···

       
23
       
23
       
 
       
          expr = "(builtins.getFlake (builtins.toString ./.)).currentSystem.options",

     

       
24
       
24
       
 
       
        },

     

       
25
       
25
       
 
       
        my_modules = {

     

       
26
       
26
       
-
       
          exper = "(pkgs.lib.evalModules { modules = (builtins.getFlake (builtins.toString ./.)).nixosModules; }).options"

     

       
27
       
27
       
-
       
        }

     

       
26
       
26
       
+
       
          exper = "(pkgs.lib.evalModules { modules = (builtins.getFlake (builtins.toString ./.)).nixosModules; }).options",

     

       
27
       
27
       
+
       
        },

     

       
28
       
28
       
 
       
      },

     

       
29
       
29
       
 
       
    },

     

       
30
       
30
       
 
       
  },

     

···

       
3
       
3
       
 
       


     

       
4
       
4
       
 
       
build:

     

       
5
       
5
       
 
       
    nixos-rebuild-ng build --flake . --accept-flake-config --verbose --show-trace \

     

       
6
       
6
       
+
       
      --max-jobs 3 --cores 6 \

     

       
6
       
7
       
 
       
    && nvd diff /run/current-system result

     

       
7
       
8
       
 
       


     

       
8
       
9
       
 
       
switch:

     

···

       
18
       
18
       
 
       
- [ ] Move all Docker containers to using native versions of databases, redis, etc.

     

       
19
       
19
       
 
       
  - Ensures higher performance and reduces the number of running containers.

     

       
20
       
20
       
 
       
  - https://github.com/felschr/nixos-config/blob/main/services/immich.nix for an example of how to do it

     

       
21
       
21
       
-
       
- [ ] Add Archivebox service(needs custom module)

     

       
22
       
22
       
-
       
- [ ] Add Immich service

     

       
23
       
21
       
 
       


     

       
24
       
22
       
 
       
## Zaphod

     

       
25
       
23
       
 
       


     

···

       
4
       
4
       
 
       
}:

     

       
5
       
5
       
 
       
pkgs.mkShellNoCC {

     

       
6
       
6
       
 
       
  packages = [

     

       
7
       
7
       
+
       
    # keep-sorted start

     

       
7
       
8
       
 
       
    pkgs.deadnix

     

       
8
       
9
       
 
       
    pkgs.just

     

       
9
       
10
       
 
       
    pkgs.nil

     

       
11
       
11
       
+
       
    pkgs.nix-output-monitor

     

       
10
       
12
       
 
       
    pkgs.nix-tree

     

       
13
       
13
       
+
       
    pkgs.nix-update

     

       
11
       
14
       
 
       
    pkgs.nixd

     

       
12
       
12
       
-
       
    pkgs.nix-output-monitor

     

       
13
       
15
       
 
       
    pkgs.nixfmt-rfc-style

     

       
14
       
14
       
-
       
    pkgs.statix

     

       
16
       
16
       
+
       
    pkgs.nixos-rebuild-ng

     

       
15
       
17
       
 
       
    pkgs.nvd

     

       
16
       
16
       
-
       
    pkgs.nixos-rebuild-ng

     

       
18
       
18
       
+
       
    pkgs.statix

     

       
19
       
19
       
+
       
    pkgs.tokei

     

       
20
       
20
       
+
       
    # keep-sorted endd

     

       
17
       
21
       
 
       
  ];

     

       
18
       
22
       
 
       
}

     

···

       
1
       
1
       
 
       
{

     

       
2
       
2
       
 
       
  "nodes": {

     

       
3
       
3
       
+
       
    "actor-typeahead-src": {

     

       
4
       
4
       
+
       
      "flake": false,

     

       
5
       
5
       
+
       
      "locked": {

     

       
6
       
6
       
+
       
        "lastModified": 1762835797,

     

       
7
       
7
       
+
       
        "narHash": "sha256-heizoWUKDdar6ymfZTnj3ytcEv/L4d4fzSmtr0HlXsQ=",

     

       
8
       
8
       
+
       
        "ref": "refs/heads/main",

     

       
9
       
9
       
+
       
        "rev": "677fe7f743050a4e7f09d4a6f87bbf1325a06f6b",

     

       
10
       
10
       
+
       
        "revCount": 6,

     

       
11
       
11
       
+
       
        "type": "git",

     

       
12
       
12
       
+
       
        "url": "https://tangled.org/@jakelazaroff.com/actor-typeahead"

     

       
13
       
13
       
+
       
      },

     

       
14
       
14
       
+
       
      "original": {

     

       
15
       
15
       
+
       
        "type": "git",

     

       
16
       
16
       
+
       
        "url": "https://tangled.org/@jakelazaroff.com/actor-typeahead"

     

       
17
       
17
       
+
       
      }

     

       
18
       
18
       
+
       
    },

     

       
3
       
19
       
 
       
    "agenix": {

     

       
4
       
20
       
 
       
      "inputs": {

     

       
5
       
21
       
 
       
        "darwin": "darwin",

     
···

       
59
       
75
       
 
       
        "treefmt-nix": []

     

       
60
       
76
       
 
       
      },

     

       
61
       
77
       
 
       
      "locked": {

     

       
62
       
62
       
-
       
        "lastModified": 1761641036,

     

       
63
       
63
       
-
       
        "narHash": "sha256-WyoAA5qBHimmWj0tuJMnkIq4o8dB01st6smx3ZzI/L0=",

     

       
78
       
78
       
+
       
        "lastModified": 1763946641,

     

       
79
       
79
       
+
       
        "narHash": "sha256-kPP7k2b+Dkd91yJO01y3l1F0t+Mqvv8+FrPfjcCwszg=",

     

       
64
       
80
       
 
       
        "owner": "nix-community",

     

       
65
       
81
       
 
       
        "repo": "buildbot-nix",

     

       
66
       
66
       
-
       
        "rev": "3cd0114c633815095fde7a3126e1dbd6ad2e673f",

     

       
82
       
82
       
+
       
        "rev": "cd32d1c420320383bfcc80c1b0b402b6a7eccc23",

     

       
67
       
83
       
 
       
        "type": "github"

     

       
68
       
84
       
 
       
      },

     

       
69
       
85
       
 
       
      "original": {

     
···

       
83
       
99
       
 
       
        ]

     

       
84
       
100
       
 
       
      },

     

       
85
       
101
       
 
       
      "locked": {

     

       
86
       
86
       
-
       
        "lastModified": 1762651107,

     

       
87
       
87
       
-
       
        "narHash": "sha256-V++8JREoP1TC6ROYByMAKx/cSyxza0tp1tUNOpq5Z4k=",

     

       
102
       
102
       
+
       
        "lastModified": 1764466211,

     

       
103
       
103
       
+
       
        "narHash": "sha256-rBK+usqfAP9ZuEthw9wMCwTKQgKUMmziuzrrkpDZdzY=",

     

       
88
       
104
       
 
       
        "owner": "caelestia-dots",

     

       
89
       
105
       
 
       
        "repo": "shell",

     

       
90
       
90
       
-
       
        "rev": "c0ea060ffecd3f38233652556d3085d094082400",

     

       
106
       
106
       
+
       
        "rev": "40813e520582c5df11f6d4c870a31900fe171cce",

     

       
91
       
107
       
 
       
        "type": "github"

     

       
92
       
108
       
 
       
      },

     

       
93
       
109
       
 
       
      "original": {

     
···

       
107
       
123
       
 
       
        ]

     

       
108
       
124
       
 
       
      },

     

       
109
       
125
       
 
       
      "locked": {

     

       
110
       
110
       
-
       
        "lastModified": 1762480719,

     

       
111
       
111
       
-
       
        "narHash": "sha256-TjTMNmndJJIxP/N6owC/CoAPiRuM99fNaQbZqHDtwLw=",

     

       
126
       
126
       
+
       
        "lastModified": 1764381410,

     

       
127
       
127
       
+
       
        "narHash": "sha256-WR/oQQjveFqQxo8oHngZuOVgBQINDgPe+lCXLeNhAAg=",

     

       
112
       
128
       
 
       
        "owner": "caelestia-dots",

     

       
113
       
129
       
 
       
        "repo": "cli",

     

       
114
       
114
       
-
       
        "rev": "9323fbf1b497204e17dff103cf412daf04a5c723",

     

       
130
       
130
       
+
       
        "rev": "ed12d4cb82600872a82feb577711be1148c7af35",

     

       
115
       
131
       
 
       
        "type": "github"

     

       
116
       
132
       
 
       
      },

     

       
117
       
133
       
 
       
      "original": {

     
···

       
125
       
141
       
 
       
        "nixpkgs": "nixpkgs"

     

       
126
       
142
       
 
       
      },

     

       
127
       
143
       
 
       
      "locked": {

     

       
128
       
128
       
-
       
        "lastModified": 1762510976,

     

       
129
       
129
       
-
       
        "narHash": "sha256-KGoSj8qMOOPaNE48RTtuNBbqOvKLTeklnRHWWvE/TXo=",

     

       
144
       
144
       
+
       
        "lastModified": 1764325801,

     

       
145
       
145
       
+
       
        "narHash": "sha256-LQ7tsrXs1wuB6KBwUctL3JlUsG/FWI2pCI6NkoO52dk=",

     

       
130
       
146
       
 
       
        "owner": "catppuccin",

     

       
131
       
147
       
 
       
        "repo": "nix",

     

       
132
       
132
       
-
       
        "rev": "728cb0a667ce37bb0c68557dba819c7fb54ff1c8",

     

       
148
       
148
       
+
       
        "rev": "a696fed6b9b6aa89ef495842cdca3fc2a7cef0de",

     

       
133
       
149
       
 
       
        "type": "github"

     

       
134
       
150
       
 
       
      },

     

       
135
       
151
       
 
       
      "original": {

     
···

       
184
       
200
       
 
       
    "dms": {

     

       
185
       
201
       
 
       
      "inputs": {

     

       
186
       
202
       
 
       
        "dgop": "dgop",

     

       
187
       
187
       
-
       
        "dms-cli": "dms-cli",

     

       
188
       
203
       
 
       
        "nixpkgs": [

     

       
189
       
204
       
 
       
          "nixpkgs"

     

       
190
       
205
       
 
       
        ]

     

       
191
       
206
       
 
       
      },

     

       
192
       
207
       
 
       
      "locked": {

     

       
193
       
193
       
-
       
        "lastModified": 1762714442,

     

       
194
       
194
       
-
       
        "narHash": "sha256-ptdW/V1X9td4Ym3ZO6NzXHU55nKzogQI1CUbqVP1PwU=",

     

       
208
       
208
       
+
       
        "lastModified": 1764553800,

     

       
209
       
209
       
+
       
        "narHash": "sha256-kHlx3E3K2UNWI1Hpbyl5zieoOVevZfwz8P/OcyViDHY=",

     

       
195
       
210
       
 
       
        "owner": "AvengeMedia",

     

       
196
       
211
       
 
       
        "repo": "DankMaterialShell",

     

       
197
       
197
       
-
       
        "rev": "0197961175ba8e4ed56f90a9a2a6d35f87a2f51a",

     

       
212
       
212
       
+
       
        "rev": "7959a795753d9f646cfb9e21cfb778adf7e5c933",

     

       
198
       
213
       
 
       
        "type": "github"

     

       
199
       
214
       
 
       
      },

     

       
200
       
215
       
 
       
      "original": {

     
···

       
203
       
218
       
 
       
        "type": "github"

     

       
204
       
219
       
 
       
      }

     

       
205
       
220
       
 
       
    },

     

       
206
       
206
       
-
       
    "dms-cli": {

     

       
207
       
207
       
-
       
      "inputs": {

     

       
208
       
208
       
-
       
        "nixpkgs": [

     

       
209
       
209
       
-
       
          "dms",

     

       
210
       
210
       
-
       
          "nixpkgs"

     

       
211
       
211
       
-
       
        ]

     

       
212
       
212
       
-
       
      },

     

       
213
       
213
       
-
       
      "locked": {

     

       
214
       
214
       
-
       
        "lastModified": 1762491516,

     

       
215
       
215
       
-
       
        "narHash": "sha256-oGLH5Gje/p2Hc1kO3m8P5eAZ7JldBI30EmwzEET4cNU=",

     

       
216
       
216
       
-
       
        "owner": "AvengeMedia",

     

       
217
       
217
       
-
       
        "repo": "danklinux",

     

       
218
       
218
       
-
       
        "rev": "050cf28a2963a7698ed4759736fe5fe77eee7cc2",

     

       
219
       
219
       
-
       
        "type": "github"

     

       
220
       
220
       
-
       
      },

     

       
221
       
221
       
-
       
      "original": {

     

       
222
       
222
       
-
       
        "owner": "AvengeMedia",

     

       
223
       
223
       
-
       
        "repo": "danklinux",

     

       
224
       
224
       
-
       
        "type": "github"

     

       
225
       
225
       
-
       
      }

     

       
226
       
226
       
-
       
    },

     

       
227
       
221
       
 
       
    "dms-plugins": {

     

       
228
       
222
       
 
       
      "flake": false,

     

       
229
       
223
       
 
       
      "locked": {

     

       
230
       
230
       
-
       
        "lastModified": 1762624195,

     

       
231
       
231
       
-
       
        "narHash": "sha256-zZigP1wet5mwZiXcAuzbWo4gPhPOOYLvG0DOOaWAJgQ=",

     

       
224
       
224
       
+
       
        "lastModified": 1764085668,

     

       
225
       
225
       
+
       
        "narHash": "sha256-KtOu12NVLdyho9T4EXJaReNhFO98nAXpemkb6yeOvwE=",

     

       
232
       
226
       
 
       
        "owner": "AvengeMedia",

     

       
233
       
227
       
 
       
        "repo": "dms-plugins",

     

       
234
       
234
       
-
       
        "rev": "759584dfe660d2f8af0c25f91884e0eb397d2424",

     

       
228
       
228
       
+
       
        "rev": "3bc66f186a8184cb8eca5fdfc0699cb4a828cd90",

     

       
235
       
229
       
 
       
        "type": "github"

     

       
236
       
230
       
 
       
      },

     

       
237
       
231
       
 
       
      "original": {

     
···

       
280
       
274
       
 
       
        ]

     

       
281
       
275
       
 
       
      },

     

       
282
       
276
       
 
       
      "locked": {

     

       
283
       
283
       
-
       
        "lastModified": 1759332252,

     

       
284
       
284
       
-
       
        "narHash": "sha256-zMPiXQmun2EIefsFlfkvcL6V2TcP0ASCjNbdaTQei68=",

     

       
285
       
285
       
-
       
        "owner": "NuschtOS",

     

       
286
       
286
       
-
       
        "repo": "dn42.nix",

     

       
287
       
287
       
-
       
        "rev": "4f786e87300f5f0361e4b6f3577e323b091d128b",

     

       
277
       
277
       
+
       
        "lastModified": 1764646680,

     

       
278
       
278
       
+
       
        "narHash": "sha256-HEVzGL23bev8CuZXbLgDZRWy+mD/qPZhRBpjag7G/dU=",

     

       
279
       
279
       
+
       
        "owner": "pyrox0",

     

       
280
       
280
       
+
       
        "repo": "dn43.nix",

     

       
281
       
281
       
+
       
        "rev": "c8b68602cf1ef696e6a9f9c25e8c177d4101331b",

     

       
288
       
282
       
 
       
        "type": "github"

     

       
289
       
283
       
 
       
      },

     

       
290
       
284
       
 
       
      "original": {

     

       
291
       
291
       
-
       
        "owner": "NuschtOS",

     

       
292
       
292
       
-
       
        "repo": "dn42.nix",

     

       
285
       
285
       
+
       
        "owner": "pyrox0",

     

       
286
       
286
       
+
       
        "repo": "dn43.nix",

     

       
293
       
287
       
 
       
        "type": "github"

     

       
294
       
288
       
 
       
      }

     

       
295
       
289
       
 
       
    },

     
···

       
342
       
336
       
 
       
        "nixpkgs-lib": "nixpkgs-lib"

     

       
343
       
337
       
 
       
      },

     

       
344
       
338
       
 
       
      "locked": {

     

       
345
       
345
       
-
       
        "lastModified": 1762440070,

     

       
346
       
346
       
-
       
        "narHash": "sha256-xxdepIcb39UJ94+YydGP221rjnpkDZUlykKuF54PsqI=",

     

       
339
       
339
       
+
       
        "lastModified": 1763759067,

     

       
340
       
340
       
+
       
        "narHash": "sha256-LlLt2Jo/gMNYAwOgdRQBrsRoOz7BPRkzvNaI/fzXi2Q=",

     

       
347
       
341
       
 
       
        "owner": "hercules-ci",

     

       
348
       
342
       
 
       
        "repo": "flake-parts",

     

       
349
       
349
       
-
       
        "rev": "26d05891e14c88eb4a5d5bee659c0db5afb609d8",

     

       
343
       
343
       
+
       
        "rev": "2cccadc7357c0ba201788ae99c4dfa90728ef5e0",

     

       
350
       
344
       
 
       
        "type": "github"

     

       
351
       
345
       
 
       
      },

     

       
352
       
346
       
 
       
      "original": {

     
···

       
417
       
411
       
 
       
        "systems": "systems_4"

     

       
418
       
412
       
 
       
      },

     

       
419
       
413
       
 
       
      "locked": {

     

       
420
       
420
       
-
       
        "lastModified": 1760925941,

     

       
421
       
421
       
-
       
        "narHash": "sha256-M+EJsr6z05heKk6iuh3RWZS+9gAMBwG9IyryACVpOy0=",

     

       
414
       
414
       
+
       
        "lastModified": 1764170522,

     

       
415
       
415
       
+
       
        "narHash": "sha256-4c9jCOfkKNRHJLXgOIcVcNSaw/XaiVaqesaLJn86wGA=",

     

       
422
       
416
       
 
       
        "owner": "tailscale",

     

       
423
       
417
       
 
       
        "repo": "golink",

     

       
424
       
424
       
-
       
        "rev": "42765dea97afa9f9f5ea167fb0df6f5372d78481",

     

       
418
       
418
       
+
       
        "rev": "6821994de926c565d3ef9fbf3cb0e0fcb780f4be",

     

       
425
       
419
       
 
       
        "type": "github"

     

       
426
       
420
       
 
       
      },

     

       
427
       
421
       
 
       
      "original": {

     
···

       
454
       
448
       
 
       
    },

     

       
455
       
449
       
 
       
    "hardware": {

     

       
456
       
450
       
 
       
      "locked": {

     

       
457
       
457
       
-
       
        "lastModified": 1762463231,

     

       
458
       
458
       
-
       
        "narHash": "sha256-hv1mG5j5PTbnWbtHHomzTus77pIxsc4x8VrMjc7+/YE=",

     

       
451
       
451
       
+
       
        "lastModified": 1764440730,

     

       
452
       
452
       
+
       
        "narHash": "sha256-ZlJTNLUKQRANlLDomuRWLBCH5792x+6XUJ4YdFRjtO4=",

     

       
459
       
453
       
 
       
        "owner": "nixos",

     

       
460
       
454
       
 
       
        "repo": "nixos-hardware",

     

       
461
       
461
       
-
       
        "rev": "52113c4f5cfd1e823001310e56d9c8d0699a6226",

     

       
455
       
455
       
+
       
        "rev": "9154f4569b6cdfd3c595851a6ba51bfaa472d9f3",

     

       
462
       
456
       
 
       
        "type": "github"

     

       
463
       
457
       
 
       
      },

     

       
464
       
458
       
 
       
      "original": {

     
···

       
499
       
493
       
 
       
        ]

     

       
500
       
494
       
 
       
      },

     

       
501
       
495
       
 
       
      "locked": {

     

       
502
       
502
       
-
       
        "lastModified": 1762704774,

     

       
503
       
503
       
-
       
        "narHash": "sha256-iodz4xQbULkHqetbPu5BCSWsVEzZiiNSv0/dzfH4XiE=",

     

       
496
       
496
       
+
       
        "lastModified": 1764544324,

     

       
497
       
497
       
+
       
        "narHash": "sha256-GVBGjO7UsmzLrlOJV8NlKSxukHaHencrJqWkCA6FkqI=",

     

       
504
       
498
       
 
       
        "owner": "nix-community",

     

       
505
       
499
       
 
       
        "repo": "home-manager",

     

       
506
       
506
       
-
       
        "rev": "be4a9233dd3f6104c9b0fdd3d56f953eb519a4c7",

     

       
500
       
500
       
+
       
        "rev": "e4e25a8c310fa45f2a8339c7972dc43d2845a612",

     

       
507
       
501
       
 
       
        "type": "github"

     

       
508
       
502
       
 
       
      },

     

       
509
       
503
       
 
       
      "original": {

     
···

       
618
       
612
       
 
       
        ]

     

       
619
       
613
       
 
       
      },

     

       
620
       
614
       
 
       
      "locked": {

     

       
621
       
621
       
-
       
        "lastModified": 1762660502,

     

       
622
       
622
       
-
       
        "narHash": "sha256-C9F1C31ys0V7mnp4EcDy7L1cLZw/sCTEXqqTtGnvu08=",

     

       
615
       
615
       
+
       
        "lastModified": 1764475780,

     

       
616
       
616
       
+
       
        "narHash": "sha256-77jL5H5x51ksLiOUDjY0ZK8e2T4ZXLhj3ap8ETvknWI=",

     

       
623
       
617
       
 
       
        "owner": "Mic92",

     

       
624
       
618
       
 
       
        "repo": "nix-index-database",

     

       
625
       
625
       
-
       
        "rev": "15c5451c63f4c612874a43846bfe3fa828b03eee",

     

       
619
       
619
       
+
       
        "rev": "5a3ff8c1a09003f399f43d5742d893c0b1ab8af0",

     

       
626
       
620
       
 
       
        "type": "github"

     

       
627
       
621
       
 
       
      },

     

       
628
       
622
       
 
       
      "original": {

     
···

       
633
       
627
       
 
       
    },

     

       
634
       
628
       
 
       
    "nixpkgs": {

     

       
635
       
629
       
 
       
      "locked": {

     

       
636
       
636
       
-
       
        "lastModified": 1762111121,

     

       
637
       
637
       
-
       
        "narHash": "sha256-4vhDuZ7OZaZmKKrnDpxLZZpGIJvAeMtK6FKLJYUtAdw=",

     

       
630
       
630
       
+
       
        "lastModified": 1763966396,

     

       
631
       
631
       
+
       
        "narHash": "sha256-6eeL1YPcY1MV3DDStIDIdy/zZCDKgHdkCmsrLJFiZf0=",

     

       
638
       
632
       
 
       
        "owner": "NixOS",

     

       
639
       
633
       
 
       
        "repo": "nixpkgs",

     

       
640
       
640
       
-
       
        "rev": "b3d51a0365f6695e7dd5cdf3e180604530ed33b4",

     

       
634
       
634
       
+
       
        "rev": "5ae3b07d8d6527c42f17c876e404993199144b6a",

     

       
641
       
635
       
 
       
        "type": "github"

     

       
642
       
636
       
 
       
      },

     

       
643
       
637
       
 
       
      "original": {

     
···

       
664
       
658
       
 
       
    },

     

       
665
       
659
       
 
       
    "nixpkgs-stalwart-fix": {

     

       
666
       
660
       
 
       
      "locked": {

     

       
667
       
667
       
-
       
        "lastModified": 1755293787,

     

       
668
       
668
       
-
       
        "narHash": "sha256-L+msFwg9jXAj4JmDFQF9BIg2kQhgUzexVmDYePfKMW8=",

     

       
661
       
661
       
+
       
        "lastModified": 1762728499,

     

       
662
       
662
       
+
       
        "narHash": "sha256-XtT/8ID3gz9RGk8ITBnktmodq5/ZG6tF60XSfuKSmro=",

     

       
669
       
663
       
 
       
        "owner": "pyrox0",

     

       
670
       
664
       
 
       
        "repo": "nixpkgs",

     

       
671
       
671
       
-
       
        "rev": "52f6d43ca3db097cde5d0bfb30db0af5bdf41103",

     

       
665
       
665
       
+
       
        "rev": "b5178ff139339638e98a1e5833add22b047f96d0",

     

       
672
       
666
       
 
       
        "type": "github"

     

       
673
       
667
       
 
       
      },

     

       
674
       
668
       
 
       
      "original": {

     
···

       
680
       
674
       
 
       
    },

     

       
681
       
675
       
 
       
    "nixpkgs_2": {

     

       
682
       
676
       
 
       
      "locked": {

     

       
683
       
683
       
-
       
        "lastModified": 315532800,

     

       
684
       
684
       
-
       
        "narHash": "sha256-RpDoXu4dMzS4Q3qq3vdlTXbL8ZLn42i5QPD5X0RPqT0=",

     

       
685
       
685
       
-
       
        "rev": "e1ebeec86b771e9d387dd02d82ffdc77ac753abc",

     

       
677
       
677
       
+
       
        "lastModified": 1764527385,

     

       
678
       
678
       
+
       
        "narHash": "sha256-gpwyCnyi2or0InBXe+4I9YeED3Uly3EGH58qvVnchBY=",

     

       
679
       
679
       
+
       
        "rev": "23258e03aaa49b3a68597e3e50eb0cbce7e42e9d",

     

       
686
       
680
       
 
       
        "type": "tarball",

     

       
687
       
687
       
-
       
        "url": "https://releases.nixos.org/nixpkgs/nixpkgs-25.11pre890836.e1ebeec86b77/nixexprs.tar.xz"

     

       
681
       
681
       
+
       
        "url": "https://releases.nixos.org/nixpkgs/nixpkgs-26.05pre904683.23258e03aaa4/nixexprs.tar.xz"

     

       
688
       
682
       
 
       
      },

     

       
689
       
683
       
 
       
      "original": {

     

       
690
       
684
       
 
       
        "type": "tarball",

     
···

       
714
       
708
       
 
       
        ]

     

       
715
       
709
       
 
       
      },

     

       
716
       
710
       
 
       
      "locked": {

     

       
717
       
717
       
-
       
        "lastModified": 1761897390,

     

       
718
       
718
       
-
       
        "narHash": "sha256-er4gYrIoThYLjlsOMTysoRfn67d1Gci+ZpqDrtQxrA0=",

     

       
711
       
711
       
+
       
        "lastModified": 1764482797,

     

       
712
       
712
       
+
       
        "narHash": "sha256-ynV90KoBrPe38YFlKAHtPFk4Ee3IANUsIFGxRaq7H/s=",

     

       
719
       
713
       
 
       
        "owner": "quickshell-mirror",

     

       
720
       
714
       
 
       
        "repo": "quickshell",

     

       
721
       
721
       
-
       
        "rev": "fc704e6b5d445899a1565955268c91942a4f263f",

     

       
715
       
715
       
+
       
        "rev": "d24e8e9736287d01ee73ef9d573d2bc316a62d5c",

     

       
722
       
716
       
 
       
        "type": "github"

     

       
723
       
717
       
 
       
      },

     

       
724
       
718
       
 
       
      "original": {

     
···

       
844
       
838
       
 
       
    },

     

       
845
       
839
       
 
       
    "tangled": {

     

       
846
       
840
       
 
       
      "inputs": {

     

       
841
       
841
       
+
       
        "actor-typeahead-src": "actor-typeahead-src",

     

       
847
       
842
       
 
       
        "flake-compat": "flake-compat_2",

     

       
848
       
843
       
 
       
        "gomod2nix": "gomod2nix",

     

       
849
       
844
       
 
       
        "htmx-src": "htmx-src",

     
···

       
856
       
851
       
 
       
        "sqlite-lib-src": "sqlite-lib-src"

     

       
857
       
852
       
 
       
      },

     

       
858
       
853
       
 
       
      "locked": {

     

       
859
       
859
       
-
       
        "lastModified": 1762522051,

     

       
860
       
860
       
-
       
        "narHash": "sha256-qDVJ2sEQL0TJbWer6ByhhQrzHE1bZI3U1mmCk0sPZqo=",

     

       
854
       
854
       
+
       
        "lastModified": 1764494836,

     

       
855
       
855
       
+
       
        "narHash": "sha256-u1i7aMo0fTQ6WVdOZhG2fo/gEx2Fq8+3URmuqEBZGWI=",

     

       
861
       
856
       
 
       
        "ref": "refs/heads/master",

     

       
862
       
862
       
-
       
        "rev": "2e5a4cde904d86825cefe5971e68f1bdfb1dd36f",

     

       
863
       
863
       
-
       
        "revCount": 1614,

     

       
857
       
857
       
+
       
        "rev": "d37f774fb8c60aa2bd0cb965c9884457d0afb660",

     

       
858
       
858
       
+
       
        "revCount": 1689,

     

       
864
       
859
       
 
       
        "type": "git",

     

       
865
       
860
       
 
       
        "url": "https://tangled.org/@tangled.org/core"

     

       
866
       
861
       
 
       
      },

     
···

       
876
       
871
       
 
       
        ]

     

       
877
       
872
       
 
       
      },

     

       
878
       
873
       
 
       
      "locked": {

     

       
879
       
879
       
-
       
        "lastModified": 1762410071,

     

       
880
       
880
       
-
       
        "narHash": "sha256-aF5fvoZeoXNPxT0bejFUBXeUjXfHLSL7g+mjR/p5TEg=",

     

       
874
       
874
       
+
       
        "lastModified": 1762938485,

     

       
875
       
875
       
+
       
        "narHash": "sha256-AlEObg0syDl+Spi4LsZIBrjw+snSVU4T8MOeuZJUJjM=",

     

       
881
       
876
       
 
       
        "owner": "numtide",

     

       
882
       
877
       
 
       
        "repo": "treefmt-nix",

     

       
883
       
883
       
-
       
        "rev": "97a30861b13c3731a84e09405414398fbf3e109f",

     

       
878
       
878
       
+
       
        "rev": "5b4ee75aeefd1e2d5a1cc43cf6ba65eba75e83e4",

     

       
884
       
879
       
 
       
        "type": "github"

     

       
885
       
880
       
 
       
      },

     

       
886
       
881
       
 
       
      "original": {

     

···

       
51
       
51
       
 
       
      url = "github:catppuccin/nix";

     

       
52
       
52
       
 
       
    };

     

       
53
       
53
       
 
       
    dn42 = {

     

       
54
       
54
       
-
       
      url = "github:NuschtOS/dn42.nix";

     

       
54
       
54
       
+
       
      url = "github:pyrox0/dn43.nix";

     

       
55
       
55
       
 
       
      inputs.nixpkgs.follows = "nixpkgs";

     

       
56
       
56
       
 
       
    };

     

       
57
       
57
       
 
       
    dms = {

     

···

       
10
       
10
       
 
       
{

     

       
11
       
11
       
 
       
  options.py.profiles.base.enable = lib.mkEnableOption "Base Home Profile";

     

       
12
       
12
       
 
       
  config = lib.mkIf cfg.enable {

     

       
13
       
13
       
-
       
    home.stateVersion = "25.11";

     

       
13
       
13
       
+
       
    home.stateVersion = "26.05";

     

       
14
       
14
       
 
       
    home.language = {

     

       
15
       
15
       
 
       
      base = "en_US.utf8";

     

       
16
       
16
       
 
       
    };

     

···

       
8
       
8
       
 
       
  cfg = config.py.profiles.desktop;

     

       
9
       
9
       
 
       
  inherit (cfg) shell;

     

       
10
       
10
       
 
       
  inherit (lib) mkIf mkDefault mkEnableOption;

     

       
11
       
11
       
+
       


     

       
12
       
12
       
+
       
  mkShellOption =

     

       
13
       
13
       
+
       
    name: var:

     

       
14
       
14
       
+
       
    lib.mkOption {

     

       
15
       
15
       
+
       
      type = lib.types.bool;

     

       
16
       
16
       
+
       
      default = if (shell == var) then true else false;

     

       
17
       
17
       
+
       
      description = "Enable ${name}";

     

       
18
       
18
       
+
       
      readOnly = true;

     

       
19
       
19
       
+
       
      visible = false;

     

       
20
       
20
       
+
       
      internal = true;

     

       
21
       
21
       
+
       
    };

     

       
11
       
22
       
 
       
in

     

       
12
       
23
       
 
       
{

     

       
13
       
24
       
 
       
  options.py.profiles.desktop = {

     
···

       
20
       
31
       
 
       
      default = "caelestia";

     

       
21
       
32
       
 
       
      description = "The desktop shell to use in the graphical environment";

     

       
22
       
33
       
 
       
    };

     

       
23
       
23
       
-
       
    caelestia = lib.mkOption {

     

       
24
       
24
       
-
       
      type = lib.types.bool;

     

       
25
       
25
       
-
       
      default = if (shell == "caelestia") then true else false;

     

       
26
       
26
       
-
       
      description = "Enable caelestia shell";

     

       
27
       
27
       
-
       
    };

     

       
28
       
28
       
-
       
    dms = lib.mkOption {

     

       
29
       
29
       
-
       
      type = lib.types.bool;

     

       
30
       
30
       
-
       
      default = if (shell == "dms") then true else false;

     

       
31
       
31
       
-
       
      description = "Enable DMS";

     

       
32
       
32
       
-
       
    };

     

       
34
       
34
       
+
       
    caelestia = mkShellOption "Caelestia shell" "caelestia";

     

       
35
       
35
       
+
       
    dms = mkShellOption "DMS" "dms";

     

       
33
       
36
       
 
       
  };

     

       
34
       
37
       
 
       
  config = mkIf cfg.enable {

     

       
35
       
38
       
 
       
    py.profiles.base.enable = true;

     

···

       
1
       
1
       
 
       
{

     

       
2
       
2
       
 
       
  imports = [

     

       
3
       
3
       
+
       
    # keep-sorted start

     

       
3
       
4
       
 
       
    ./caelestia

     

       
4
       
5
       
 
       
    ./chromium

     

       
5
       
6
       
 
       
    ./dms

     
···

       
17
       
18
       
 
       
    ./starship

     

       
18
       
19
       
 
       
    ./vscodium

     

       
19
       
20
       
 
       
    ./zed-editor

     

       
21
       
21
       
+
       
    # keep-sorted end

     

       
20
       
22
       
 
       
  ];

     

       
21
       
23
       
 
       
}

     

···

       
24
       
24
       
 
       
      pkgs.gcc

     

       
25
       
25
       
 
       
      pkgs.go

     

       
26
       
26
       
 
       
      pkgs.nodejs

     

       
27
       
27
       
-
       
    ]

     

       
28
       
28
       
-
       
    ++ lib.optionals config.py.profiles.gui.enable [

     

       
29
       
29
       
-
       
      pkgs.ffmpegthumbnailer

     

       
30
       
30
       
-
       
      pkgs.fontpreview

     

       
31
       
31
       
-
       
      pkgs.poppler

     

       
32
       
32
       
-
       
      pkgs.ueberzug

     

       
27
       
27
       
+
       
      # ]

     

       
28
       
28
       
+
       
      # ++ lib.optionals config.py.profiles.gui.enable [

     

       
29
       
29
       
+
       
      #   pkgs.ffmpegthumbnailer

     

       
30
       
30
       
+
       
      #   pkgs.fontpreview

     

       
31
       
31
       
+
       
      #   pkgs.poppler

     

       
32
       
32
       
+
       
      #   pkgs.ueberzug

     

       
33
       
33
       
 
       
    ];

     

       
34
       
34
       
 
       
  };

     

       
35
       
35
       
 
       
}

     

···

       
12
       
12
       
 
       
    settings = {

     

       
13
       
13
       
 
       
      general = {

     

       
14
       
14
       
 
       
        lock_cmd = "loginctl lock-session";

     

       
15
       
15
       
-
       
        before_sleep_cmd = "loginctl lock-session";

     

       
15
       
15
       
+
       
        # before_sleep_cmd = "loginctl lock-session";

     

       
16
       
16
       
 
       
        after_sleep_cmd = "hyprctl dispatch dpms on";

     

       
17
       
17
       
 
       
        inhibit_sleep = 3;

     

       
18
       
18
       
 
       
      };

     

···

       
41
       
41
       
 
       
          "vps"

     

       
42
       
42
       
 
       
        ];

     

       
43
       
43
       
 
       
        modules = [

     

       
44
       
44
       
-
       
          inputs.self.nixosModules.dn42Wireguard

     

       
45
       
44
       
 
       
          inputs.dn42.nixosModules.default

     

       
46
       
45
       
 
       
        ];

     

       
47
       
46
       
 
       
      };

     

···

       
8
       
8
       
 
       
    ./hardware.nix

     

       
9
       
9
       
 
       


     

       
10
       
10
       
 
       
    # Running Services

     

       
11
       
11
       
+
       
    # keep-sorted start

     

       
11
       
12
       
 
       
    ./services/anubis.nix

     

       
12
       
12
       
-
       
    # ./services/authentik.nix

     

       
13
       
13
       
 
       
    ./services/avahi.nix

     

       
14
       
14
       
 
       
    ./services/bots.nix

     

       
15
       
15
       
 
       
    ./services/deemix.nix

     
···

       
17
       
17
       
 
       
    ./services/git.nix

     

       
18
       
18
       
 
       
    ./services/golink.nix

     

       
19
       
19
       
 
       
    ./services/grafana.nix

     

       
20
       
20
       
-
       
    # ./services/iceshrimp.nix

     

       
20
       
20
       
+
       
    ./services/immich.nix

     

       
21
       
21
       
 
       
    ./services/jellyfin.nix

     

       
22
       
22
       
 
       
    ./services/matrix.nix

     

       
23
       
23
       
 
       
    ./services/miniflux.nix

     

       
24
       
24
       
+
       
    ./services/nextcloud

     

       
24
       
25
       
 
       
    ./services/nginx.nix

     

       
25
       
25
       
-
       
    ./services/nextcloud

     

       
26
       
26
       
 
       
    ./services/pinchflat.nix

     

       
27
       
27
       
-
       
    ./services/pingvin-share.nix

     

       
28
       
27
       
 
       
    ./services/planka.nix

     

       
29
       
28
       
 
       
    ./services/pocket-id.nix

     

       
30
       
29
       
 
       
    ./services/podman.nix

     

       
31
       
30
       
 
       
    ./services/postgres.nix

     

       
32
       
31
       
 
       
    ./services/prometheus.nix

     

       
33
       
33
       
-
       
    # ./services/redlib.nix

     

       
34
       
32
       
 
       
    ./services/scrutiny.nix

     

       
35
       
33
       
 
       
    ./services/syncthing.nix

     

       
36
       
34
       
 
       
    ./services/tailscale.nix

     

       
37
       
35
       
 
       
    ./services/tangled.nix

     

       
38
       
36
       
 
       
    ./services/vaultwarden.nix

     

       
39
       
37
       
 
       
    ./services/zfs.nix

     

       
38
       
38
       
+
       
    # keep-sorted end

     

       
40
       
39
       
 
       
  ];

     

       
41
       
40
       
 
       
  nix.settings.max-jobs = 12;

     

       
42
       
41
       
 
       
  networking = {

     

···

       
1
       
1
       
 
       
{

     

       
2
       
2
       
 
       
  config,

     

       
3
       
3
       
+
       
  self',

     

       
3
       
4
       
 
       
  ...

     

       
4
       
5
       
 
       
}:

     

       
5
       
6
       
 
       
{

     
···

       
15
       
16
       
 
       
        ED25519_PRIVATE_KEY_HEX_FILE = config.age.secrets.anubis-key.path;

     

       
16
       
17
       
 
       
        OG_PASSTHROUGH = true;

     

       
17
       
18
       
 
       
        OG_CACHE_CONSIDER_HOST = true;

     

       
19
       
19
       
+
       
        POLICY_FNAME = "${self'.packages.anubis-files}/policies/default.yaml";

     

       
18
       
20
       
 
       
      };

     

       
19
       
21
       
 
       
    };

     

       
20
       
22
       
 
       
    age.secrets.anubis-key = {

     

···

       
1
       
1
       
-
       
{

     

       
2
       
2
       
-
       
  config,

     

       
3
       
3
       
-
       
  self,

     

       
4
       
4
       
-
       
  ...

     

       
5
       
5
       
-
       
}:

     

       
6
       
6
       
-
       
let

     

       
7
       
7
       
-
       
  d = self.lib.data.services.authentik;

     

       
8
       
8
       
-
       
in

     

       
9
       
9
       
-
       
{

     

       
10
       
10
       
-
       
  virtualisation.oci-containers.containers =

     

       
11
       
11
       
-
       
    let

     

       
12
       
12
       
-
       
      authentikVersion = "2025.4";

     

       
13
       
13
       
-
       
      base = {

     

       
14
       
14
       
-
       
        environmentFiles = [ config.age.secrets.authentik-env.path ];

     

       
15
       
15
       
-
       
        extraOptions = [ "--network=authentik" ];

     

       
16
       
16
       
-
       
      };

     

       
17
       
17
       
-
       
      authentikBase = base // {

     

       
18
       
18
       
-
       
        image = "ghcr.io/goauthentik/server:${authentikVersion}";

     

       
19
       
19
       
-
       
        environment = {

     

       
20
       
20
       
-
       
          AUTHENTIK_REDIS__HOST = "authentik-redict";

     

       
21
       
21
       
-
       


     

       
22
       
22
       
-
       
          # Postgres Settings

     

       
23
       
23
       
-
       
          AUTHENTIK_POSTGRESQL__HOST = "authentik-db";

     

       
24
       
24
       
-
       
          AUTHENTIK_POSTGRESQL__PORT = "5432";

     

       
25
       
25
       
-
       
          AUTHENTIK_POSTGRESQL__USER = "authentik";

     

       
26
       
26
       
-
       
          AUTHENTIK_POSTGRESQL__NAME = "authentik";

     

       
27
       
27
       
-
       
          AUTHENTIK_POSTGRESQL__PASSWORD = "\${PG_PASS}";

     

       
28
       
28
       
-
       


     

       
29
       
29
       
-
       
          # Disable error reporting

     

       
30
       
30
       
-
       
          AUTHENTIK_ERROR_REPORTING__ENABLED = "false";

     

       
31
       
31
       
-
       


     

       
32
       
32
       
-
       
          # Avatars are an attribute based on an uploaded file

     

       
33
       
33
       
-
       
          AUTHENTIK_AVATARS = "attributes.user.avatar";

     

       
34
       
34
       
-
       


     

       
35
       
35
       
-
       
          # Email Settings

     

       
36
       
36
       
-
       
          AUTHENTIK_EMAIL__HOST = "mail.pyrox.dev";

     

       
37
       
37
       
-
       
          AUTHENTIK_EMAIL__USERNAME = "auth@pyrox.dev";

     

       
38
       
38
       
-
       
          AUTHENTIK_EMAIL__PORT = "465";

     

       
39
       
39
       
-
       
          AUTHENTIK_EMAIL__USE_TLS = "true";

     

       
40
       
40
       
-
       
          AUTHENTIK_EMAIL__FROM = "PyroServ Auth <auth@pyrox.dev>";

     

       
41
       
41
       
-
       
        };

     

       
42
       
42
       
-
       
      };

     

       
43
       
43
       
-
       
      authentikVols = [

     

       
44
       
44
       
-
       
        "/var/lib/authentik/media:/media"

     

       
45
       
45
       
-
       
        "/var/lib/authentik/templates:/templates"

     

       
46
       
46
       
-
       
      ];

     

       
47
       
47
       
-
       
    in

     

       
48
       
48
       
-
       
    {

     

       
49
       
49
       
-
       
      authentik-db = base // {

     

       
50
       
50
       
-
       
        image = "postgres:17-alpine";

     

       
51
       
51
       
-
       
        volumes = [ "/var/lib/authentik/db:/var/lib/postgresql/data" ];

     

       
52
       
52
       
-
       
        environment = {

     

       
53
       
53
       
-
       
          POSTGRES_PASSWORD = "\${PG_PASS}";

     

       
54
       
54
       
-
       
          POSTGRES_USER = "authentik";

     

       
55
       
55
       
-
       
          POSTGRES_DB = "authentik";

     

       
56
       
56
       
-
       
        };

     

       
57
       
57
       
-
       
      };

     

       
58
       
58
       
-
       
      authentik-redict = {

     

       
59
       
59
       
-
       
        image = "registry.redict.io/redict:alpine";

     

       
60
       
60
       
-
       
        extraOptions = [ "--network=authentik" ];

     

       
61
       
61
       
-
       
      };

     

       
62
       
62
       
-
       
      authentik-server = authentikBase // {

     

       
63
       
63
       
-
       
        cmd = [ "server" ];

     

       
64
       
64
       
-
       
        ports = [

     

       
65
       
65
       
-
       
          "${toString d.port}:9000"

     

       
66
       
66
       
-
       
          "6943:9443"

     

       
67
       
67
       
-
       
          "9301:9300"

     

       
68
       
68
       
-
       
        ];

     

       
69
       
69
       
-
       
        volumes = authentikVols ++ [ "/var/lib/authentik/custom.css:/web/dist/custom.css" ];

     

       
70
       
70
       
-
       
      };

     

       
71
       
71
       
-
       
      authentik-worker = authentikBase // {

     

       
72
       
72
       
-
       
        cmd = [ "worker" ];

     

       
73
       
73
       
-
       
        volumes = authentikVols ++ [ "/var/lib/authentik/certs:/certs" ];

     

       
74
       
74
       
-
       
      };

     

       
75
       
75
       
-
       
      authentik-ldap = base // {

     

       
76
       
76
       
-
       
        image = "ghcr.io/goauthentik/ldap:${authentikVersion}";

     

       
77
       
77
       
-
       
        ports = [

     

       
78
       
78
       
-
       
          "389:3389"

     

       
79
       
79
       
-
       
          "636:6636"

     

       
80
       
80
       
-
       
        ];

     

       
81
       
81
       
-
       
        environment = {

     

       
82
       
82
       
-
       
          AUTHENTIK_HOST = "https://${d.extUrl}";

     

       
83
       
83
       
-
       
          AUTHENTIK_INSECURE = "false";

     

       
84
       
84
       
-
       
        };

     

       
85
       
85
       
-
       
      };

     

       
86
       
86
       
-
       
    };

     

       
87
       
87
       
-
       
  age.secrets.authentik-env = {

     

       
88
       
88
       
-
       
    file = ./secrets/authentik-env.age;

     

       
89
       
89
       
-
       
    owner = "thehedgehog";

     

       
90
       
90
       
-
       
    group = "misc";

     

       
91
       
91
       
-
       
  };

     

       
92
       
92
       
-
       
}

     

···

       
1
       
1
       
-
       
{

     

       
2
       
2
       
-
       
  services.bookstack = {

     

       
3
       
3
       
-
       
    enable = true;

     

       
4
       
4
       
-
       
  };

     

       
5
       
5
       
-
       
}

     

···

       
19
       
19
       
 
       
      description = "GDQ Calendar Updater";

     

       
20
       
20
       
 
       
      path = [ pyWithLibs ];

     

       
21
       
21
       
 
       
      serviceConfig = {

     

       
22
       
22
       
-
       
        ExecStart = "${lib.getExe pyWithLibs} gdq_cal_ics_exporter.py--fatales --gcal --disable_general";

     

       
22
       
22
       
+
       
        ExecStart = "${lib.getExe pyWithLibs} gdq_cal_ics_exporter.py --fatales --gcal --disable_general";

     

       
23
       
23
       
 
       
        Type = "oneshot";

     

       
24
       
24
       
 
       
        WorkingDirectory = "/home/thehedgehog/gdq-cals/";

     

       
25
       
25
       
 
       
        User = "thehedgehog";

     

···

       
41
       
41
       
 
       
    };

     

       
42
       
42
       
 
       
    settings = {

     

       
43
       
43
       
 
       
      DEFAULT = {

     

       
44
       
44
       
-
       
        APP_NAME = "PyroNet Git";

     

       
44
       
44
       
+
       
        APP_NAME = "dishNet Git";

     

       
45
       
45
       
 
       
        RUN_MODE = "prod";

     

       
46
       
46
       
 
       
      };

     

       
47
       
47
       
 
       
      attachment = {

     

       
48
       
48
       
 
       
        MAX_SIZE = 200;

     

       
49
       
49
       
 
       
      };

     

       
50
       
50
       
-
       
      log."logger.router.MODE" = "";

     

       
50
       
50
       
+
       
      log.LOGGER_ROUTER_MODE = "";

     

       
51
       
51
       
 
       
      mailer = {

     

       
52
       
52
       
 
       
        ENABLED = true;

     

       
53
       
53
       
-
       
        FROM = "PyroNet Git <git@pyrox.dev>";

     

       
53
       
53
       
+
       
        FROM = "dishNet Git <git@pyrox.dev>";

     

       
54
       
54
       
 
       
        PROTOCOL = "smtps";

     

       
55
       
55
       
 
       
        SMTP_ADDR = "mail.pyrox.dev";

     

       
56
       
56
       
 
       
        SMTP_PORT = 465;

     
···

       
66
       
66
       
 
       
      };

     

       
67
       
67
       
 
       
      "ui.meta" = {

     

       
68
       
68
       
 
       
        AUTHOR = "dish";

     

       
69
       
69
       
-
       
        DESCRIPTION = "PyroNet Git Services";

     

       
69
       
69
       
+
       
        DESCRIPTION = "dishNet Git Services";

     

       
70
       
70
       
 
       
      };

     

       
71
       
71
       
 
       
      metrics = {

     

       
72
       
72
       
 
       
        ENABLED = true;

     
···

       
85
       
85
       
 
       
        ISSUE_INDEXER_PATH = "indexers/issues.bleve";

     

       
86
       
86
       
 
       
        # Enable repo indexing

     

       
87
       
87
       
 
       
        REPO_INDEXER_ENABLED = true;

     

       
88
       
88
       
-
       
        REPO_INDEXER_REPO_TYPES = "sources,forks,templates,mirrors";

     

       
88
       
88
       
+
       
        REPO_INDEXER_REPO_TYPES = "sources,forks";

     

       
89
       
89
       
 
       
        REPO_INDEXER_TYPE = "bleve";

     

       
90
       
90
       
 
       
        REPO_INDEXER_PATH = "indexers/repos.bleve";

     

       
91
       
91
       
 
       
      };

     

···

       
40
       
40
       
 
       
      };

     

       
41
       
41
       
 
       
      smtp = {

     

       
42
       
42
       
 
       
        enabled = true;

     

       
43
       
43
       
-
       
        user = "grafana@thehedgehog.me";

     

       
44
       
44
       
-
       
        from_address = "grafana@thehedgehog.me";

     

       
45
       
45
       
-
       
        host = "smtp.migadu.com:465";

     

       
43
       
43
       
+
       
        user = "grafana@pyrox.dev";

     

       
44
       
44
       
+
       
        from_address = "grafana@pyrox.dev";

     

       
45
       
45
       
+
       
        host = "mail.pyrox.dev:465";

     

       
46
       
46
       
 
       
        password = "$__file{${config.age.secrets.grafana-smtp-password.path}}";

     

       
47
       
47
       
 
       
      };

     

       
48
       
48
       
 
       
    };

     
···

       
62
       
62
       
 
       
  services.anubis.instances.grafana = {

     

       
63
       
63
       
 
       
    settings = {

     

       
64
       
64
       
 
       
      BIND = ":${toString d.anubis}";

     

       
65
       
65
       
-
       
      POLICY_FNAME = "${self'.packages.anubis-files}/policies/grafana.yaml";

     

       
65
       
65
       
+
       
      POLICY_FNAME = "${self'.packages.anubis-files}/policies/default.yaml";

     

       
66
       
66
       
 
       
      TARGET = "http://localhost:${toString d.port}";

     

       
67
       
67
       
 
       
    };

     

       
68
       
68
       
 
       
  };

     

···

       
1
       
1
       
-
       
{

     

       
2
       
2
       
-
       
  config,

     

       
3
       
3
       
-
       
  inputs,

     

       
4
       
4
       
-
       
  pkgs,

     

       
5
       
5
       
-
       
  lib,

     

       
6
       
6
       
-
       
  self,

     

       
7
       
7
       
-
       
  ...

     

       
8
       
8
       
-
       
}:

     

       
9
       
9
       
-
       
let

     

       
10
       
10
       
-
       


     

       
11
       
11
       
-
       
  d = self.lib.data.services.iceshrimp;

     

       
12
       
12
       
-
       


     

       
13
       
13
       
-
       
  package = inputs.iceshrimp.packages.x86_64-linux.iceshrimp-pre.overrideAttrs rec {

     

       
14
       
14
       
-
       
    version = "2023.12.8-pyrox1";

     

       
15
       
15
       
-
       
    src = pkgs.fetchgit {

     

       
16
       
16
       
-
       
      url = "https://iceshrimp.dev/pyrox/iceshrimp";

     

       
17
       
17
       
-
       
      hash = "sha256-hxZ3rVVAiAMFAYhZ2o+WhlMuhjbt5EyHKOl1VyyL5RA=";

     

       
18
       
18
       
-
       
      rev = "v${version}";

     

       
19
       
19
       
-
       
      fetchLFS = true;

     

       
20
       
20
       
-
       
      deepClone = false;

     

       
21
       
21
       
-
       
    };

     

       
22
       
22
       
-
       
    patches = [ ];

     

       
23
       
23
       
-
       
  };

     

       
24
       
24
       
-
       
in

     

       
25
       
25
       
-
       
{

     

       
26
       
26
       
-
       
  services.iceshrimp = {

     

       
27
       
27
       
-
       
    inherit package;

     

       
28
       
28
       
-
       
    enable = false;

     

       
29
       
29
       
-
       
    secretConfig = config.age.secrets.iceshrimp-secret-config.path;

     

       
30
       
30
       
-
       
    dbPasswordFile = config.age.secrets.iceshrimp-db-password.path;

     

       
31
       
31
       
-
       
    createDb = true;

     

       
32
       
32
       
-
       
    configureNginx.enable = false;

     

       
33
       
33
       
-
       
    settings = {

     

       
34
       
34
       
-
       
      inherit (d) port;

     

       
35
       
35
       
-
       
      url = "https://${d.extUrl}";

     

       
36
       
36
       
-
       
      accountDomain = "pyrox.dev";

     

       
37
       
37
       
-
       
      redis.port = 6997;

     

       
38
       
38
       
-
       
      maxNoteLength = 16384;

     

       
39
       
39
       
-
       
      maxCaptionLength = 8192;

     

       
40
       
40
       
-
       
      clusterLimit = 4;

     

       
41
       
41
       
-
       
      deliverJobConcurrency = 192;

     

       
42
       
42
       
-
       
      inboxJobConcurrency = 32;

     

       
43
       
43
       
-
       
      deliverJobPerSec = 256;

     

       
44
       
44
       
-
       
      inboxJobPerSec = 32;

     

       
45
       
45
       
-
       
      outgoingAddressFamily = "dual";

     

       
46
       
46
       
-
       
      # See the withdrawal patches for obliterate info

     

       
47
       
47
       
-
       
      enableObliterate = true;

     

       
48
       
48
       
-
       
      obliterateJobPerSec = 16;

     

       
49
       
49
       
-
       
      obliterateJobMaxAttempts = 3;

     

       
50
       
50
       
-
       
      mediaCleanup = {

     

       
51
       
51
       
-
       
        cron = true;

     

       
52
       
52
       
-
       
        maxAgeDays = 30;

     

       
53
       
53
       
-
       
        cleanAvatars = true;

     

       
54
       
54
       
-
       
        cleanHeaders = true;

     

       
55
       
55
       
-
       
      };

     

       
56
       
56
       
-
       
      htmlCache = {

     

       
57
       
57
       
-
       
        ttl = "6h";

     

       
58
       
58
       
-
       
        prewarm = true;

     

       
59
       
59
       
-
       
        dbFallback = true;

     

       
60
       
60
       
-
       
      };

     

       
61
       
61
       
-
       
      wordMuteCache.ttl = "24h";

     

       
62
       
62
       
-
       
      isManagedHosting = true;

     

       
63
       
63
       
-
       
      email = {

     

       
64
       
64
       
-
       
        managed = true;

     

       
65
       
65
       
-
       
        address = "social@pyrox.dev";

     

       
66
       
66
       
-
       
        host = "mail.pyrox.dev";

     

       
67
       
67
       
-
       
        port = 465;

     

       
68
       
68
       
-
       
        user = "social@pyrox.dev";

     

       
69
       
69
       
-
       
        useImplicitSslTls = true;

     

       
70
       
70
       
-
       
      };

     

       
71
       
71
       
-
       
      objectStorage = {

     

       
72
       
72
       
-
       
        managed = true;

     

       
73
       
73
       
-
       
        baseUrl = "https://pool.jortage.com/socialpyroxdev";

     

       
74
       
74
       
-
       
        bucket = "socialpyroxdev";

     

       
75
       
75
       
-
       
        prefix = "mkmedia";

     

       
76
       
76
       
-
       
        endpoint = "pool-api.jortage.com";

     

       
77
       
77
       
-
       
        region = "jort";

     

       
78
       
78
       
-
       
        useSsl = true;

     

       
79
       
79
       
-
       
        connnectOverProxy = false;

     

       
80
       
80
       
-
       
        setPublicReadOnUpload = false;

     

       
81
       
81
       
-
       
        s3ForcePathStyle = true;

     

       
82
       
82
       
-
       
      };

     

       
83
       
83
       
-
       
    };

     

       
84
       
84
       
-
       
  };

     

       
85
       
85
       
-
       
  age.secrets = lib.mkIf config.services.iceshrimp.enable {

     

       
86
       
86
       
-
       
    iceshrimp-secret-config = {

     

       
87
       
87
       
-
       
      inherit (config.services.iceshrimp) group;

     

       
88
       
88
       
-
       
      file = ./secrets/iceshrimp-secret-config.age;

     

       
89
       
89
       
-
       
      owner = config.services.iceshrimp.user;

     

       
90
       
90
       
-
       
    };

     

       
91
       
91
       
-
       
    iceshrimp-db-password = {

     

       
92
       
92
       
-
       
      file = ./secrets/iceshrimp-db-password.age;

     

       
93
       
93
       
-
       
      owner = "postgres";

     

       
94
       
94
       
-
       
      group = "postgres";

     

       
95
       
95
       
-
       
    };

     

       
96
       
96
       
-
       
  };

     

       
97
       
97
       
-
       
}

     

···

       
1
       
1
       
+
       
{

     

       
2
       
2
       
+
       
  "backup": {

     

       
3
       
3
       
+
       
    "database": {

     

       
4
       
4
       
+
       
      "cronExpression": "0 02 * * *",

     

       
5
       
5
       
+
       
      "enabled": true,

     

       
6
       
6
       
+
       
      "keepLastAmount": 14

     

       
7
       
7
       
+
       
    }

     

       
8
       
8
       
+
       
  },

     

       
9
       
9
       
+
       
  "ffmpeg": {

     

       
10
       
10
       
+
       
    "accel": "vaapi",

     

       
11
       
11
       
+
       
    "accelDecode": true,

     

       
12
       
12
       
+
       
    "acceptedAudioCodecs": ["aac", "mp3", "libopus"],

     

       
13
       
13
       
+
       
    "acceptedContainers": ["mov", "ogg", "webm"],

     

       
14
       
14
       
+
       
    "acceptedVideoCodecs": ["h264"],

     

       
15
       
15
       
+
       
    "bframes": -1,

     

       
16
       
16
       
+
       
    "cqMode": "auto",

     

       
17
       
17
       
+
       
    "crf": 23,

     

       
18
       
18
       
+
       
    "gopSize": 0,

     

       
19
       
19
       
+
       
    "maxBitrate": "0",

     

       
20
       
20
       
+
       
    "preferredHwDevice": "auto",

     

       
21
       
21
       
+
       
    "preset": "veryfast",

     

       
22
       
22
       
+
       
    "refs": 0,

     

       
23
       
23
       
+
       
    "targetAudioCodec": "aac",

     

       
24
       
24
       
+
       
    "targetResolution": "720",

     

       
25
       
25
       
+
       
    "targetVideoCodec": "h264",

     

       
26
       
26
       
+
       
    "temporalAQ": false,

     

       
27
       
27
       
+
       
    "threads": 0,

     

       
28
       
28
       
+
       
    "tonemap": "hable",

     

       
29
       
29
       
+
       
    "transcode": "required",

     

       
30
       
30
       
+
       
    "twoPass": false

     

       
31
       
31
       
+
       
  },

     

       
32
       
32
       
+
       
  "image": {

     

       
33
       
33
       
+
       
    "colorspace": "p3",

     

       
34
       
34
       
+
       
    "extractEmbedded": false,

     

       
35
       
35
       
+
       
    "fullsize": {

     

       
36
       
36
       
+
       
      "enabled": false,

     

       
37
       
37
       
+
       
      "format": "jpeg",

     

       
38
       
38
       
+
       
      "quality": 80

     

       
39
       
39
       
+
       
    },

     

       
40
       
40
       
+
       
    "preview": {

     

       
41
       
41
       
+
       
      "format": "jpeg",

     

       
42
       
42
       
+
       
      "quality": 80,

     

       
43
       
43
       
+
       
      "size": 1440

     

       
44
       
44
       
+
       
    },

     

       
45
       
45
       
+
       
    "thumbnail": {

     

       
46
       
46
       
+
       
      "format": "webp",

     

       
47
       
47
       
+
       
      "quality": 80,

     

       
48
       
48
       
+
       
      "size": 250

     

       
49
       
49
       
+
       
    }

     

       
50
       
50
       
+
       
  },

     

       
51
       
51
       
+
       
  "job": {

     

       
52
       
52
       
+
       
    "backgroundTask": {

     

       
53
       
53
       
+
       
      "concurrency": 5

     

       
54
       
54
       
+
       
    },

     

       
55
       
55
       
+
       
    "faceDetection": {

     

       
56
       
56
       
+
       
      "concurrency": 2

     

       
57
       
57
       
+
       
    },

     

       
58
       
58
       
+
       
    "library": {

     

       
59
       
59
       
+
       
      "concurrency": 5

     

       
60
       
60
       
+
       
    },

     

       
61
       
61
       
+
       
    "metadataExtraction": {

     

       
62
       
62
       
+
       
      "concurrency": 5

     

       
63
       
63
       
+
       
    },

     

       
64
       
64
       
+
       
    "migration": {

     

       
65
       
65
       
+
       
      "concurrency": 5

     

       
66
       
66
       
+
       
    },

     

       
67
       
67
       
+
       
    "notifications": {

     

       
68
       
68
       
+
       
      "concurrency": 5

     

       
69
       
69
       
+
       
    },

     

       
70
       
70
       
+
       
    "ocr": {

     

       
71
       
71
       
+
       
      "concurrency": 1

     

       
72
       
72
       
+
       
    },

     

       
73
       
73
       
+
       
    "search": {

     

       
74
       
74
       
+
       
      "concurrency": 5

     

       
75
       
75
       
+
       
    },

     

       
76
       
76
       
+
       
    "sidecar": {

     

       
77
       
77
       
+
       
      "concurrency": 5

     

       
78
       
78
       
+
       
    },

     

       
79
       
79
       
+
       
    "smartSearch": {

     

       
80
       
80
       
+
       
      "concurrency": 2

     

       
81
       
81
       
+
       
    },

     

       
82
       
82
       
+
       
    "thumbnailGeneration": {

     

       
83
       
83
       
+
       
      "concurrency": 3

     

       
84
       
84
       
+
       
    },

     

       
85
       
85
       
+
       
    "videoConversion": {

     

       
86
       
86
       
+
       
      "concurrency": 1

     

       
87
       
87
       
+
       
    },

     

       
88
       
88
       
+
       
    "workflow": {

     

       
89
       
89
       
+
       
      "concurrency": 5

     

       
90
       
90
       
+
       
    }

     

       
91
       
91
       
+
       
  },

     

       
92
       
92
       
+
       
  "library": {

     

       
93
       
93
       
+
       
    "scan": {

     

       
94
       
94
       
+
       
      "cronExpression": "0 0 * * *",

     

       
95
       
95
       
+
       
      "enabled": true

     

       
96
       
96
       
+
       
    },

     

       
97
       
97
       
+
       
    "watch": {

     

       
98
       
98
       
+
       
      "enabled": false

     

       
99
       
99
       
+
       
    }

     

       
100
       
100
       
+
       
  },

     

       
101
       
101
       
+
       
  "logging": {

     

       
102
       
102
       
+
       
    "enabled": true,

     

       
103
       
103
       
+
       
    "level": "log"

     

       
104
       
104
       
+
       
  },

     

       
105
       
105
       
+
       
  "machineLearning": {

     

       
106
       
106
       
+
       
    "availabilityChecks": {

     

       
107
       
107
       
+
       
      "enabled": true,

     

       
108
       
108
       
+
       
      "interval": 30000,

     

       
109
       
109
       
+
       
      "timeout": 2000

     

       
110
       
110
       
+
       
    },

     

       
111
       
111
       
+
       
    "clip": {

     

       
112
       
112
       
+
       
      "enabled": true,

     

       
113
       
113
       
+
       
      "modelName": "ViT-B-16-SigLIP2__webli"

     

       
114
       
114
       
+
       
    },

     

       
115
       
115
       
+
       
    "duplicateDetection": {

     

       
116
       
116
       
+
       
      "enabled": true,

     

       
117
       
117
       
+
       
      "maxDistance": 0.01

     

       
118
       
118
       
+
       
    },

     

       
119
       
119
       
+
       
    "enabled": true,

     

       
120
       
120
       
+
       
    "facialRecognition": {

     

       
121
       
121
       
+
       
      "enabled": true,

     

       
122
       
122
       
+
       
      "maxDistance": 0.5,

     

       
123
       
123
       
+
       
      "minFaces": 7,

     

       
124
       
124
       
+
       
      "minScore": 0.7,

     

       
125
       
125
       
+
       
      "modelName": "buffalo_l"

     

       
126
       
126
       
+
       
    },

     

       
127
       
127
       
+
       
    "ocr": {

     

       
128
       
128
       
+
       
      "enabled": true,

     

       
129
       
129
       
+
       
      "maxResolution": 736,

     

       
130
       
130
       
+
       
      "minDetectionScore": 0.5,

     

       
131
       
131
       
+
       
      "minRecognitionScore": 0.8,

     

       
132
       
132
       
+
       
      "modelName": "EN__PP-OCRv5_mobile"

     

       
133
       
133
       
+
       
    },

     

       
134
       
134
       
+
       
    "urls": ["http://localhost:3003"]

     

       
135
       
135
       
+
       
  },

     

       
136
       
136
       
+
       
  "map": {

     

       
137
       
137
       
+
       
    "darkStyle": "https://tiles.immich.cloud/v1/style/dark.json",

     

       
138
       
138
       
+
       
    "enabled": true,

     

       
139
       
139
       
+
       
    "lightStyle": "https://tiles.immich.cloud/v1/style/light.json"

     

       
140
       
140
       
+
       
  },

     

       
141
       
141
       
+
       
  "metadata": {

     

       
142
       
142
       
+
       
    "faces": {

     

       
143
       
143
       
+
       
      "import": false

     

       
144
       
144
       
+
       
    }

     

       
145
       
145
       
+
       
  },

     

       
146
       
146
       
+
       
  "newVersionCheck": {

     

       
147
       
147
       
+
       
    "enabled": false

     

       
148
       
148
       
+
       
  },

     

       
149
       
149
       
+
       
  "nightlyTasks": {

     

       
150
       
150
       
+
       
    "clusterNewFaces": true,

     

       
151
       
151
       
+
       
    "databaseCleanup": true,

     

       
152
       
152
       
+
       
    "generateMemories": true,

     

       
153
       
153
       
+
       
    "missingThumbnails": true,

     

       
154
       
154
       
+
       
    "startTime": "00:00",

     

       
155
       
155
       
+
       
    "syncQuotaUsage": true

     

       
156
       
156
       
+
       
  },

     

       
157
       
157
       
+
       
  "notifications": {

     

       
158
       
158
       
+
       
    "smtp": {

     

       
159
       
159
       
+
       
      "enabled": true,

     

       
160
       
160
       
+
       
      "from": "dishNet Photos <immich@pyrox.dev>",

     

       
161
       
161
       
+
       
      "replyTo": "",

     

       
162
       
162
       
+
       
      "transport": {

     

       
163
       
163
       
+
       
        "host": "mail.pyrox.dev",

     

       
164
       
164
       
+
       
        "ignoreCert": false,

     

       
165
       
165
       
+
       
        "port": 25,

     

       
166
       
166
       
+
       
        "secure": true,

     

       
167
       
167
       
+
       
        "username": "immich@pyrox.dev"

     

       
168
       
168
       
+
       
      }

     

       
169
       
169
       
+
       
    }

     

       
170
       
170
       
+
       
  },

     

       
171
       
171
       
+
       
  "oauth": {

     

       
172
       
172
       
+
       
    "autoLaunch": false,

     

       
173
       
173
       
+
       
    "autoRegister": true,

     

       
174
       
174
       
+
       
    "buttonText": "Login with Pocket-ID",

     

       
175
       
175
       
+
       
    "clientId": "f1312240-d9fc-4336-aca6-b98316867848",

     

       
176
       
176
       
+
       
    "defaultStorageQuota": null,

     

       
177
       
177
       
+
       
    "enabled": true,

     

       
178
       
178
       
+
       
    "issuerUrl": "https://auth.pyrox.dev",

     

       
179
       
179
       
+
       
    "mobileOverrideEnabled": false,

     

       
180
       
180
       
+
       
    "mobileRedirectUri": "",

     

       
181
       
181
       
+
       
    "profileSigningAlgorithm": "none",

     

       
182
       
182
       
+
       
    "roleClaim": "immich_role",

     

       
183
       
183
       
+
       
    "scope": "openid email profile immich_role",

     

       
184
       
184
       
+
       
    "signingAlgorithm": "RS256",

     

       
185
       
185
       
+
       
    "storageLabelClaim": "preferred_username",

     

       
186
       
186
       
+
       
    "storageQuotaClaim": "immich_quota",

     

       
187
       
187
       
+
       
    "timeout": 30000,

     

       
188
       
188
       
+
       
    "tokenEndpointAuthMethod": "client_secret_post"

     

       
189
       
189
       
+
       
  },

     

       
190
       
190
       
+
       
  "passwordLogin": {

     

       
191
       
191
       
+
       
    "enabled": true

     

       
192
       
192
       
+
       
  },

     

       
193
       
193
       
+
       
  "reverseGeocoding": {

     

       
194
       
194
       
+
       
    "enabled": true

     

       
195
       
195
       
+
       
  },

     

       
196
       
196
       
+
       
  "server": {

     

       
197
       
197
       
+
       
    "externalDomain": "https://img.pyrox.dev",

     

       
198
       
198
       
+
       
    "loginPageMessage": "",

     

       
199
       
199
       
+
       
    "publicUsers": true

     

       
200
       
200
       
+
       
  },

     

       
201
       
201
       
+
       
  "storageTemplate": {

     

       
202
       
202
       
+
       
    "enabled": false,

     

       
203
       
203
       
+
       
    "hashVerificationEnabled": true,

     

       
204
       
204
       
+
       
    "template": "{{y}}/{{y}}-{{MM}}-{{dd}}/{{filename}}"

     

       
205
       
205
       
+
       
  },

     

       
206
       
206
       
+
       
  "templates": {

     

       
207
       
207
       
+
       
    "email": {

     

       
208
       
208
       
+
       
      "albumInviteTemplate": "",

     

       
209
       
209
       
+
       
      "albumUpdateTemplate": "",

     

       
210
       
210
       
+
       
      "welcomeTemplate": ""

     

       
211
       
211
       
+
       
    }

     

       
212
       
212
       
+
       
  },

     

       
213
       
213
       
+
       
  "theme": {

     

       
214
       
214
       
+
       
    "customCss": ""

     

       
215
       
215
       
+
       
  },

     

       
216
       
216
       
+
       
  "trash": {

     

       
217
       
217
       
+
       
    "days": 30,

     

       
218
       
218
       
+
       
    "enabled": true

     

       
219
       
219
       
+
       
  },

     

       
220
       
220
       
+
       
  "user": {

     

       
221
       
221
       
+
       
    "deleteDelay": 7

     

       
222
       
222
       
+
       
  }

     

       
223
       
223
       
+
       
}

     

···

       
1
       
1
       
+
       
{

     

       
2
       
2
       
+
       
  self,

     

       
3
       
3
       
+
       
  config,

     

       
4
       
4
       
+
       
  lib,

     

       
5
       
5
       
+
       
  ...

     

       
6
       
6
       
+
       
}:

     

       
7
       
7
       
+
       
let

     

       
8
       
8
       
+
       
  d = self.lib.data.services.immich;

     

       
9
       
9
       
+
       
in

     

       
10
       
10
       
+
       
{

     

       
11
       
11
       
+
       
  services = {

     

       
12
       
12
       
+
       
    immich = {

     

       
13
       
13
       
+
       
      inherit (d) port;

     

       
14
       
14
       
+
       
      enable = true;

     

       
15
       
15
       
+
       
      host = "0.0.0.0";

     

       
16
       
16
       
+
       
      redis.enable = true;

     

       
17
       
17
       
+
       
      mediaLocation = "/var/media/photos/";

     

       
18
       
18
       
+
       
      accelerationDevices = [ "/dev/dri/renderD128" ];

     

       
19
       
19
       
+
       
      settings = lib.recursiveUpdate (builtins.fromJSON (builtins.readFile ./immich-config.json)) {

     

       
20
       
20
       
+
       
        oauth.clientSecret._secret = config.age.secrets.immich-oauth-secret.path;

     

       
21
       
21
       
+
       
        notifications.smtp.transport.password._secret = config.age.secrets.immich-mail-pw.path;

     

       
22
       
22
       
+
       
        server.externalDomain = "https://${d.extUrl}";

     

       
23
       
23
       
+
       
      };

     

       
24
       
24
       
+
       
    };

     

       
25
       
25
       
+
       
    immich-public-proxy = {

     

       
26
       
26
       
+
       
      enable = true;

     

       
27
       
27
       
+
       
      port = d.pubProxy;

     

       
28
       
28
       
+
       
      immichUrl = "http://localhost:${toString d.port}";

     

       
29
       
29
       
+
       
      settings.ipp = {

     

       
30
       
30
       
+
       
        downloadedFilename = 1;

     

       
31
       
31
       
+
       
      };

     

       
32
       
32
       
+
       
    };

     

       
33
       
33
       
+
       
  };

     

       
34
       
34
       
+
       
  systemd.services.immich-public-proxy.environment.PUBLIC_BASE_URL = "https://${d.extUrl}";

     

       
35
       
35
       
+
       
  users.users.immich.extraGroups = [

     

       
36
       
36
       
+
       
    "video"

     

       
37
       
37
       
+
       
    "render"

     

       
38
       
38
       
+
       
  ];

     

       
39
       
39
       
+
       
  age.secrets = {

     

       
40
       
40
       
+
       
    immich-oauth-secret = {

     

       
41
       
41
       
+
       
      file = ./secrets/immich/oauth-secret.age;

     

       
42
       
42
       
+
       
      owner = "immich";

     

       
43
       
43
       
+
       
      group = "immich";

     

       
44
       
44
       
+
       
    };

     

       
45
       
45
       
+
       
    immich-mail-pw = {

     

       
46
       
46
       
+
       
      file = ./secrets/immich/mail-pw.age;

     

       
47
       
47
       
+
       
      owner = "immich";

     

       
48
       
48
       
+
       
      group = "immich";

     

       
49
       
49
       
+
       
    };

     

       
50
       
50
       
+
       
  };

     

       
51
       
51
       
+
       
}

     

···

       
1
       
1
       
 
       
{

     

       
2
       
2
       
 
       
  config,

     

       
3
       
3
       
-
       
  self',

     

       
4
       
3
       
 
       
  self,

     

       
5
       
4
       
 
       
  ...

     

       
6
       
5
       
 
       
}:

     
···

       
33
       
32
       
 
       
  services.anubis.instances.miniflux = {

     

       
34
       
33
       
 
       
    settings = {

     

       
35
       
34
       
 
       
      BIND = ":${toString d.anubis}";

     

       
36
       
36
       
-
       
      POLICY_FNAME = "${self'.packages.anubis-files}/policies/miniflux.yaml";

     

       
37
       
35
       
 
       
      TARGET = "http://localhost:${toString d.port}";

     

       
38
       
36
       
 
       
    };

     

       
39
       
37
       
 
       
  };

     

···

       
1
       
1
       
-
       
{ config, ... }:

     

       
2
       
2
       
-
       
{

     

       
3
       
3
       
-
       
  services.minio = {

     

       
4
       
4
       
-
       
    enable = true;

     

       
5
       
5
       
-
       
    region = "us-east-1";

     

       
6
       
6
       
-
       
    browser = true;

     

       
7
       
7
       
-
       
    listenAddress = ":6990";

     

       
8
       
8
       
-
       
    consoleAddress = ":6991";

     

       
9
       
9
       
-
       
    rootCredentialsFile = config.age.secrets.minio-root.path;

     

       
10
       
10
       
-
       
  };

     

       
11
       
11
       
-
       
}

     

···

       
1
       
1
       
-
       
{

     

       
2
       
2
       
-
       
  config,

     

       
3
       
3
       
-
       
  pkgs,

     

       
4
       
4
       
-
       
  self',

     

       
5
       
5
       
-
       
  self,

     

       
6
       
6
       
-
       
  ...

     

       
7
       
7
       
-
       
}:

     

       
8
       
8
       
-
       
let

     

       
9
       
9
       
-
       
  d = self.lib.data.services.pingvin-share;

     

       
10
       
10
       
-
       
  cfg = config.services.pingvin-share;

     

       
11
       
11
       
-
       
  configFormat = pkgs.formats.yaml { };

     

       
12
       
12
       
-
       
  configFile = configFormat.generate "config.yaml" {

     

       
13
       
13
       
-
       
    general = {

     

       
14
       
14
       
-
       
      appName = "dishNet Share";

     

       
15
       
15
       
-
       
      appUrl = "https://share.pyrox.dev";

     

       
16
       
16
       
-
       
      secureCookies = "true";

     

       
17
       
17
       
-
       
      showHomePage = "false";

     

       
18
       
18
       
-
       
    };

     

       
19
       
19
       
-
       
    share = {

     

       
20
       
20
       
-
       
      allowRegistration = "false";

     

       
21
       
21
       
-
       
      allowUnauthenticatedShares = "false";

     

       
22
       
22
       
-
       
      maxSize = "10000000000";

     

       
23
       
23
       
-
       
    };

     

       
24
       
24
       
-
       
    email.enableShareEmailRecipients = "true";

     

       
25
       
25
       
-
       
    smtp = {

     

       
26
       
26
       
-
       
      enabled = "true";

     

       
27
       
27
       
-
       
      host = "mail.pyrox.dev";

     

       
28
       
28
       
-
       
      port = "465";

     

       
29
       
29
       
-
       
      email = "share@pyrox.dev";

     

       
30
       
30
       
-
       
      username = "share@pyrox.dev";

     

       
31
       
31
       
-
       
      password = "SMTP_PASSWORD";

     

       
32
       
32
       
-
       
    };

     

       
33
       
33
       
-
       
    ldap.enabled = "false";

     

       
34
       
34
       
-
       
    legal.enabled = "false";

     

       
35
       
35
       
-
       
    s3.enabled = "false";

     

       
36
       
36
       
-
       
    oauth = {

     

       
37
       
37
       
-
       
      ignoreTotp = "true";

     

       
38
       
38
       
-
       
      oidc-enabled = "true";

     

       
39
       
39
       
-
       
      oidc-clientSecret = "CLIENT_SECRET";

     

       
40
       
40
       
-
       
      oidc-clientId = "d83006a6-9b08-47eb-af56-418065db09b5";

     

       
41
       
41
       
-
       
      oidc-discoveryUri = "https://auth.pyrox.dev/.well-known/openid-configuration";

     

       
42
       
42
       
-
       
      oidc-signOut = "false";

     

       
43
       
43
       
-
       
      oidc-scope = "openid email profile groups";

     

       
44
       
44
       
-
       
      oidc-rolePath = "groups";

     

       
45
       
45
       
-
       
      oidc-roleAdminAccess = "admins";

     

       
46
       
46
       
-
       
    };

     

       
47
       
47
       
-
       
    initUser.enabled = false;

     

       
48
       
48
       
-
       
  };

     

       
49
       
49
       
-
       
in

     

       
50
       
50
       
-
       
{

     

       
51
       
51
       
-
       
  virtualisation.oci-containers.containers = {

     

       
52
       
52
       
-
       
    pingvin-share-server = {

     

       
53
       
53
       
-
       
      image = "ghcr.io/stonith404/pingvin-share:latest";

     

       
54
       
54
       
-
       
      ports = [

     

       
55
       
55
       
-
       
        "${toString d.port}:3000"

     

       
56
       
56
       
-
       
        "${toString d.be-port}:8080"

     

       
57
       
57
       
-
       
      ];

     

       
58
       
58
       
-
       
      volumes = [

     

       
59
       
59
       
-
       
        "/var/lib/pingvin-share/data:/opt/app/backend/data"

     

       
60
       
60
       
-
       
        "/var/lib/pingvin-share/data/images:/opt/app/frontend/public/img"

     

       
61
       
61
       
-
       
        "/var/lib/pingvin-share/config.yaml:/opt/app/config.yaml"

     

       
62
       
62
       
-
       
      ];

     

       
63
       
63
       
-
       
      environment = {

     

       
64
       
64
       
-
       
        API_URL = "https://share.pyrox.dev";

     

       
65
       
65
       
-
       
        PUID = "962";

     

       
66
       
66
       
-
       
        PGID = "959";

     

       
67
       
67
       
-
       
      };

     

       
68
       
68
       
-
       
    };

     

       
69
       
69
       
-
       
  };

     

       
70
       
70
       
-
       
  users.users.pingvin = {

     

       
71
       
71
       
-
       
    uid = 962;

     

       
72
       
72
       
-
       
    inherit (cfg) group;

     

       
73
       
73
       
-
       
    isSystemUser = true;

     

       
74
       
74
       
-
       
  };

     

       
75
       
75
       
-
       
  users.groups.pingvin = {

     

       
76
       
76
       
-
       
    gid = 959;

     

       
77
       
77
       
-
       
  };

     

       
78
       
78
       
-
       


     

       
79
       
79
       
-
       
  services = {

     

       
80
       
80
       
-
       
    pingvin-share = {

     

       
81
       
81
       
-
       
      enable = false;

     

       
82
       
82
       
-
       
      backend.port = d.be-port;

     

       
83
       
83
       
-
       
      frontend.port = d.port;

     

       
84
       
84
       
-
       
      hostname = "share.pyrox.dev";

     

       
85
       
85
       
-
       
      https = true;

     

       
86
       
86
       
-
       
    };

     

       
87
       
87
       
-
       
    anubis.instances = {

     

       
88
       
88
       
-
       
      pingvin-share-be = {

     

       
89
       
89
       
-
       
        settings = {

     

       
90
       
90
       
-
       
          BIND = ":${toString d.be-anubis}";

     

       
91
       
91
       
-
       
          POLICY_FNAME = "${self'.packages.anubis-files}/policies/pingvin-share.yaml";

     

       
92
       
92
       
-
       
          TARGET = "http://localhost:${toString d.be-port}";

     

       
93
       
93
       
-
       
        };

     

       
94
       
94
       
-
       
      };

     

       
95
       
95
       
-
       
      pingvin-share-fe = {

     

       
96
       
96
       
-
       
        settings = {

     

       
97
       
97
       
-
       
          BIND = ":${toString d.anubis}";

     

       
98
       
98
       
-
       
          POLICY_FNAME = "${self'.packages.anubis-files}/policies/pingvin-share.yaml";

     

       
99
       
99
       
-
       
          TARGET = "http://localhost:${toString d.port}";

     

       
100
       
100
       
-
       
        };

     

       
101
       
101
       
-
       
      };

     

       
102
       
102
       
-
       
    };

     

       
103
       
103
       
-
       
  };

     

       
104
       
104
       
-
       
  systemd.services.init-pingvin-config = {

     

       
105
       
105
       
-
       
    enable = true;

     

       
106
       
106
       
-
       
    description = "Pingvin Share configuration setup";

     

       
107
       
107
       
-
       
    wantedBy = [ "multi-user.target" ];

     

       
108
       
108
       
-
       
    before = [

     

       
109
       
109
       
-
       
      "docker-pingvin-share-server.service"

     

       
110
       
110
       
-
       
    ];

     

       
111
       
111
       
-
       
    path = [ pkgs.gnused ];

     

       
112
       
112
       
-
       
    script = ''

     

       
113
       
113
       
-
       
      rm ${cfg.dataDir}/config.yaml

     

       
114
       
114
       
-
       
      cp ${configFile} ${cfg.dataDir}/config.yaml

     

       
115
       
115
       
-
       
      sed -i "s/SMTP_PASSWORD/\"$SMTP_PASSWORD\"/" ${cfg.dataDir}/config.yaml

     

       
116
       
116
       
-
       
      sed -i "s/CLIENT_SECRET/\"$CLIENT_SECRET\"/" ${cfg.dataDir}/config.yaml

     

       
117
       
117
       
-
       
    '';

     

       
118
       
118
       
-
       
    serviceConfig = {

     

       
119
       
119
       
-
       
      EnvironmentFile = config.age.secrets.pingvin-secrets.path;

     

       
120
       
120
       
-
       
      User = cfg.user;

     

       
121
       
121
       
-
       
      Group = cfg.group;

     

       
122
       
122
       
-
       
      ReadWritePaths = [ "${cfg.dataDir}" ];

     

       
123
       
123
       
-
       
    };

     

       
124
       
124
       
-
       
  };

     

       
125
       
125
       
-
       
  age.secrets.pingvin-secrets = {

     

       
126
       
126
       
-
       
    file = ./secrets/pingvin-secrets.age;

     

       
127
       
127
       
-
       
    owner = cfg.user;

     

       
128
       
128
       
-
       
    inherit (cfg) group;

     

       
129
       
129
       
-
       
  };

     

       
130
       
130
       
-
       
}