attempt to add qbittorrent

nixos/server/nginx.nix

···
         sslCertificateKey = config.sops.secrets."ssl/key".path;
         locations."/".proxyPass = "http://192.168.0.2:9696";
       };
+      "qbt.forest.monke" = {
+        onlySSL = true;
+        http2 = true;
+        sslCertificate = config.sops.secrets."ssl/cert".path;
+        sslCertificateKey = config.sops.secrets."ssl/key".path;
+        locations."/".proxyPass = "http://192.168.0.2:9091";
+      };
       "monke.moe" = {
         onlySSL = true;
         useACMEHost = "monke.moe";

nixos/server/qbittorrent.nix

···
+{ pkgs, lib, ... }:
+{
+  users = {
+    users.qbittorrent = {
+      group = "qbittorrent";
+      isSystemUser = true;
+      uid = 998;
+    };
+    groups.qbittorrent.gid = 998;
+  };
+
+  containers.torrent.bindMounts = {
+    qbittorrentData = {
+      hostPath = "/var/lib/qBittorrent";
+      mountPoint = "/var/lib/qBittorrent";
+      isReadOnly = false;
+    };
+    animu = {
+      hostPath = "/stuff/animu";
+      mountPoint = "/stuff/animu";
+      isReadOnly = false;
+    };
+  };
+
+  forest.container.torrent.config = [
+    {
+      services.qbittorrent = {
+        enable = true;
+        /*openFirewall = true;
+        serverConfig = {
+          LegalNotice.Accepted = true;
+          BitTorrent.Session = {
+            DefaultSavePath = "/stuff/animu/torrents";
+            MaxActiveDownloads = 15;
+            MaxActiveTorrents = 1000;
+            MaxActiveUploads = 20;
+          };
+          Preferences.WebUI = {
+            LocalHostAuth = false;
+            RootFolder = "${pkgs.vuetorrent}/share/vuetorrent";
+            ReverseProxySupportEnabled = true;
+            AuthSubnetWhitelistEnabled = true;
+            AuthSubnetWhitelist = lib.strings.join " ," [
+              "192.168.0.1/32"
+            ];
+          };
+        };*/
+      };
+    }
+  ];
+}