Create new ssh key implicitly

lib/modules/programs/docker.nix

@@ -31,10 +31,12 @@ in
               jellyfin.enable = mkEnableOption "Jellyfin media server";
               minecraft.enable = mkEnableOption "Minecraft server";
               nextcloud.enable = mkEnableOption "Nextcloud server";
+              ryot.enable = mkEnableOption "ryot server";
               teamspeak.enable = mkEnableOption "TeamSpeak server";
               terraria.enable = mkEnableOption "Terraria server";
               trackmania.enable = mkEnableOption "TrackMania server";
               vaultwarden.enable = mkEnableOption "Vaultwarden server";
+              wekan.enable = mkEnableOption "Wekan server";
               woodpecker.enable = mkEnableOption "Woodpecker CI server";
             };
           };

profiles/machines/manuel/server.nix

@@ -62,10 +62,12 @@ in {
             jellyfin.enable = true;
             minecraft.enable = true;
             nextcloud.enable = true;
+            ryot.enable = true;
             teamspeak.enable = true;
             terraria.enable = true;
             trackmania.enable = true;
             vaultwarden.enable = true;
+            wekan.enable = true;
             woodpecker.enable = true;
           };
         };

scripts/Arch/OS/install.fish

@@ -5,6 +5,7 @@ begin
     function installValhallaDeps -V dir
         source "$dir/../lib/software.fish"
         and pacinst fish git jq nix sudo tmux
+        sudo systemctl enable --now nix-daemon
     end
 
     function getDeploymentScript -V dir
@@ -16,7 +17,6 @@ begin
         waitNetwork
         or exit
 
-        sudo systemctl enable --now nix-daemon
         and source "$dir/../lib/software.fish"
         and source "$dir/../Software/base-devel/main.fish"
         and source "$dir/../Software/pacman/main.fish"

scripts/Common/OS/backup.fish

@@ -16,19 +16,21 @@ function backupAction -V dir
 
     if [ -z "$VALHALLA_BACKUP_DIR" ]
         if fish "$dir/../../../lib/modules/partition/confirm.fish" "Do you wish to store the backup on an SSH server?" n
+            set -l keyVar VALHALLA_BACKUP_SERVER_KEY
+            set -l keyPath ~root/.config/port-valhalla/valhalla
             read -xP "Please specify the host name of the SSH server: " VALHALLA_BACKUP_SERVER
             read -xP "Please specify the port of the SSH server (default 22): " VALHALLA_BACKUP_SERVER_PORT
             read -xP "Please specify the name of the user to log in to the SSH server: " VALHALLA_BACKUP_SERVER_USER
-            read -xP "Please specify the path to the key file for logging in to the SSH server: " VALHALLA_BACKUP_SERVER_KEY
+
+            if [ -z "$$keyVar" ]
+                set -gx "$keyVar" "$keyPath"
+                ssh-keygen -f "$$keyVar" -N ""
+            end
 
             if [ -z "$VALHALLA_BACKUP_SERVER_PORT" ]
                 set -x VALHALLA_BACKUP_SERVER_PORT 22
             end
 
-            if [ -n "$VALHALLA_BACKUP_SERVER_USER" ]
-                set -x VALHALLA_BACKUP_SERVER "$VALHALLA_BACKUP_SERVER_USER@$VALHALLA_BACKUP_SERVER"
-            end
-
             echo
             echo "$(tput setaf 3)==== WARNING ====$(tput sgr0)"
             echo "For a seamless experience, please make sure that you are able to establish an unattended ssh connection using key authentication."

scripts/Common/Software/docker/services/forgejo/docker-compose.base.yml

@@ -32,7 +32,7 @@ services:
       MARIADB_RANDOM_ROOT_PASSWORD: "yes"
       MARIADB_AUTO_UPGRADE: "yes"
     volumes:
-      - ./database:/var/lib/mysql
+      - ./data/db:/var/lib/mysql
     command:
       - --character-set-server=utf8mb4
       - --collation-server=utf8mb4_unicode_ci

scripts/Common/Software/docker/services/forgejo/main.fish

@@ -70,8 +70,8 @@ begin
             yq "$envKey.USER_GID = $gid" |
             sudo tee "$config" >/dev/null
 
-        mkdir -p "$dir"
+        sudo mkdir -p "$dir"
-        and chown -R $uid:$gid "$dir"
+        and sudo chown -R $uid:$gid "$dir"
         rm "$file"
 
         set port (yq (getSSHPortKey) "$overrides" | extractPort)

scripts/Common/Software/docker/services/jellyfin/docker-compose.base.yml

@@ -5,9 +5,9 @@ services:
     user: 1337:1337
     hostname: Jellyfin
     volumes:
-      - ./config/jellyfin:/config
+      - ./data/config/jellyfin:/config
       - cache:/cache
-      - ./media:/media
+      - ./data/media:/media
   radarr:
     image: linuxserver/radarr
     restart: unless-stopped
@@ -16,9 +16,9 @@ services:
       PGID: 1337
     volumes:
       - /etc/localtime:/etc/localtime:ro
-      - ./config/radarr:/config
+      - ./data/config/radarr:/config
-      - ./media/movies:/movies
+      - ./data/media/movies:/movies
-      - ./downloads:/downloads
+      - ./data/downloads:/downloads
   sonarr:
     image: linuxserver/sonarr
     restart: unless-stopped
@@ -27,9 +27,9 @@ services:
       PGID: 1337
     volumes:
       - /etc/localtime:/etc/localtime:ro
-      - ./config/sonarr:/config
+      - ./data/config/sonarr:/config
-      - ./media/series:/tv
+      - ./data/media/series:/tv
-      - ./downloads:/downloads
+      - ./data/downloads:/downloads
   lidarr:
     image: linuxserver/lidarr
     restart: unless-stopped
@@ -38,9 +38,9 @@ services:
       PGID: 1337
     volumes:
       - /etc/localtime:/etc/localtime:ro
-      - ./config/lidarr:/config
+      - ./data/config/lidarr:/config
-      - ./media/music:/music
+      - ./data/media/music:/music
-      - ./downloads:/downloads
+      - ./data/downloads:/downloads
   prowlarr:
     image: linuxserver/prowlarr
     restart: unless-stopped
@@ -49,7 +49,7 @@ services:
       PGID: 1337
     volumes:
       - /etc/localtime:/etc/localtime:ro
-      - ./config/prowlarr:/config
+      - ./data/config/prowlarr:/config
   flaresolverr:
     image: flaresolverr/flaresolverr
     restart: unless-stopped
@@ -58,7 +58,11 @@ services:
       LOG_HTML: "false"
       CAPTCHA_SOLVER: none
   privoxy:
-    image: walt3rl/proton-privoxy
+    build:
+      context: .
+      dockerfile_inline: |
+        FROM walt3rl/proton-privoxy
+        RUN apk --update add ip6tables
     restart: unless-stopped
     volumes:
       - /etc/localtime:/etc/localtime:ro
@@ -75,9 +79,9 @@ services:
              --allowedpath /downloads
              --rtsocket /rtorrent/.local/share/rtorrent/rtorrent.sock
     volumes:
-      - ./config/flood:/flood
+      - ./data/config/flood:/flood
-      - ./downloads:/downloads
+      - ./data/downloads:/downloads
-      - ./config/rtorrent:/rtorrent
+      - rtorrent:/rtorrent
   rtorrent:
     build:
       dockerfile: ./rtorrent.Dockerfile
@@ -96,8 +100,8 @@ services:
              -o 'method.set=group.seeding.ratio.command, "d.cloase = ; d.erase = "'
     volumes:
       - /etc/localtime:/etc/localtime:ro
-      - ./config/rtorrent:/config
+      - rtorrent:/config
-      - ./downloads:/downloads
+      - ./data/downloads:/downloads
       - ./data/proton:/proton
     devices:
       - /dev/net/tun
@@ -135,3 +139,4 @@ services:
 
 volumes:
   cache: {}
+  rtorrent: {}

scripts/Common/Software/docker/services/jellyfin/main.fish

@@ -66,7 +66,7 @@ begin
         URL="https://$(getServiceDomain "$domain" "")/" yq "$(getServiceKey "$service").environment.JELLYFIN_PublishedServerUrl = env(URL)" "$file" |
             sudo tee "$overrides" >/dev/null
 
-        for dir in "$root"/{downloads,config/{,jellyfin,flood,rtorrent,radarr,sonarr,lidarr,prowlarr},media/{,movies,series,music}}
+        for dir in "$root"/data/{downloads,config/{,jellyfin,flood,radarr,sonarr,lidarr,prowlarr},media/{,movies,series,music}}
             sudo mkdir -p "$dir"
             and chown -R $uid:$gid "$dir"
         end
@@ -91,9 +91,9 @@ begin
         printf "%s\0" \
             "$_flag_name" / (
                 for app in $servarr
-                    printf "%s\n" "$app" "/$app"
+                    printf "%s\n" "$app" "/$app" ""
                 end) \
-            flood "~ ^/flood.*"
+            flood "/flood/"
     end
 
     function getServiceLocationConfig -a domain s location -V service -V flood

scripts/Common/Software/docker/services/jellyfin/pvpn-cli.py

@@ -1,25 +1,36 @@
 from argparse import ArgumentParser
-from os import environ
+from os import chmod, environ
 from os.path import dirname
+from random import choice
 from re import M
 import shlex
 import subprocess
 import sys
-from protonvpn_cli.cli import FeatureEnum, protonvpn
+from protonvpn_cli import connection
+from protonvpn_cli.constants import PASSFILE
+from protonvpn_cli.utils import check_init, get_fastest_server, get_servers, set_config_value, pull_server_data
 
 
 def run_proton(args):
     exit(
         subprocess.run(
-            ["pipenv", "run", "proton"],
+            ["proton"],
             cwd="/app",
             env=dict(
                 environ,
-                PIPENV_VENV_IN_PROJECT=f"{1}",
                 PVPN_CMD_ARGS=" ".join(args))).returncode)
 
+environ["PVPN_USERNAME"] = environ["PVPN_USERNAME"] + (environ["PVPN_TAGS"] or "")
 
-protonvpn.ensure_connectivity()
+with open(PASSFILE, "w") as f:
+    f.write("{0}\n{1}".format(environ["PVPN_USERNAME"], environ["PVPN_PASSWORD"]))
+    chmod(PASSFILE, 0o600)
+
+check_init()
+set_config_value("USER", "username", environ["PVPN_USERNAME"])
+set_config_value("USER", "tier", environ["PVPN_TIER"])
+set_config_value("USER", "default_protocol", environ["PVPN_PROTOCOL"])
+set_config_value("USER", "initialized", 1)
 
 args = sys.argv[1:]
 
@@ -29,7 +40,7 @@ if not args:
 
 parser = ArgumentParser(exit_on_error=False)
 subParsers = parser.add_subparsers(dest="command")
-initParser = subParsers.add_parser("init", alias=["i"])
+initParser = subParsers.add_parser("init", aliases=["i"])
 connectParser = subParsers.add_parser("connect", aliases=["c"])
 
 for aliases in [
@@ -50,56 +61,40 @@ try:
 except:
     pass
 
-if parsedArgs is not None and parsedArgs.command == "init":
+if parsedArgs is not None and (
-    userName = input("Enter your Proton VPN username or email: ")
-    subprocess.run(["protonvpn-cli", "login", userName])
-else:
-    session = protonvpn.get_session()
-    try:
-        session.ensure_valid()
-    except:
-        raise Exception(
-            "Your current session is invalid. Please initialize the session using the `init` subcommand.")
-
-    environ["PVPN_USERNAME"] = session.vpn_username + \
-        (environ.get("PVPN_TAGS") or "")
-    environ["PVPN_PASSWORD"] = session.vpn_password
-    environ["PVPN_TIER"] = f"{session.vpn_tier}"
-
-    if parsedArgs is not None and (
     len(
         list(
             filter(
                 lambda item: item[1] not in [False, None],
                 vars(parsedArgs).items()))) > 1):
-        country = protonvpn.get_country()
 
     def match(server):
         features = list()
 
         if parsedArgs.streaming:
-                features.append(FeatureEnum.STREAMING)
+            pass
         if parsedArgs.sc:
-                features.append(FeatureEnum.SECURE_CORE)
+            pass
         if parsedArgs.p2p:
-                features.append(FeatureEnum.P2P)
+            pass
         if parsedArgs.tor:
-                features.append(FeatureEnum.TOR)
+            pass
 
         return (parsedArgs.cc is None or server.exit_country.lower() == parsedArgs.cc.lower()) and (
             all(feature in server.features for feature in features))
 
-        servers = session.servers.filter(match)
+    pull_server_data(force=True)
+    servers = list(filter(lambda server: match(server), get_servers()))
 
     if len(servers) > 0:
         if parsedArgs.fastest or not parsedArgs.random:
-                server = servers.get_fastest_server()
+            server = get_fastest_server(servers)
         else:
-                server = servers.get_random_server()
+            server = choice(servers)
 
-            run_proton(["connect", server.name])
+        run_proton(["connect", server["Name"]])
     else:
         raise Exception(
             f"Unable to find a server matching the specified criteria {args[1:]}!")
-    else:
+else:
     run_proton(args)

scripts/Common/Software/docker/services/jellyfin/rtorrent.Dockerfile

@@ -5,8 +5,13 @@ FROM debian
 ARG PVPN_CLI_VER=2.2.12
 ARG USERNAME=proton
 
-ENV PVPN_TAGS="+pmp" \
+ENV PVPN_USERNAME= \
+    PVPN_USERNAME_FILE= \
+    PVPN_PASSWORD= \
+    PVPN_PASSWORD_FILE= \
+    PVPN_TIER=2 \
     PVPN_PROTOCOL=udp \
+    PVPN_TAGS="+pmp" \
     PVPN_CMD_ARGS="connect --p2p --random" \
     PVPN_DEBUG= \
     HOST_NETWORK= \
@@ -20,9 +25,28 @@ ENV PVPN_TAGS="+pmp" \
 
 WORKDIR /root
 COPY --from=rtorrent / /
+
+RUN apt-get update -y \
+    && apt-get upgrade -y \
+    && apt-get install -y \
+        git \
+        iproute2 \
+        iptables \
+        natpmpc \
+        openvpn \
+        pipenv \
+        procps \
+        python3 \
+        python3-pip \
+        python3-setuptools \
+        sudo \
+    && rm -rf /var/lib/apt/lists
+
+RUN pip3 install --break-system-packages git+https://github.com/Rafficer/linux-cli-community.git@v$PVPN_CLI_VER#egg=protonvpn-cli
+
 RUN mkdir /app
-COPY --from=proton /root/.pvpn-cli /root/.pvpn-cli
 COPY --from=proton /app/proton-privoxy/run /app/proton
+COPY --from=proton /root/.pvpn-cli/pvpn-cli.cfg.clean /root/.pvpn-cli/pvpn-cli.cfg
 
 RUN \
     sed -i \
@@ -32,43 +56,7 @@ RUN \
     && install -t /usr/local/bin /app/proton \
     && rm /app/proton
 
-RUN apt-get update -y \
-    && apt-get upgrade -y \
-    && apt-get install -y \
-        curl \
-        gnupg \
-    && curl https://repo.protonvpn.com/debian/dists/stable/main/binary-all/protonvpn-stable-release_1.0.3-3_all.deb -o proton.deb \
-    && dpkg --install proton.deb \
-    && apt-get remove -y \
-        curl \
-    && apt-get update -y \
-    && apt-get install -y protonvpn-cli \
-    && rm -rf /var/lib/apt/lists
-
-RUN apt-get update -y \
-    && apt-get upgrade -y \
-    && apt-get install -y \
-        git \
-        iproute2 \
-        iptables \
-        natpmpc \
-        pipenv \
-        python3-setuptools \
-        sudo \
-    && rm -rf /var/lib/apt/lists
-
-RUN \
-    cd /app \
-    && PIPENV_VENV_IN_PROJECT=1 pipenv install git+https://github.com/Rafficer/linux-cli-community.git@v$PVPN_CLI_VER#egg=protonvpn-cli
-
 RUN printf "%s\n" \
-        "#!/usr/bin/env -S dbus-run-session -- bash" \
-        "mkdir -p /proton/{keyrings,protonvpn}" \
-        "mkdir -p ~/.local/share" \
-        "mkdir -p ~/.config" \
-        "ln -Ts /proton/keyrings ~/.local/share/keyrings >/dev/null 2>&1" \
-        "ln -Ts /proton/protonvpn ~/.config/protonvpn >/dev/null 2>&1" \
-        "eval \"\$(echo -n 'root' | gnome-keyring-daemon --unlock)\"" \
         "python3 /app/pvpn-cli.py \"\$@\"" > ./pvpn-cli \
     && install -Dm 755 ./pvpn-cli /usr/local/bin \
     && rm ./pvpn-cli
@@ -77,7 +65,20 @@ RUN printf "%s\n" \
         "#!/bin/bash" \
         "groupadd --gid \$PGID ${USERNAME} > /dev/null" \
         "useradd --create-home --home-dir \$PHOME ${USERNAME} --uid \$PUID -g ${USERNAME} 2>/dev/null" \
+        "chown ${USERNAME} \$PHOME" \
         '[ ! -z "$1" ] && [ "$1" = "init" ] && export PVPN_CMD_ARGS="$@"' \
+        'if [ -z "$PVPN_USERNAME" ] && [ -z "$PVPN_USERNAME_FILE" ]; then' \
+        "    echo 'Error: Either env var \$PVPN_USERNAME or \$PVPN_USERNAME_FILE is required.'" \
+        "exit 1" \
+        "fi" \
+        "" \
+        'if [ -z "$PVPN_PASSWORD" ] && [ -z "$PVPN_PASSWORD_FILE" ]; then' \
+        "echo 'Error: Either env var \$PVPN_PASSWORD or \$PVPN_PASSWORD_FILE is required.'" \
+        "exit 1" \
+        "fi" \
+        "" \
+        '[ -f "$PVPN_USERNAME_FILE" ] && PVPN_USERNAME=$(cat "$PVPN_USERNAME_FILE")' \
+        '[ -f "$PVPN_PASSWORD_FILE" ] && PVPN_PASSWORD=$(cat "$PVPN_PASSWORD_FILE")' \
         "pvpn-cli || exit" \
         'ip link show proton0 > /dev/null 2>&1 || exit' \
         'fallback="$(expr ${NATPMP_TIMEOUT} \* 3 / 4)"' \
@@ -93,7 +94,7 @@ RUN printf "%s\n" \
         "    while true" \
         "    do" \
         '        echo "Refreshing NAT-PMP port forwarding…"' \
-        '        natpmp -a 0 0 udp "$NATPMP_TIMEOUT"' \
+        '        natpmpc -a 0 0 udp "$NATPMP_TIMEOUT"' \
         '        natpmpc -a 0 0 tcp "$NATPMP_TIMEOUT"' \
         '        echo "NAT-PMP port forwarding has been refreshed!"' \
         '        sleep "$NATPMP_INTERVAL"' \
@@ -101,7 +102,7 @@ RUN printf "%s\n" \
         "} &" \
         "set -m" \
         '[ ${MAX_UPTIME:-0} -gt 0 ] && {' \
-        '    soudo -iu '"${USERNAME}"' rtorrent -o network.port_range.set=$port-$port,system.daemon.set=true $@ &' \
+        '    sudo -iu '"${USERNAME}"' rtorrent -o network.port_range.set=$port-$port,system.daemon.set=true $@ &' \
         '    pid=$!' \
         '    sleep "$MAX_UPTIME"' \
         '    pkill -9 $pid' \

scripts/Common/Software/docker/services/nextcloud/main.fish

@@ -10,7 +10,6 @@ begin
 
     set -l services \
         $server \
-        $turn turn "" \
         $office $officeDomain
 
     source "$dir/../service.fish"
@@ -94,10 +93,40 @@ begin
         end
     end
 
-    function getServiceLocations -V services -a index
+    function getServiceLocations -V services -V office -a index
         set -l i (math (math (math $index - 1) / 2 "*" 3) + 1)
         set -l name $services[$i]
-        printf "%s\0" "$name" /
+
+        if [ "$name" != "$office" ]
+            printf "%s\0" "$name" / ""
+        else
+            printf "%s\0" \
+                "$name" "^~ /browser" "static files" \
+                "$name" "^~ /hosting/discovery" "WOPI discovery URL" \
+                "$name" "^~ /hosting/capabilities" "Capabilities" \
+                "$name" "~ ^/cool/(.*)/ws\$" "main websocket" \
+                "$name" "~ ^/(c|l)ool" "download, presentation and image upload" \
+                "$name" "^~ /cool/adminws" "Admin Console websocket"
+        end
+    end
+
+    function getServiceLocationConfig -a domain s location -V office -V flood
+        if [ "$s" = "$office" ]
+            set -l argv $argv[4..]
+            getServiceDefaultProxy $domain $s "$location" --scheme https $argv
+        else
+            getServiceDefaultProxy $argv --path "$location"
+        end
+    end
+
+    function getExtraLocationSettings -a domain s location -V service
+        if string match --regex '^(~ \^|\^~ )/cool/(.*)ws\$?$' "$location" >/dev/null
+            printf "%s\n" \
+                '# Websocket' \
+                "proxy_http_version 1.1;" \
+                'proxy_set_header Upgrade $http_upgrade;' \
+                'proxy_set_header Connection "upgrade";'
+        end
     end
 
     function getExtraBackupPatterns

scripts/Common/Software/docker/services/ryot/docker-compose.base.yml

@@ -8,4 +8,4 @@ services:
     image: postgres
     restart: unless-stopped
     volumes:
-      - ./database:/var/lib/postgresql/data
+      - ./data/db:/var/lib/postgresql/data

scripts/Common/Software/docker/services/service.fish

@@ -68,24 +68,31 @@ begin
         echo "$domain"
     end
 
-    function getExtraServerConfig -a subdomain domain
+    function getExtraServerConfig -a domain
     end
 
     function getServiceLocationConfig -a domain service location
-        getServiceDefaultProxy $domain $service $location "" $argv
+        getServiceDefaultProxy $domain $service $location $argv
     end
 
     function getServiceDefaultProxy -a domain service location
-        argparse -i "comment=" "path=" "url=" -- $argv
+        argparse -i "comment=" "path=" "scheme=" "url=" -- $argv
+        set -l scheme
         set -l url
         set -l config (getServiceOverrides $argv)
         set -l portKey (getServicePortKey "$service")
         set -l port (yq "$portKey" "$config" | extractPort)
 
+        if [ -n "$_flag_scheme" ]
+            set scheme "$_flag_scheme"
+        else
+            set scheme http
+        end
+
         if [ -n "$_flag_url" ]
             set url "$_flag_url"
         else
-            set url "http://127.0.0.1:$port"
+            set url "$scheme://127.0.0.1:$port"
 
             if [ -n "$_flag_path" ]
                 set url "$url$_flag_path"
@@ -93,10 +100,10 @@ begin
         end
 
         printf "%s\n" \
-            "location $location {" \
             (if [ -n "$_flag_comment" ]
                 echo "# $_flag_comment"
             end) \
+            "location $location {" \
                 "proxy_pass $url;" \
                 'proxy_set_header Host $host;' \
                 'proxy_set_header X-Real-IP $remote_addr;' \
@@ -127,7 +134,7 @@ begin
         for i in (seq 1 2 (count $servers))
             set -l locations (getServiceLocations $i $argv | string split0)
 
-            for j in (seq 1 2 (count $locations))
+            for j in (seq 1 3 (count $locations))
                 set -l file (mktemp)
                 set -l port (getRandomPort)
                 set -l service $locations[$j]
@@ -158,11 +165,17 @@ begin
                     "server {" \
                         "listen 80;" \
                         "server_name $domain;" \
-                        (getExtraServerConfig $subdomain $domain $argv)
+                        (getExtraServerConfig $domain $argv)
 
-                for j in (seq 1 2 (count $locations))
+                for j in (seq 1 3 (count $locations))
                     set -l service $locations[$j]
                     set -l location $locations[(math $j + 1)]
+                    set -l comment $locations[(math $j + 2)]
+
+                    if [ -n "$comment" ]
+                        set -a argv --comment "$comment"
+                    end
+
                     getServiceLocationConfig $domain $service $location $argv
                 end
 

scripts/Common/Software/docker/services/terraria/docker-compose.base.yml

@@ -4,5 +4,7 @@ services:
     restart: unless-stopped
     tty: true
     stdin_open: true
+    ports:
+      - 7777:7777
     volumes:
       - ./data:/root/.local/share/Terraria/Worlds

scripts/Common/Software/docker/services/wekan/docker-compose.base.yml

@@ -4,7 +4,6 @@ services:
     restart: unless-stopped
     depends_on:
       - db
-    user: 1337:1337
     environment:
       WRITABLE_PATH: /data
       MONGO_URL: mongodb://db:27017/wekan

scripts/Common/Software/docker/services/wekan/main.fish

@@ -18,12 +18,28 @@ begin
         installDockerService $argv
     end
 
+    function configureSW -V dir
+        configureDockerService $argv
+    end
+
     function getServiceServers -V domain
         printf "%s\0" $domain
     end
 
     function getServiceLocations -V service
-        printf "%s\0" "$service" /
+        printf "%s\0" \
+            "$service" / "static files" \
+            "$service" "~ ^/sockjs/.*/websocket\$" "Websocket"
+    end
+
+    function getExtraLocationSettings -a domain s location -V service
+        if [ "$location" != "/" ]
+            printf "%s\n" \
+                '# Websocket' \
+                "proxy_http_version 1.1;" \
+                'proxy_set_header Upgrade $http_upgrade;' \
+                'proxy_set_header Connection "upgrade";'
+        end
     end
 
     runInstaller --force $argv

scripts/lib/restoration.fish

@@ -23,9 +23,10 @@ end
 
 function restoreFiles
     if [ -n "$VALHALLA_BACKUP_DIR" ]
-        argparse -i "user=" "base-directory=" -- $argv
+        set -l path (getArchivePath $argv)
         set -l tarArgs
         set -l sudoArgs
+        argparse -i "user=" "base-directory=" -- $argv
 
         if [ -n "$_flag_base_directory" ]
             set -a tarArgs -C "$_flag_base_directory"
@@ -37,8 +38,8 @@ function restoreFiles
             set -a sudoArgs -u "$_flag_user"
         end
 
-        fetchArchive $argv | begin
+        if runRestorationCommand test -f "$path"
-            sudo $sudoArgs tar $tarArgs -xvz
+            runRestorationCommand cat "$path" | sudo $sudoArgs tar $tarArgs -xvz
         end
     end
 end
@@ -47,22 +48,22 @@ function createArchive -a path
     runRestorationCommand sh -c "tee $(string escape -- "$path") >/dev/null"
 end
 
-function fetchArchive
-    set -l path (getArchivePath $argv)
-    runRestorationCommand cat "$path"
-end
-
 function runRestorationCommand
     if [ -z "$VALHALLA_BACKUP_SERVER" ]
         $argv
     else
         set -l args
+        set -l host "$VALHALLA_BACKUP_SERVER"
+
+        if [ -n "$VALHALLA_BACKUP_SERVER_USER" ]
+            set host "$VALHALLA_BACKUP_SERVER_USER@$host"
+        end
 
         if [ -n "$VALHALLA_BACKUP_SERVER_PORT" ]
             set -a args -p $VALHALLA_BACKUP_SERVER_PORT
         end
 
-        sudo ssh -i $(string escape -- "$VALHALLA_BACKUP_SERVER_KEY") $args "$VALHALLA_BACKUP_SERVER" (string escape -- $argv)
+        sudo ssh -i $(string escape -- "$VALHALLA_BACKUP_SERVER_KEY") $args "$host" (string escape -- $argv)
     end
 end
 
@@ -70,7 +71,7 @@ function getArchivePath
     argparse -i "u/user=" "n/name=" -- $argv
     set -l path "$VALHALLA_BACKUP_DIR"
 
-    if [ -b "$_flag_user" ]
+    if [ -n "$_flag_user" ]
         set -a path Users "$_flag_user"
     else
         set -a path System

scripts/test/arch-install.fish

@@ -18,7 +18,7 @@ begin
         "lxc.mount.entry = $(realpath "$dir/../..") $valhallaRoot none bind 0 0" \
         "" \
         "# VPN" \
-        "lxc.cgroup.devices.allow = c 10:200 rwm" \
+        "lxc.cgroup2.devices.allow = c 10:200 rwm" \
         "lxc.mount.entry = /dev/net dev/net none bind,create=dir 0 0"
 end | sudo tee -a "$containerDir/config" >/dev/null