catarina: try to split radio service to isolated services (incomplete)

nixosConfigurations/catarina/default.nix

@@ -281,8 +281,6 @@
     fzf
     grc
 
-    gcc
-
     cachix
 
     gnupg

nixosConfigurations/catarina/hardware.nix

@@ -150,6 +150,12 @@
 
     defaultGateway = "192.168.156.1";
     nameservers = ["192.168.156.1" "8.8.8.8"];
+
+    nat = {
+      enable = true;
+      externalInterface = "enp9s0";
+      internalInterfaces = ["ve-+"];
+    };
   };
 
   services.logind.lidSwitchExternalPower = "ignore";

nixosConfigurations/catarina/services/radio.nix

@@ -1,19 +1,30 @@
 {config, ...}: {
+  containers.radio-synthwave = {
+    autoStart = true;
+    privateNetwork = true;
+
+    config = {
+      config,
+      pkgs,
+      lib,
+      ...
+    }: {
       services.mpd = {
         enable = true;
         musicDirectory = "/home/l-nafaryus/Music";
         network.listenAddress = "any";
-    network.startWhenNeeded = true;
+        #network.startWhenNeeded = true;
         user = "l-nafaryus";
+        network.port = 6600;
         extraConfig = ''
           audio_output {
             type "httpd"
             name "Radio"
-        port "6666"
+            port "6660"
             bind_to_address "127.0.0.1"
             encoder "lame"
             max_clients "0"
-        website "https://radio.elnafo.ru"
+            website "https://radio.elnafo.ru/synthwave"
             always_on "yes"
             tags "yes"
             bitrate "128"
@@ -22,11 +33,20 @@
         '';
       };
 
+      system.stateVersion = "24.05";
+
+      networking.firewall = {
+        enable = true;
+        allowedTCPPorts = [6600 6660];
+      };
+    };
+  };
+
   services.nginx.virtualHosts."radio.elnafo.ru" = {
     forceSSL = true;
     useACMEHost = "elnafo.ru";
-    locations."/synthwave".proxyPass = "http://127.0.0.1:6666";
+    locations."/synthwave".proxyPass = "http://127.0.0.1:6660";
   };
 
-  networking.firewall.allowedTCPPorts = [config.services.mpd.network.port];
+  networking.firewall.allowedTCPPorts = [6600];
 }