nits

services/caddy.nix

@@ -52,7 +52,7 @@ in
       "torrent.${service_configs.https.domain}".extraConfig = ''
         # tls internal
         ${import ../secrets/caddy_auth.nix}
-        reverse_proxy ${service_configs.https.wg_ip}:${builtins.toString service_configs.ports.torrent}
+        reverse_proxy ${service_configs.https.wg_ip}:${builtins.toString config.services.qbittorrent.webuiPort}
       '';
 
       "map.${service_configs.https.domain}".extraConfig = ''

services/gitea.nix

@@ -18,7 +18,7 @@
       server = {
         DOMAIN = service_configs.gitea.domain;
         ROOT_URL = "https://" + config.services.gitea.settings.server.DOMAIN;
-        HTTP_PORT = 3281;
+        HTTP_PORT = service_configs.ports.gitea;
         LANDING_PAGE = "/explore/repos";
       };
       session = {

services/immich.nix

@@ -2,6 +2,7 @@
   service_configs,
   pkgs,
   config,
+  username,
   ...
 }:
 {
@@ -28,4 +29,8 @@
     "video"
     "render"
   ];
+
+  users.users.${username}.extraGroups = [
+    config.services.immich.group
+  ];
 }