gotosocial config

hosts/dalinar/default.nix

@@ -300,6 +300,42 @@
     };
   };
 
+  containers.gotosocial = {
+    autoStart = true;
+    forwardPorts = [
+      {
+        containerPort = config.containers.gotosocial.config.services.gotosocial.settings.port;
+        hostPort = config.containers.gotosocial.config.services.gotosocial.settings.port;
+        protocol = "tcp";
+      }
+    ];
+    privateNetwork = true;
+    hostAddress = "192.168.100.10";
+    localAddress = "192.168.100.11";
+    bindMounts."/gotosocial/storage" = {
+      # TODO not readable for gotoscoial user (mounted as root)
+      hostPath = "/storage/encrypted/gotosocial/storage";
+      isReadOnly = false;
+    };
+    config = { ... }: {
+      system.stateVersion = "25.05";
+      services.gotosocial = {
+        enable = true;
+        setupPostgresqlDB = true;
+        openFirewall = true;
+        settings = {
+          host = "rothe.social";
+          port = 8081;
+          bind-address = "0.0.0.0";
+          storage-local-base-path = "/gotosocial/storage";
+          trusted-proxies = [
+            "192.168.0.0/16"
+          ];
+        };
+      };
+    };
+  };
+
   system.stateVersion = "24.11"; # Don't change
 
 }

hosts/tien/configuration.nix

@@ -47,6 +47,9 @@
       "radicale.johannes-rothe.de".extraConfig = ''
         reverse_proxy base:5232
       '';
+      "rothe.social".extraConfig = ''
+        reverse_proxy dalinar:8081
+      '';
     };
   };