containers: add synapseadmin

options/custom/containers/synapseadmin.nix

@@ -0,0 +1,38 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+with lib; let
+  cfg = config.custom.containers.synapseadmin;
+in {
+  options.custom.containers.synapseadmin = {
+    enable = mkEnableOption "synapseadmin";
+  };
+
+  config = mkIf cfg.enable {
+    #?? arion-synapse-admin pull
+    environment.shellAliases.arion-synapseadmin = "sudo arion --prebuilt-file ${config.virtualisation.arion.projects.synapseadmin.settings.out.dockerComposeYaml}";
+
+    virtualisation.arion.projects.synapseadmin.settings.services = {
+      # https://github.com/etkecc/synapse-admin
+      # https://github.com/etkecc/synapse-admin/blob/main/docker-compose.yml
+      synapseadmin.service = {
+        container_name = "synapseadmin";
+        image = "ghcr.io/etkecc/synapse-admin:v0.10.3-etke38";
+        ports = ["8818:80"];
+        restart = "unless-stopped";
+
+        volumes = let
+          # https://github.com/etkecc/synapse-admin/blob/main/docs/config.md
+          configuration = pkgs.writeText "config.json" (builtins.toJSON {
+            restrictBaseUrl = ["https://${config.custom.hostname}.${config.custom.services.tailscale.tailnet}:8448"];
+          });
+        in [
+          "${configuration}:/app/config.json:ro"
+        ];
+      };
+    };
+  };
+}

profiles/server/default.nix

@@ -31,6 +31,7 @@
       searxng.enable = true;
       stremio.enable = true;
       synapse.enable = true;
+      synapseadmin.enable = true;
       uptimekuma.enable = true;
       vaultwarden.enable = true;
       wikijs.enable = true;