Add Monero node

dns.tf

@@ -39,6 +39,14 @@ resource "hetznerdns_record" "jellyfin_a" {
   ttl     = 600
 }
 
+resource "hetznerdns_record" "monero_a" {
+  zone_id = data.hetznerdns_zone.banditlair_zone.id
+  name    = "monero"
+  value   = local.storage1_ip
+  type    = "A"
+  ttl     = 600
+}
+
 resource "hetznerdns_record" "anderia_a" {
   zone_id = data.hetznerdns_zone.banditlair_zone.id
   name    = "anderia"

modules/monero.nix

@@ -0,0 +1,21 @@
+{ config, lib, pkgs, ... }:
+{
+
+  services.monero = {
+    enable = true;
+    rpc.restricted = true;
+  };
+
+  services.nginx.virtualHosts."monero.${config.networking.domain}" = {
+    forceSSL = true;
+    enableACME = true;
+
+    locations."/" = {
+      proxyPass = "http://127.0.0.1:18081";
+      extraConfig = ''
+        proxy_http_version 1.1;
+      '';
+    };
+  };
+
+}

profiles/storage.nix

@@ -8,7 +8,8 @@
     ../modules/nginx.nix
     ../modules/jellyfin.nix
     ../modules/stb.nix
+    ../modules/monero.nix
   ];
 
-  networking.firewall.allowedTCPPorts = [ 80 443 ];
+  networking.firewall.allowedTCPPorts = [ 80 443 18080 ];
 }