Sets up Wargame VODs for public access.

system/hosts/mcp/containers/blazestar.net/wargame-vods.nix

@@ -1,14 +1,16 @@
-{ config, pkgs, ... }:
+{ config, ... }:
 let
   inherit (import ../lib.nix config) blazestar;
   db_password = "wargame-vods/db/password";
   admin_token = "wargame-vods/admin-token";
+  youtube_api_key = "wargame-vods/youtube-api-key";
 in
 {
   sops = {
     secrets = {
       "${db_password}" = { };
       "${admin_token}" = { };
+      "${youtube_api_key}" = { };
     };
     templates."wargame-vods.env" = {
       mode = "0400";
@@ -21,8 +23,11 @@ in
         PGDATABASE=wargame-vods
         STATIC_DIR=/app/static
         PORT=8081
-        SSL_CERT_FILE=${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt
+        SSL_CERT_FILE=/etc/ssl/certs/ca-bundle.crt
+        CORS_ORIGINS=https://vods.blazestar.net
+        YOUTUBE_API_KEY=${config.sops.placeholder."${youtube_api_key}"}
       '';
+      restartUnits = [ "podman-wargame-vods.service" ];
     };
   };
   virtualisation.web-containers.containers.wargame-vods = {
@@ -30,6 +35,7 @@ in
     hostname = "vods";
     domain = blazestar;
     port = 8081;
+    public = true;
     volumes = [ ];
     dependsOn = [ "db" ];
     environmentFiles = [