+ 3dviewer

hosts/AZ-CLD-1/services/containers/default.nix

@@ -5,7 +5,6 @@
     ./librechat.nix
     ./litellm.nix
     ./librechat-dev.nix
-    # ./frappe-lms.nix
     ./netbird.nix
     ./portainer.nix
     ./zammad-hr.nix

hosts/AZ-PRM-1/configuration.nix

@@ -20,6 +20,7 @@
 
   environment.systemPackages = with pkgs; [
     neovim
+    ghostty
     git
     python3
     python3Packages.pysmb

hosts/AZ-PRM-1/services/containers/default.nix

@@ -3,6 +3,7 @@
     #./baserow.nix
     ./excalidraw.nix
     ./kestra.nix
+    ./online3dviewer.nix
     ./stirling-pdf.nix
   ];
   system.activationScripts.createPodmanNetworkWeb = lib.mkAfter ''

hosts/AZ-PRM-1/services/containers/online3dviewer.nix

@@ -0,0 +1,31 @@
+{
+  config,
+  pkgs,
+  ...
+}: let
+  serviceName = "online3dviewer";
+  servicePort = config.m3ta.ports.get serviceName;
+in {
+  virtualisation.oci-containers.containers."${serviceName}" = {
+    image = "docker.io/nginxinc/nginx-unprivileged:stable-alpine";
+    ports = ["127.0.0.1:${toString servicePort}:8080"];
+    volumes = ["${pkgs.online3dviewer}:/usr/share/nginx/html:ro"];
+    extraOptions = [
+      "--ip=10.89.0.15"
+      "--network=web"
+      "--security-opt=no-new-privileges"
+      "--cap-drop=ALL"
+    ];
+  };
+
+  services.traefik.dynamicConfigOptions.http = {
+    services.${serviceName}.loadBalancer.servers = [{url = "http://localhost:${toString servicePort}/";}];
+
+    routers.${serviceName} = {
+      rule = "Host(`3dv.l.az-gruppe.com`)";
+      tls = {certResolver = "ionos";};
+      service = serviceName;
+      entrypoints = "websecure";
+    };
+  };
+}

hosts/common/ports.nix

@@ -56,6 +56,7 @@
         stirling-pdf = 3032;
         bpi = 3033;
         excalidraw = 3034;
+        online3dviewer = 3035;
       };
     };
   };