Fixed indentation. Fixed Immich not working correctly behind Traefik (too restrictive headers).

modules/services/frigate.nix

@@ -20,6 +20,11 @@ helper.mkPodmanService {
   scheme = "https";
   dependencies = [ "traefik.service" "${config.numbus.services.dns}.service" "home-assistant.service" ];
   envFile = "/var/lib/numbus-server/home-assistant/.env";
+  dirPermissions = [
+    "1000:100 ${cfg.configDir}"
+    "1000:100 ${cfg.dataDir}"
+  ];
+  middlewares = [ "secureHeaders" ];
 
   extraOptions = {
     devices = mkOption {
@@ -52,10 +57,10 @@ helper.mkPodmanService {
         environment:
           - FRIGATE_MQTT_USER=$HOME_ASSISTANT_MQTT_USER
           - FRIGATE_MQTT_PASSWORD=$HOME_ASSISTANT_MQTT_PASSWORD
-${lib.optionalString (cfg.devices != []) ''
-        devices:
-${lib.concatStringsSep "\n" (map (d: "        - \"${d}\"") cfg.devices)}
-''}
+        ${lib.optionalString (cfg.devices != []) ''
+          devices:
+            ${lib.concatStringsSep "\n" (map (d: "            - \"${d}\"") cfg.devices)}
+        ''}
         security_opt:
           - no-new-privileges:true
         cap_drop: