Add tandoor service.

machines/Ophanim/options.nix

@@ -34,6 +34,7 @@ in {
     services = [
       "acme"
       "gitea"
+      "tandoor"
       #      "hydra"
       "mailserver"
       "mariaDB"
@@ -62,6 +63,10 @@ in {
         domain = "git.${base}";
         service = "gitea";
       }
+      {
+        domain = "food.${base}";
+        service = "tandoor";
+      }
     ];
     firewall = {
       enable = true;

services/nginx_vHosts/tandoor.nix

@@ -0,0 +1,29 @@
+{
+  config,
+  lib,
+  ...
+}:
+with lib;
+let
+  tandoor = config.services.tandoor-recipes;
+in {
+    vHost =
+      if tandoor.enable
+      then {
+        extraConfig = ''
+          location /media/ {
+            alias ${tandoor.extraConfig.MEDIA_ROOT};
+          }
+
+          location / {
+            proxy_pass http://${tandoor.address}:${toString tandoor.port};
+            proxy_set_header Host $host;
+            proxy_set_header REMOTE_ADDR $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+          }
+        '';
+      }
+      else {};
+  }
+  .vHost

services/tandoor.nix

@@ -0,0 +1,16 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+with lib;
+  mkIf (elem "tandoor" config.machine.services) {
+    services.tandoor-recipes = {
+      enable = true;
+      extraConfig = {
+        # Set explicitly so it can be referenced by web-server
+        MEDIA_ROOT = "/var/lib/tandoor-recipes/media/";
+      };
+    };
+  }