trilium & authelia setup

hosts/sin/configuration.nix

@@ -17,7 +17,7 @@
     ./secrets.nix
     ./coredns
     ./copyparty.nix
-    # ./trilium.nix
+    ./trilium.nix
   ];
 
   boot.initrd.kernelModules = [ "usb_storage" ];
@@ -44,6 +44,8 @@
 
         3000 # gitea
 
+        config.services.trilium-server.port
+
         53
       ];
 

hosts/sin/jellyfin.nix

@@ -11,10 +11,9 @@ in
     extraPackages = with pkgs; [
       intel-media-driver
       intel-vaapi-driver
-      vaapiVdpau
+      libva-vdpau-driver
       intel-compute-runtime # OpenCL filter support (hardware tonemapping and subtitle burn-in)
       vpl-gpu-rt # QSV on 11th gen or newer
-      intel-media-sdk # QSV up to 11th gen
     ];
   };
 
@@ -91,10 +90,18 @@ in
       enable = true;
       openFirewall = true;
       group = "starr";
+      settings = {
+        authentication.AuthenticationMethod = "external";
+        authentication.AuthenticationType = "enabled";
+      };
     };
     prowlarr = {
       enable = true;
       openFirewall = true;
+      settings = {
+        authentication.AuthenticationMethod = "external";
+        authentication.AuthenticationType = "enabled";
+      };
     };
     bazarr = {
       enable = true;
@@ -103,10 +110,18 @@ in
     lidarr = {
       enable = true;
       openFirewall = true;
+      settings = {
+        authentication.AuthenticationMethod = "external";
+        authentication.AuthenticationType = "enabled";
+      };
     };
     whisparr = {
       enable = true;
       openFirewall = true;
+      settings = {
+        authentication.AuthenticationMethod = "external";
+        authentication.AuthenticationType = "enabled";
+      };
     };
 
     jellyseerr = {

hosts/sin/trilium.nix

@@ -1 +1,9 @@
-{ ... }: { }
+{ ... }:
+{
+  services.trilium-server = {
+    enable = true;
+    port = 12783;
+    host = "0.0.0.0";
+    noAuthentication = true;
+  };
+}