changes to home assistant, docker images, rustdesk relay

hosts/web-01.cloonar.com/configuration.nix

@@ -10,6 +10,7 @@
     ./modules/zammad
     ./modules/authelia
     # ./modules/nextcloud
+    ./modules/rustdesk.nix
     ./modules/postgresql.nix
     ./modules/grafana.nix
     ./modules/loki.nix
@@ -39,7 +40,6 @@
 
     ./sites/api.optiprot.cloonar.dev.nix
     ./sites/cloonar.dev.nix
-    # ./sites/diabetes-austria.cloonar.dev.nix
     ./sites/paraclub.cloonar.dev.nix
     ./sites/api.paraclub.cloonar.dev.nix
     ./sites/tandem.paraclub.cloonar.dev.nix

hosts/web-01.cloonar.com/modules/rustdesk.nix

@@ -0,0 +1,39 @@
+{ config, pkgs, ... }:
+
+{
+  virtualisation = {
+    podman.enable = true;
+    oci-containers.containers = {
+      rustdesk-server = {
+        image = "rustdesk/rustdesk-server-s6:1";
+        volumes = [ "/var/lib/rustdesk-server:/data" ];
+        environment = {
+          RELAY = "rustdesk.cloonar.com:21117";
+        };
+        ports = [
+          "21115:21115"
+          "21116:21116"
+          "21116:21116/udp"
+          "21118:21118"
+          "21117:21117"
+          "21119:21119"
+        ];
+      };
+    };
+  };
+
+  users.users.rustdesk-server = {
+    isSystemUser = true;
+    group = "rustdesk-server";
+    home = "/var/lib/rustdesk-server";
+    createHome = true;
+  };
+  users.groups.rustdesk-server = { };
+  users.groups.docker.members = [ "rustdesk-server" ];
+
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [ 5000 21115 21116 21117 21118 21119 ];
+    allowedUDPPorts = [ 21116 ];
+  };
+}