CrOS/modules/users/overseer/services/grocy.nix

let
  volumePath = "/overseer/services";
in
  {
    lib,
    config,
    ...
  }:
    lib.mkIf config.user.overseer.enable {
      systemd.tmpfiles.rules = [
        "d ${volumePath}/barcodebuddy"
      ];

      services.nginx.virtualHosts = {
        "grocy.wanderingcrow.net" = {
          forceSSL = true;
          useACMEHost = "grocy.wanderingcrow.net";
        };
        "barcodebuddy.grocy.wanderingcrow.net" = {
          forceSSL = true;
          useACMEHost = "barcodebuddy.grocy.wanderingcrow.net";
          locations."/" = {
            proxyPass = "http://10.88.0.11:80";
            proxyWebsockets = true;
          };
        };
      };

      services.grocy = {
        enable = true;
        hostName = "grocy.wanderingcrow.net";
        nginx.enableSSL = false;
      };

      virtualisation.oci-containers.containers.barcodebuddy = {
        image = "f0rc3/barcodebuddy:latest";
        volumes = ["${volumePath}/barcodebuddy:/config"];

        extraOptions = ["--ip=10.88.0.11" "--device=/dev/input/by-id/usb-0581_011c-event-kbd"];
        environment = {
          ATTACH_BARCODESCANNER = "true";
        };
      };
    }