqoXFu$U4X+RHi(Mcror

literal 2502
zcmV;%2|4xvM@dveQdv+`0A~ADj9zn9Vd=<*;8d>>B$Kj5xJnJ)+)Wv(qPr=aoNSU(
z@~To<(c2ILlT45phws;q;jB9Ru^m;Nb*ie#jGlAEnXuHM1`Xgp`;MiYhp@IJ$14@~
z$#)trK1nS%r58KV{ONnDhNq$;9>NzI!$k>Y7A!$^*q6l)am>rUPEL}euwzW;KPHbM
zfP`!=gzUN1a&Z?0ue;HOQxDt=qv8Mq5|*6Ud5Bo+E%l$EC<jo2xLx6Tx}N0vLX4@3
zwe^$(jzxl<n7AP#fzDpq%|=(lO?qA+5C{=VX<lzcr)}(G2=&g3?~;Yz0@gulm?m7)
zHBPByK}Sc&9yt^Ew~;_oVw9_=;R3H6*bg3+?~eXlBU4DHZj$OGELmMXX+%vUiOHto
z4BcKX^ijH`Pd|MyR%QdU_%uF<HXj%kWpcH%L@AVV4ZZ8TD49O)18HJ(YhavkE?hAR
zZOsPIdp`c0)`u#Sn4u=PTU)?{*77Ht=hU15CB|#_&`)@g+j5kgV;sc=um8K{Lvf5#
zaK7kHLUyjVO?iw%!H}()f@W7gV->|P+u7i4m@EiR^>Fq7aPU{4$}*_?LU|jHwqR@D
zkF|}AF+^JtuDD5mJ#PSCJV%p13Wb}#5cc2JW@d~%QBLJm)v+(My8CXy3%U$kf~bF&
zL=lC5At;cqSwYl92zv97*gWCUWK`Vf;DKPJxI3x{FTvu_z07p9CiFl=ezhO9=4Q$h
zwKWEXT}3+FO%}P*`1!6WNgM1$@Wh22@ks4?-RkI{x#<W%(`DICLa4z@Wh@-G<my93
z75u~sgZwx98ectlrz{!!_zK+#?aW-1eXiaYS<XO)Ns^uh^Tp$CwuC(eG(XybG>C^4
zW#}wxw{ucN?dV+zRN)2X3Eaoew$4VP<P2$DY6-{k%Rs8F2pMX+di<bn=T$}ee~ta?
z735{{<v!R#VFsiJDI-P<BK2`ca&v4EPG4Vcy}DP7^C8LPCou66tfmwIOyJedM*Nyd
z39}=AZn}delQ4^Ia>*qJh~ZV!%r_EX!4=d9gd`{8mUii^9`jcz=XAx{mo-8t#Xn$5
z>&wdRUJe>?56bwtLisEj$kxyk66_8ZtFBU|Zf^IDVqGd1G3%j+1X7ZRddxugBCO-h
z9E2NQhvRFBcF2suGegs3xb_t5Bw=rxL?OZLk{j=4B_Z?%jSWnE<Z#CRW@)190lOFk
z=e>#}mjqQc!r$(9{W#kgnyhTMN)`WBW`6MQW>5uy1oaB7bqf~fDm*{Sn++R-*w6z+
zh4*c7TT+BQnk{mMOkn<=c~-R*yCIFl%=tz%T^$x|sDwh`hH}=bDgUq9FK6C<XbYQ)
zR~{#7hsokfC1%3Ykl`*Dh%L)decHNRV$X9vp#YvRtdruSwnV>PfiG`CP$f@3>=Jg8
z0^_XN3`$|nX78O7B9RMoRl$mlS=9A$Z!SB&P+=83qlUbU?UaUjcsMw#A4L3^y~m9a
zqEiJ5P3Tx$`F|}!W$6Znd};z+$r{s<e8}(~A=wcb!`{wxb&xU#qH~$*v9Vr2dZ;J|
z^h6J2*C-OEyI2U8ID7E3oNVuCw37vR7U3!Ip-e31KWa{y&Z1njM6JJP(id+YWB4?U
z;=lkV0q_W~cda&~kg)|zx{H?Q#wjzK=a(sJninyIf0dR+p*KMS1EnB10I3$gZbwQ(
z>fi%-K>yb+bVzYv!|PrKjtN&%an@(aN^JylWGY>W<2hK)+(tDTHK~D8<K`dM@GPp=
zdWcCjqF)rp1Q5>Sd|@x^&5A)p`@E_QR~TxH!~r=IQH|K6(YK7rU9(XwUcH(jW6+5N
zAca1Q4-Y(aaR!*lH8&)Ugi`&7R3uX95Ya>>@0Y)WPua+V>O7EF@w%%G$vh*ArH>2O
zi%2ahSPijEa@39D_?x;Y3YcSm5^JBe!v3xC%`#SHiWW&{kcApJ--A6Y!;*It4Ib?2
z6nf6AeVFq}8lDRWb0}gP_Qv7)LgkS?#2wVIG+DGQPzSoVTcy0dX8#U|S^nTakrF4b
z0Q~rnJ378ySi6n;C|3|PH)IM&w>jB{Gt#Ra>x>MPRSv<akirRMVg{~L8IYA@uVPdr
z!ZAZ&xkko`1F^A%+p@LpY52nVn;gFKSdabpbaV;=l-$nviC%83N<ag8PLh|3*>!8S
zZR1bB4$6dM%h6)y8^$tN7aofyeJtYEyhx)C(dJuRPn}BIzP~TD;tKqnQ9>-UO#~dn
zG#KkH6Y0src$u5IK%peD6zxe)M@4Jxb=+%YYC7D!AV>zxm9R@VVY5{91|Iu(6*65w
z3c4&F!+Baj+@5>FKyYMH$BjK+UNk<a{>8q1*9?i4;MU#;`;{O2U~F^`gSMC^>P%F}
z--vx$9iN^Vt<BENM?ju+sn>&KP;=j}LZ%FW?o(eWB0KJsRGKQWGFEyo0cw$RU2=R)
z9_r;pC@{L|j<zTGXT#{2)k<KJO^!Ns=UwE%aTW=USUL0<+at&C(%!a9Gh}84{reiG
zY)ZnDh@{a<i++7$_v{{A3np)3zw7wbPZr5~M@u~2WT<_o0&aIyDtBH)5)-WYLWKUB
zhLC~<rMRMtW-b{*TB<}~V5JKRfDxD-{4O3!N18X1rlMJw`90)JK|;=}QG4W4$K)<h
zqIMYtvT>F1Dv8G6X8wkM^wl`<8vn4T0}|Kdw%RkQt`i$0{^c^XG~y4aLsfrVShar5
z3D4wp)FDpM<inE^ilz1<M#YwiBbG^jQ%7f}&(*)+Iz;iZ{ZkHB4WyClv48#AW2j<9
z_Q>ZxD{O!I85q@fTUyFg;v-!jwaOLyI1+}g(jyK<=1^POCza=P9Rfhpcs#BLR{+qY
zS0=y?6$C>7Utisn9KIi-httq$7BgJ>sG*vS3nZpTu)k>aEdAS_zU2(h{r>@vs5-?U
zN<Qp-(4k-&_c_Z0T-xr8qRG(Eh}wQAucWQdn=tT(I<-t-RtD(EfWZ6<(Ju{e+x<1+
z%B>4Q4vn}GP0JMtI*zYV8(TtfI}o$KZ$RrxBKXFezenkAduHg=2)twnlj)1!e$pyN
z1ks_NAJs_3eX#GX+*8bNG{JFB_n#UXV!6I#ccpjY<c}~tgXCRv`zaeK`ws>iz@3pv
z*p+>5)el`}j+7LMRkmzLOh@~elo3HQa*V!3@A`GOmy(p6`f`d5*Q{8?MryA!!)7Tt
z$g;){I#?FTec!W^VP%#}^Mq@4soMO=Y?>k-m3NCi_t%wn$fJM8=REhapz%-;=!{YQ
QKbsIvJzvk;rxaA|x!48A_5c6?

diff --git a/secrets.nix b/secrets.nix
index bcd6a3d..3d5ef6b 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -63,4 +63,8 @@ in
   "agenix/hosts/mediaserver/tailscale/authkey.age".publicKeys = mediaserver;
 
   "agenix/hosts/mediaserver/wireguard/config.age".publicKeys = mediaserver;
+
+  "agenix/hosts/mediaserver/tubearchivist/environmentTA.age".publicKeys = mediaserver;
+
+  "agenix/hosts/mediaserver/tubearchivist/environmentES.age".publicKeys = mediaserver;
 }
diff --git a/system/hosts/mediaserver.nix b/system/hosts/mediaserver.nix
index 08c2fe9..df37116 100644
--- a/system/hosts/mediaserver.nix
+++ b/system/hosts/mediaserver.nix
@@ -27,6 +27,7 @@ in
     ../nixos/jellyfin.nix
 
     ../nixos/container.nix
+    ../../container/tubearchivist
     ../../secret/container/additional-media
   ];