From 78f01cf111a6f31dfb9e0a390de9047e6dab87f3 Mon Sep 17 00:00:00 2001
From: sora-ext <sora.ext@helcel.net>
Date: Wed, 13 May 2026 17:31:07 +0200
Subject: [PATCH] Update modules/server/containers/apps/invidious.nix

---
 modules/server/containers/apps/invidious.nix | 48 +++++++++++++++++++-
 1 file changed, 46 insertions(+), 2 deletions(-)

diff --git a/modules/server/containers/apps/invidious.nix b/modules/server/containers/apps/invidious.nix
index 6d83f94..e81c61b 100644
--- a/modules/server/containers/apps/invidious.nix
+++ b/modules/server/containers/apps/invidious.nix
@@ -1,3 +1,47 @@
-{...}:{
-    
+{ config, containerCfg, pkgs, lib, builder, name, ... }:
+let 
+  serverCfg = config.syscfg.server;
+
+  invidiousImage = pkgs.dockerTools.pullImage {
+    imageName = "quay.io/invidious/invidious";
+    imageDigest = "sha256:7b5cfca1b369cbb87a6c983a54d588cb375ff60c6d71b3e1f0e2f59265f2a1b9"; # Pin tag digest
+    sha256 = lib.fakeSha256; 
+  };
+  companionImage = pkgs.dockerTools.pullImage {
+    imageName = "quay.io/invidious/inv-sig-helper";
+    imageDigest = "sha256:2d150b07b1406b3a0c25a5f1e8e25d6b46efbb12dbfde6125026bc9812a647ad";
+    sha256 = lib.fakeSha256;
+  };
+
+in {
+  sops = true;
+  db = true;
+
+  containers = {
+    server = builder.mkContainer {
+      subdomain = containerCfg.subdomain;
+      imageStream = invidiousImage;
+      port = 3000;
+      secret = name;
+      extraEnv = {
+        INVIDIOUS_DATABASE_URL = "postgres://invidious_user:\${DB_PASS}@${builder.host}/invidious_db";
+        INVIDIOUS_HMAC_KEY = "\${HMAC_KEY}";
+        INVIDIOUS_COMPANION_URL = "http://invidious-companion:12999";
+        INVIDIOUS_PO_TOKEN = "\${PO_TOKEN}";
+        INVIDIOUS_VISITOR_DATA = "\${VISITOR_DATA}";
+        INVIDIOUS_PORT = "3000";
+        INVIDIOUS_COMPANION_KEY = "\${INVIDIOUS_KEY}";
+        INVIDIOUS_DOMAIN = "${containerCfg.subdomain}.${serverCfg.hostDomain}";
+        #registration_enabled: false
+      };
+    };
+
+    companion = builder.mkContainer {
+      imageStream = companionImage;
+      port = 12999;
+      overrides = {
+        cmd = [ "--tcp" "0.0.0.0:12999" ];
+      };
+    };
+  };
 }
\ No newline at end of file