luks

use correct docker version

.gitea/workflows/analysis.yaml

@@ -0,0 +1,15 @@
+on: [push]
+
+jobs:
+  analysis:
+    permissions:
+      contents: read
+      id-token: write
+    name: perform flake analysis
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+      - uses: DeterminateSystems/nix-installer-action@main
+      - uses: DeterminateSystems/magic-nix-cache-action@main
+      - name: Check Nix flake inputs
+        uses: http://github.com/DeterminateSystems/flake-checker-action@main

.gitea/workflows/analysis.yml

@@ -1,14 +0,0 @@
-on: [push]
-
-jobs:
-  build:
-    name: Build Nix targets
-    runs-on: ubuntu-22.04
-    steps:
-      - uses: actions/checkout@v4
-      - uses: http://github.com/cachix/install-nix-action@v18
-      - uses: http://github.com/cachix/cachix-action@v12
-        with:
-          name: statix
-      - name: Check Nix flake inputs
-        uses: http://github.com/DeterminateSystems/flake-checker-action@main

.gitea/workflows/deploy.yaml

@@ -0,0 +1,43 @@
+on:
+  push:
+    branches:
+      - master
+
+jobs:
+  deploy:
+    container:
+      volumes:
+        - /nix/store:/var/nix/hosted-store
+    permissions:
+      contents: read
+      id-token: write
+    name: build hive configuration
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+      - name: setup
+        env:
+          CACHE_PRIVKEY: ${{secrets.CACHE_PRIVKEY}}
+        shell: bash
+        run: |
+          mkdir -p /var/secrets/
+          echo "$CACHE_PRIVKEY" >> /var/secrets/cache_privkey
+          mkdir -p /etc/nix
+          cp ./scripts/upload-to-cache.sh /etc/nix/
+          chmod +x /etc/nix/upload-to-cache.sh
+      - uses: cachix/install-nix-action@v31
+        with:
+          extra_nix_config: |
+            extra-trusted-public-keys = localhost:TiRpr2LzamX/MCKBUmFlZ8inWz94QWGL88fMEHg9Kgc=
+            extra-substituters = "local?store=/var/nix/hosted-store&priority=20"
+            secret-key-files = /var/secrets/cache_privkey
+            post-build-hook = /etc/nix/upload-to-cache.sh
+      - name: Install SSH key
+        uses: shimataro/ssh-key-action@v2
+        with:
+          key: ${{ secrets.SSH_KEY }}
+          known_hosts: ${{ secrets.KNOWN_HOSTS }}
+      - uses: http://github.com/cachix/cachix-action@v16
+        with:
+          name: colmena
+      - run: nix run .#colmena apply

flake.lock

@@ -8,11 +8,11 @@
         "systems": "systems"
       },
       "locked": {
-        "lastModified": 1754433428,
+        "lastModified": 1762618334,
-        "narHash": "sha256-NA/FT2hVhKDftbHSwVnoRTFhes62+7dxZbxj5Gxvghs=",
+        "narHash": "sha256-wyT7Pl6tMFbFrs8Lk/TlEs81N6L+VSybPfiIgzU8lbQ=",
         "owner": "ryantm",
         "repo": "agenix",
-        "rev": "9edb1787864c4f59ae5074ad498b6272b3ec308d",
+        "rev": "fcdea223397448d35d9b31f798479227e80183f6",
         "type": "github"
       },
       "original": {
@@ -30,11 +30,11 @@
         "stable": "stable"
       },
       "locked": {
-        "lastModified": 1755272288,
+        "lastModified": 1762034856,
-        "narHash": "sha256-ypTPb2eKcOBbOoyvPV0j4ZOXs4kayo73/2KI456QnE0=",
+        "narHash": "sha256-QVey3iP3UEoiFVXgypyjTvCrsIlA4ecx6Acaz5C8/PQ=",
         "owner": "zhaofengli",
         "repo": "colmena",
-        "rev": "5bf4ce6a24adba74a5184f4a9bef01d545a09473",
+        "rev": "349b035a5027f23d88eeb3bc41085d7ee29f18ed",
         "type": "github"
       },
       "original": {
@@ -49,11 +49,11 @@
         "nixpkgs": "nixpkgs_3"
       },
       "locked": {
-        "lastModified": 1760309387,
+        "lastModified": 1767637959,
-        "narHash": "sha256-yCjkJuQbt6DjdS1XJL2uwyLu1AcmDvlyMGojBq8Ua38=",
+        "narHash": "sha256-+gBU5Cj9QNpHLQ5PHJoWNQft7TMsBM6X+tDQg+/B2P0=",
         "owner": "9001",
         "repo": "copyparty",
-        "rev": "d099e5e84e191d67a7bffa574ab39b6d0d4f6adf",
+        "rev": "038af507772593b904b5c3efc306f89cbdf2b6fb",
         "type": "github"
       },
       "original": {
@@ -91,11 +91,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1758287904,
+        "lastModified": 1766150702,
-        "narHash": "sha256-IGmaEf3Do8o5Cwp1kXBN1wQmZwQN3NLfq5t4nHtVtcU=",
+        "narHash": "sha256-P0kM+5o+DKnB6raXgFEk3azw8Wqg5FL6wyl9jD+G5a4=",
         "owner": "nix-community",
         "repo": "disko",
-        "rev": "67ff9807dd148e704baadbd4fd783b54282ca627",
+        "rev": "916506443ecd0d0b4a0f4cf9d40a3c22ce39b378",
         "type": "github"
       },
       "original": {
@@ -136,6 +136,22 @@
         "type": "github"
       }
     },
+    "flake-compat_3": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1747046372,
+        "narHash": "sha256-CIVLLkVgvHYbgI2UpXvIIBJ12HWgX+fjA8Xf8PUmqCY=",
+        "owner": "edolstra",
+        "repo": "flake-compat",
+        "rev": "9100a0f413b0c601e0533d1d94ffd501ce2e7885",
+        "type": "github"
+      },
+      "original": {
+        "owner": "edolstra",
+        "repo": "flake-compat",
+        "type": "github"
+      }
+    },
     "flake-utils": {
       "locked": {
         "lastModified": 1659877975,
@@ -184,6 +200,24 @@
         "type": "github"
       }
     },
+    "flake-utils_4": {
+      "inputs": {
+        "systems": "systems_3"
+      },
+      "locked": {
+        "lastModified": 1731533236,
+        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
     "home-manager": {
       "inputs": {
         "nixpkgs": [
@@ -233,11 +267,31 @@
         "nixpkgs": "nixpkgs_4"
       },
       "locked": {
-        "lastModified": 1760234253,
+        "lastModified": 1767147099,
-        "narHash": "sha256-ElkSuw4RxtyOY3mThezUpOM8c0fTNWlL0we/deGiTZU=",
+        "narHash": "sha256-395ehjdAtaqCbKmx+PhKAqnkYLvTtAzq2qzFG9qaGDw=",
         "owner": "Infinidoge",
         "repo": "nix-minecraft",
-        "rev": "a82ae8f5079a134d33337cf211d7617f1268b301",
+        "rev": "01f571579edd64433f97c4294137fbc366deef4b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "Infinidoge",
+        "repo": "nix-minecraft",
+        "type": "github"
+      }
+    },
+    "nix-minecraft_2": {
+      "inputs": {
+        "flake-compat": "flake-compat_3",
+        "flake-utils": "flake-utils_4",
+        "nixpkgs": "nixpkgs_6"
+      },
+      "locked": {
+        "lastModified": 1767147099,
+        "narHash": "sha256-395ehjdAtaqCbKmx+PhKAqnkYLvTtAzq2qzFG9qaGDw=",
+        "owner": "Infinidoge",
+        "repo": "nix-minecraft",
+        "rev": "01f571579edd64433f97c4294137fbc366deef4b",
         "type": "github"
       },
       "original": {
@@ -311,11 +365,11 @@
     },
     "nixpkgs_5": {
       "locked": {
-        "lastModified": 1759994382,
+        "lastModified": 1767313136,
-        "narHash": "sha256-wSK+3UkalDZRVHGCRikZ//CyZUJWDJkBDTQX1+G77Ow=",
+        "narHash": "sha256-16KkgfdYqjaeRGBaYsNrhPRRENs0qzkQVUooNHtoy2w=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "5da4a26309e796daa7ffca72df93dbe53b8164c7",
+        "rev": "ac62194c3917d5f474c1a844b6fd6da2db95077d",
         "type": "github"
       },
       "original": {
@@ -326,6 +380,36 @@
       }
     },
     "nixpkgs_6": {
+      "locked": {
+        "lastModified": 1748929857,
+        "narHash": "sha256-lcZQ8RhsmhsK8u7LIFsJhsLh/pzR9yZ8yqpTzyGdj+Q=",
+        "owner": "nixos",
+        "repo": "nixpkgs",
+        "rev": "c2a03962b8e24e669fb37b7df10e7c79531ff1a4",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nixos",
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs_7": {
+      "locked": {
+        "lastModified": 1767364772,
+        "narHash": "sha256-fFUnEYMla8b7UKjijLnMe+oVFOz6HjijGGNS1l7dYaQ=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "16c7794d0a28b5a37904d55bcca36003b9109aaa",
+        "type": "github"
+      },
+      "original": {
+        "id": "nixpkgs",
+        "type": "indirect"
+      }
+    },
+    "nixpkgs_8": {
       "locked": {
         "lastModified": 1737062831,
         "narHash": "sha256-Tbk1MZbtV2s5aG+iM99U8FqwxU/YNArMcWAv6clcsBc=",
@@ -339,36 +423,6 @@
         "url": "https://flakehub.com/f/NixOS/nixpkgs/0.1.%2A.tar.gz"
       }
     },
-    "nixpkgs_7": {
-      "locked": {
-        "lastModified": 1744440957,
-        "narHash": "sha256-FHlSkNqFmPxPJvy+6fNLaNeWnF1lZSgqVCl/eWaJRc4=",
-        "owner": "NixOS",
-        "repo": "nixpkgs",
-        "rev": "26d499fc9f1d567283d5d56fcf367edd815dba1d",
-        "type": "github"
-      },
-      "original": {
-        "owner": "NixOS",
-        "ref": "nixos-24.11",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
-    "nixpkgs_8": {
-      "locked": {
-        "lastModified": 1744463964,
-        "narHash": "sha256-LWqduOgLHCFxiTNYi3Uj5Lgz0SR+Xhw3kr/3Xd0GPTM=",
-        "rev": "2631b0b7abcea6e640ce31cd78ea58910d31e650",
-        "revCount": 782401,
-        "type": "tarball",
-        "url": "https://api.flakehub.com/f/pinned/NixOS/nixpkgs/0.1.782401%2Brev-2631b0b7abcea6e640ce31cd78ea58910d31e650/01962c8a-63c4-7abd-a3df-63a17b548cc7/source.tar.gz"
-      },
-      "original": {
-        "type": "tarball",
-        "url": "https://flakehub.com/f/NixOS/nixpkgs/0.1.%2A.tar.gz"
-      }
-    },
     "nixpkgs_9": {
       "locked": {
         "lastModified": 1736549401,
@@ -385,54 +439,24 @@
         "type": "github"
       }
     },
-    "pyproject-build-systems": {
+    "reclamation": {
       "inputs": {
-        "nixpkgs": [
+        "nix-minecraft": "nix-minecraft_2",
-          "striped-back",
+        "nixpkgs": "nixpkgs_7",
-          "nixpkgs"
+        "utils": "utils"
-        ],
-        "pyproject-nix": [
-          "striped-back",
-          "pyproject-nix"
-        ],
-        "uv2nix": [
-          "striped-back",
-          "uv2nix"
-        ]
       },
       "locked": {
-        "lastModified": 1744599653,
+        "lastModified": 1767786101,
-        "narHash": "sha256-nysSwVVjG4hKoOjhjvE6U5lIKA8sEr1d1QzEfZsannU=",
+        "narHash": "sha256-ENlpYr2V5u0/Enq07nIHfzetqmS95aydQYIM6sISVUc=",
-        "owner": "pyproject-nix",
+        "ref": "refs/heads/master",
-        "repo": "build-system-pkgs",
+        "rev": "b71acff364b7b5eb3e1b68915aeb379053b86c94",
-        "rev": "7dba6dbc73120e15b558754c26024f6c93015dd7",
+        "revCount": 10,
-        "type": "github"
+        "type": "git",
+        "url": "https://git.shobu.fr/sin_serhao/reclamation"
       },
       "original": {
-        "owner": "pyproject-nix",
+        "type": "git",
-        "repo": "build-system-pkgs",
+        "url": "https://git.shobu.fr/sin_serhao/reclamation"
-        "type": "github"
-      }
-    },
-    "pyproject-nix": {
-      "inputs": {
-        "nixpkgs": [
-          "striped-back",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1743438845,
-        "narHash": "sha256-1GSaoubGtvsLRwoYwHjeKYq40tLwvuFFVhGrG8J9Oek=",
-        "owner": "pyproject-nix",
-        "repo": "pyproject.nix",
-        "rev": "8063ec98edc459571d042a640b1c5e334ecfca1e",
-        "type": "github"
-      },
-      "original": {
-        "owner": "pyproject-nix",
-        "repo": "pyproject.nix",
-        "type": "github"
       }
     },
     "root": {
@@ -443,16 +467,15 @@
         "disko": "disko",
         "nix-minecraft": "nix-minecraft",
         "nixpkgs": "nixpkgs_5",
+        "reclamation": "reclamation",
         "shoblog-front": "shoblog-front",
-        "striped-back": "striped-back",
-        "striped-front": "striped-front",
         "testing-grounds": "testing-grounds",
         "unstable": "unstable"
       }
     },
     "shoblog-front": {
       "inputs": {
-        "nixpkgs": "nixpkgs_6"
+        "nixpkgs": "nixpkgs_8"
       },
       "locked": {
         "lastModified": 1752594581,
@@ -484,45 +507,6 @@
         "type": "github"
       }
     },
-    "striped-back": {
-      "inputs": {
-        "nixpkgs": "nixpkgs_7",
-        "pyproject-build-systems": "pyproject-build-systems",
-        "pyproject-nix": "pyproject-nix",
-        "uv2nix": "uv2nix"
-      },
-      "locked": {
-        "lastModified": 1748719386,
-        "narHash": "sha256-nyXHemXPEKnqIVIYIorSbt64zRwMvijyGQGCW3zUUkc=",
-        "ref": "refs/heads/master",
-        "rev": "bdfd6f1f4aac6a00ae4509f14b3a63c84d169edf",
-        "revCount": 8,
-        "type": "git",
-        "url": "ssh://git@gitlab.com/striped1/striped-back"
-      },
-      "original": {
-        "type": "git",
-        "url": "ssh://git@gitlab.com/striped1/striped-back"
-      }
-    },
-    "striped-front": {
-      "inputs": {
-        "nixpkgs": "nixpkgs_8"
-      },
-      "locked": {
-        "lastModified": 1748718798,
-        "narHash": "sha256-KUxbrUjRfuKjkJZLzKr11WEXLfPs38YrW/CMG6XbnbY=",
-        "ref": "refs/heads/master",
-        "rev": "a553f10147dad9e41829f67b247817a079f6f671",
-        "revCount": 11,
-        "type": "git",
-        "url": "ssh://git@gitlab.com/striped1/striped-front"
-      },
-      "original": {
-        "type": "git",
-        "url": "ssh://git@gitlab.com/striped1/striped-front"
-      }
-    },
     "systems": {
       "locked": {
         "lastModified": 1681028828,
@@ -553,6 +537,36 @@
         "type": "github"
       }
     },
+    "systems_3": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "systems_4": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
     "testing-grounds": {
       "inputs": {
         "nixpkgs": "nixpkgs_9"
@@ -573,11 +587,11 @@
     },
     "unstable": {
       "locked": {
-        "lastModified": 1760038930,
+        "lastModified": 1767640445,
-        "narHash": "sha256-Oncbh0UmHjSlxO7ErQDM3KM0A5/Znfofj2BSzlHLeVw=",
+        "narHash": "sha256-UWYqmD7JFBEDBHWYcqE6s6c77pWdcU/i+bwD6XxMb8A=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "0b4defa2584313f3b781240b29d61f6f9f7e0df3",
+        "rev": "9f0c42f8bc7151b8e7e5840fb3bd454ad850d8c5",
         "type": "github"
       },
       "original": {
@@ -587,28 +601,21 @@
         "type": "github"
       }
     },
-    "uv2nix": {
+    "utils": {
       "inputs": {
-        "nixpkgs": [
+        "systems": "systems_4"
-          "striped-back",
-          "nixpkgs"
-        ],
-        "pyproject-nix": [
-          "striped-back",
-          "pyproject-nix"
-        ]
       },
       "locked": {
-        "lastModified": 1744797880,
+        "lastModified": 1731533236,
-        "narHash": "sha256-gt9JBkYjZAEvGwCG7RMAAAr0j2RsaRmOMj/vV0briXk=",
+        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
-        "owner": "pyproject-nix",
+        "owner": "numtide",
-        "repo": "uv2nix",
+        "repo": "flake-utils",
-        "rev": "3583e037163491ecd833f1d5d3eedf3869543c5d",
+        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
         "type": "github"
       },
       "original": {
-        "owner": "pyproject-nix",
+        "owner": "numtide",
-        "repo": "uv2nix",
+        "repo": "flake-utils",
         "type": "github"
       }
     }

flake.nix

@@ -17,33 +17,36 @@
     # sin inputs
     nix-minecraft.url = "github:Infinidoge/nix-minecraft";
     testing-grounds.url = "gitlab:shobu13/testing-grounds";
+    reclamation.url = "git+https://git.shobu.fr/sin_serhao/reclamation";
     shoblog-front.url = "gitlab:shobu13/shoblog";
-    striped-front.url = "git+ssh://git@gitlab.com/striped1/striped-front";
+    # striped-front.url = "git+ssh://git@gitlab.com/striped1/striped-front";
-    striped-back.url = "git+ssh://git@gitlab.com/striped1/striped-back";
+    # striped-back.url = "git+ssh://git@gitlab.com/striped1/striped-back";
 
     copyparty.url = "github:9001/copyparty";
 
   };
 
   # Flake outputs
-  outputs = inputs@{
+  outputs =
-    self,
+    inputs@{
+      self,
 
-    nixpkgs,
+      nixpkgs,
-    unstable,
+      unstable,
-    colmena,
+      colmena,
 
-    agenix,
+      agenix,
 
-    disko,
+      disko,
 
-    shoblog-front,
+      shoblog-front,
-    striped-front,
+      # striped-front,
-    striped-back,
+      # striped-back,
-    nix-minecraft,
+      nix-minecraft,
-    testing-grounds,
+      testing-grounds,
-    copyparty,
+      reclamation,
-    ...
+      copyparty,
+      ...
     }:
     let
       # The systems supported for this flake
@@ -52,16 +55,41 @@
       ];
 
       # Helper to provide system-specific attributes
-      forEachSupportedSystem = f: inputs.nixpkgs.lib.genAttrs supportedSystems (system: f {
+      forEachSupportedSystem =
-        pkgs = import inputs.nixpkgs { inherit system; };
+        f:
-      });
+        inputs.nixpkgs.lib.genAttrs supportedSystems (
+          system:
+          f {
+            pkgs = import inputs.nixpkgs { inherit system; };
+          }
+        );
     in
     {
+      nixosConfigurations = {
+        sin = nixpkgs.lib.nixosSystem {
+           system = "x86_64-linux";
+          
+           modules = [
+              disko.nixosModules.disko
+              agenix.nixosModules.default
+              ./hosts/sin/configuration.nix
+              ./hosts/sin/hardware-configuration.nix
+            ]
+            ++ [
+              # modules
+              ./modules/gitea/sin
+            ];
+            
+            specialArgs = {
+             inherit inputs;
+           };
+        };
+      };
       colmenaHive = colmena.lib.makeHive {
         meta = {
           nixpkgs = import nixpkgs {
             system = "x86_64-linux";
-            overlays = [];
+            overlays = [ ];
           };
 
           specialArgs = {
@@ -69,45 +97,75 @@
           };
         };
 
-        thea = {name, nodes, pkgs, ...}: {
+        thea =
-          imports = [
+          {
-            ./hosts/${name}/configuration.nix
+            name,
-            ./hosts/${name}/hardware-configuration.nix
+            nodes,
-          ] ++ [
+            pkgs,
-            # modules
+            ...
-            ./modules/gitea/${name}
+          }:
-          ];
+          {
+            imports = [
+              agenix.nixosModules.default
+              ./hosts/${name}/configuration.nix
+              ./hosts/${name}/hardware-configuration.nix
+            ]
+            ++ [
+              # modules
+              ./modules/gitea/${name}
+            ];
 
-          deployment.targetHost = "thea.homelab.local";
+            deployment.targetHost = "192.168.1.12";
-        };
+          };
 
-        sin = {name, nodes, pkgs, ...}: {
+        sin =
-          imports = [
+          {
-            disko.nixosModules.disko
+            name,
-            agenix.nixosModules.default
+            nodes,
-            ./hosts/${name}/configuration.nix
+            pkgs,
-            ./hosts/${name}/hardware-configuration.nix
+            ...
-          ] ++ [
+          }:
-            # modules
+          {
-            ./modules/gitea/${name}
+            imports = [
-          ];
+              disko.nixosModules.disko
+              agenix.nixosModules.default
+              ./hosts/${name}/configuration.nix
+              ./hosts/${name}/hardware-configuration.nix
+            ]
+            ++ [
+              # modules
+              ./modules/gitea/${name}
+            ];
 
-          deployment.targetHost = "sin.homelab.local";
+            deployment.targetHost = "192.168.1.14";
-        };
+            deployment.allowLocalDeployment = true;
+          };
       };
-      devShells = forEachSupportedSystem ({ pkgs }: {
+      devShells = forEachSupportedSystem (
-        default = pkgs.mkShell {
+        { pkgs }:
-          # The Nix packages provided in the environment
+        {
-          # Add any you need here
+          default = pkgs.mkShell {
-          packages = with pkgs; [ colmena.packages.${pkgs.system}.colmena ];
+            # The Nix packages provided in the environment
+            # Add any you need here
+            packages = with pkgs; [
+              colmena.packages.${pkgs.stdenv.system}.colmena
+              agenix.packages.${pkgs.stdenv.system}.agenix
+            ];
 
-          # Set any environment variables for your dev shell
+            # Set any environment variables for your dev shell
-          env = { };
+            env = { };
 
-          # Add any shell logic you want executed any time the environment is activated
+            # Add any shell logic you want executed any time the environment is activated
-          shellHook = ''
+            shellHook = '''';
-          '';
+          };
-        };
+        }
-      });
+      );
+
+      packages = forEachSupportedSystem (
+        { pkgs }:
+        {
+          inherit (colmena.packages."${pkgs.system}") colmena;
+        }
+      );
     };
 }

hosts/sin/configuration.nix

@@ -2,6 +2,7 @@
   modulesPath,
   lib,
   pkgs,
+  config,
   ...
 }:
 {
@@ -29,9 +30,11 @@
   networking = {
     hostName = "sin";
 
-    nameservers = [ "10.0.0.4" ];
+    networkmanager.enable = true;
 
-    dhcpcd.extraConfig = "nohook resolv.conf";
+    # nameservers = [ "10.0.0.4" ];
+
+    # dhcpcd.extraConfig = "nohook resolv.conf";
 
     firewall = {
       allowedTCPPorts = [
@@ -49,18 +52,25 @@
 
   time.timeZone = "Europe/Paris";
 
-  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+  nix.settings.experimental-features = [
+    "nix-command"
+    "flakes"
+  ];
   nixpkgs.config.allowUnfree = true;
 
   users.users = {
     zimablade = {
       isNormalUser = true;
       extraGroups = [ "wheel" ];
-      openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKsu+4S+BHmypQTq2IR9y+ihvbF7sXbBznKtIjVAeHJ1 shobu@nixos" ];
+      openssh.authorizedKeys.keys = [
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKsu+4S+BHmypQTq2IR9y+ihvbF7sXbBznKtIjVAeHJ1 shobu@nixos"
+      ];
     };
     shobu = {
       isNormalUser = true;
-      openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKsu+4S+BHmypQTq2IR9y+ihvbF7sXbBznKtIjVAeHJ1 shobu@nixos" ];
+      openssh.authorizedKeys.keys = [
+        "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKsu+4S+BHmypQTq2IR9y+ihvbF7sXbBznKtIjVAeHJ1 shobu@nixos"
+      ];
     };
   };
 
@@ -69,16 +79,18 @@
     "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKsu+4S+BHmypQTq2IR9y+ihvbF7sXbBznKtIjVAeHJ1 shobu@nixos"
   ];
 
-  environment.systemPackages = map lib.lowPrio [
+  environment.systemPackages =
-    pkgs.curl
+    map lib.lowPrio [
-    pkgs.gitMinimal
+      pkgs.curl
-  ] ++ (with pkgs; [
+      pkgs.gitMinimal
-    helix
+    ]
-    httpie
+    ++ (with pkgs; [
-    btop
+      helix
-    tmux
+      httpie
-    # firefox
+      btop
-  ]);
+      tmux
+      # firefox
+    ]);
 
   services = {
     openssh = {

hosts/sin/copyparty.nix

@@ -1,17 +1,27 @@
-{inputs, pkgs, ...}: {
+{
+  inputs,
+  pkgs,
+  config,
+  ...
+}:
+{
   imports = [ inputs.copyparty.nixosModules.default ];
   nixpkgs.overlays = [ inputs.copyparty.overlays.default ];
   environment.systemPackages = [ pkgs.copyparty ];
   services.copyparty = {
     enable = true;
 
+    group = "starr";
+
     settings = {
       p = [ 8086 ];
       e2dsa = true;
       e2ts = true;
       z = true;
       qr = true;
+      xff-hdr = "X-Real-IP";
       xff-src = "lan";
+      rproxy = 1;
       http-only = true;
       og = true;
       shr = "/shares";

hosts/sin/coredns/default.nix

@@ -1,6 +1,7 @@
-{...}: {
+{ ... }:
+{
   services.coredns = {
-    enable = true;
+    enable = false;
     config = ''
       homelab.local {
         log

hosts/sin/flake.nix

@@ -14,7 +14,15 @@
   };
 
   # Flake outputs
-    outputs = inputs@{ self, nixpkgs, disko, unstable, agenix, ... }:
+  outputs =
+    inputs@{
+      self,
+      nixpkgs,
+      disko,
+      unstable,
+      agenix,
+      ...
+    }:
     let
       # The systems supported for this flake
       supportedSystems = [
@@ -22,9 +30,14 @@
       ];
 
       # Helper to provide system-specific attributes
-      forEachSupportedSystem = f: nixpkgs.lib.genAttrs supportedSystems (system: f {
+      forEachSupportedSystem =
-        pkgs = import nixpkgs { inherit system; };
+        f:
-      });
+        nixpkgs.lib.genAttrs supportedSystems (
+          system:
+          f {
+            pkgs = import nixpkgs { inherit system; };
+          }
+        );
     in
     {
       nixosConfigurations.zimablade = nixpkgs.lib.nixosSystem {
@@ -40,15 +53,21 @@
         };
       };
 
-      devShells = forEachSupportedSystem ({ pkgs }: {
+      devShells = forEachSupportedSystem (
-        default = pkgs.mkShell {
+        { pkgs }:
-          # The Nix packages provided in the environment
+        {
-          # Add any you need here
+          default = pkgs.mkShell {
-          packages = with pkgs; [ pkgs.disko nixos-anywhere ];
+            # The Nix packages provided in the environment
+            # Add any you need here
+            packages = with pkgs; [
+              pkgs.disko
+              nixos-anywhere
+            ];
 
-          # Add any shell logic you want executed any time the environment is activated
+            # Add any shell logic you want executed any time the environment is activated
-          shellHook = '''';
+            shellHook = '''';
-        };
+          };
-      });
+        }
+      );
     };
 }

hosts/sin/glances.nix

@@ -1,4 +1,5 @@
-{...}: {
+{ ... }:
+{
   services.glances = {
     enable = true;
     openFirewall = true;

hosts/sin/hardware-configuration.nix

@@ -1,14 +1,27 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{ config, lib, pkgs, modulesPath, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}:
 
 {
-  imports =
+  imports = [
-    [ (modulesPath + "/installer/scan/not-detected.nix")
+    (modulesPath + "/installer/scan/not-detected.nix")
-    ];
+  ];
 
-  boot.initrd.availableKernelModules = [ "ahci" "xhci_pci" "usb_storage" "usbhid" "sd_mod" "sdhci_pci" ];
+  boot.initrd.availableKernelModules = [
+    "ahci"
+    "xhci_pci"
+    "usb_storage"
+    "usbhid"
+    "sd_mod"
+    "sdhci_pci"
+  ];
   boot.initrd.kernelModules = [ ];
   boot.kernelModules = [ "kvm-intel" ];
   boot.extraModulePackages = [ ];

hosts/sin/homepage.nix

@@ -1,12 +1,12 @@
-
+{ inputs, pkgs, ... }:
-{inputs, pkgs, ...}: {
+{
   services.homepage-dashboard = {
     enable = true;
     openFirewall = true;
     allowedHosts = "dashboard.shobu.fr";
     settings = {
       title = "Shobu's homelab dashboard";
-      description = "a dashboard of free and wesome bullshit";
+      description = "a dashboard of free and awesome bullshit";
       startUrl = "https://dashboard.shobu.fr";
       base = "https://dashboard.shobu.fr";
       headerStyle = "boxed";
@@ -16,7 +16,7 @@
       };
 
       layout = [
-        {"resources" = {};}
+        { "resources" = { }; }
         {
           "about me stuff" = {
             tab = "Public";
@@ -44,7 +44,7 @@
     widgets = [
       {
         greeting = {
-          text = "Welcome on my services and links dashboard, make yourself home.";
+          text = "Welcome on my services and links dashboard, make yourself home. :3";
         };
       }
       {
@@ -117,6 +117,15 @@
               };
             };
           }
+          {
+            "reclamation" = {
+              description = "bring back your world to life";
+              widget = {
+                type = "minecraft";
+                url = "udp://minecraft.shobu.fr:43001";
+              };
+            };
+          }
         ];
       }
       {

hosts/sin/jellyfin.nix

@@ -1,6 +1,8 @@
-{pkgs, inputs, ...}: let
+{ pkgs, inputs, ... }:
+let
   unstable = import inputs.unstable { system = pkgs.system; };
-in {
+in
+{
   nixpkgs.config.packageOverrides = pkgs: {
     vaapiIntel = pkgs.vaapiIntel.override { enableHybridCodec = true; };
   };
@@ -27,16 +29,41 @@ in {
     extraGroups = [ "jellyfin" ];
   };
 
-  users.users.sonarr.extraGroups = ["jellyfin" "radarr" "transmission" "starr"];
+  users.users.sonarr.extraGroups = [
-  users.users.radarr.extraGroups = ["jellyfin" "sonarr" "transmission" "starr"];
+    "jellyfin"
-  users.users.bazarr.extraGroups = ["jellyfin" "sonarr" "transmission" "starr" "radarr"];
+    "radarr"
-  users.users.lidarr.extraGroups = ["jellyfin" "starr" "transmission"];
+    "transmission"
-  
+    "starr"
-  users.users.shobu.extraGroups = [ "jellyfin" "starr" "transmission" "radarr" "sonarr" ];
+  ];
+  users.users.radarr.extraGroups = [
+    "jellyfin"
+    "sonarr"
+    "transmission"
+    "starr"
+  ];
+  users.users.bazarr.extraGroups = [
+    "jellyfin"
+    "sonarr"
+    "transmission"
+    "starr"
+    "radarr"
+  ];
+  users.users.lidarr.extraGroups = [
+    "jellyfin"
+    "starr"
+    "transmission"
+  ];
 
+  users.users.shobu.extraGroups = [
+    "jellyfin"
+    "starr"
+    "transmission"
+    "radarr"
+    "sonarr"
+  ];
 
   users.groups = {
-    starr = {};
+    starr = { };
   };
 
   services = {

hosts/sin/luks-btrfs-raid.nix

@@ -1,4 +1,5 @@
-{...}: {
+{ ... }:
+{
   disko.devices = {
     disk = {
       # Devices will be mounted and formatted in alphabetical order, and btrfs can only mount raids
@@ -49,39 +50,17 @@
         };
       };
 
-      data1 = {
+      data = {
         type = "disk";
         device = "/dev/sda";
         content = {
           type = "gpt";
           partitions = {
-            crypt_p1 = {
+            crypt_p = {
               size = "100%";
               content = {
                 type = "luks";
-                name = "p_data1"; # device-mapper name when decrypted
+                name = "p_data";
-                # Remove settings.keyFile if you want to use interactive password entry
-                settings = {
-                  allowDiscards = true;
-                  keyFile = "/dev/disk/by-uuid/2021-07-11-12-33-27-00";
-                  keyFileSize = 4096;
-                };
-              };
-            };
-          };
-        };
-      };
-      data2 = {
-        type = "disk";
-        device = "/dev/sdb";
-        content = {
-          type = "gpt";
-          partitions = {
-            crypt_p2 = {
-              size = "100%";
-              content = {
-                type = "luks";
-                name = "p_data2";
                 # Remove settings.keyFile if you want to use interactive password entry
                 settings = {
                   allowDiscards = true;
@@ -90,10 +69,6 @@
                 };
                 content = {
                   type = "btrfs";
-                  extraArgs = [
-                    "-d raid0"
-                    "/dev/mapper/p_data1" # Use decrypted mapped device, same name as defined in disk1
-                  ];
                   subvolumes = {
                     "/" = {
                       mountpoint = "/mnt/fs";

hosts/sin/matrix.nix

@@ -1,4 +1,4 @@
-{pkgs, config, ...}:
+{ pkgs, config, ... }:
 {
   users.users = {
     postgres = {
@@ -26,7 +26,10 @@
     '';
   };
 
-  networking.firewall.allowedTCPPorts = [ 8008 8448 ];
+  networking.firewall.allowedTCPPorts = [
+    8008
+    8448
+  ];
 
   services.matrix-synapse = {
     enable = true;
@@ -39,13 +42,16 @@
       listeners = [
         {
           port = 8008;
-          bind_addresses = ["0.0.0.0"];
+          bind_addresses = [ "0.0.0.0" ];
           type = "http";
           tls = false;
           x_forwarded = true;
           resources = [
             {
-              names = [ "client" "federation" ];
+              names = [
+                "client"
+                "federation"
+              ];
               compress = true;
             }
           ];

hosts/sin/ollama.nix

@@ -0,0 +1,21 @@
+{ inputs, ... }:
+{
+  # virtualisation.docker = {
+  #   enable = true;
+  #   storageDriver = "btrfs";
+  # };
+
+  services.ollama = {
+    enable = true;
+    openFirewall = true;
+    loadModels = [ ];
+    acceleration = "cuda";
+  };
+
+  services.open-webui = {
+    enable = true;
+    openFirewall = true;
+    host = "0.0.0.0";
+    port = 8050;
+  };
+}

hosts/sin/secrets.nix

@@ -1,4 +1,5 @@
-{...}: {
+{ ... }:
+{
   age.secrets = {
     # captcha = {
     #   file = ./secrets/matrix_captcha.age;

hosts/sin/transmission.nix

@@ -1,4 +1,10 @@
-{config, ...}: {
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+{
 
   users.users."starr" = {
     extraGroups = [ "transmission" ];
@@ -14,56 +20,76 @@
     transmission.gid = 989;
   };
 
-  virtualisation.oci-containers = let
+  # systemd.services = {
-    peerport = "63369";
+  #   docker-transmission-network = {
-  in {
+  #     after = [
-    backend = "docker";
+  #       "network.target"
-    containers = {
+  #       "docker-gluetun.service"
-      gluetun = {
+  #       "docker-transmission.service"
-        image = "qmcgaw/gluetun";
+  #     ];
-        environment = {
+  #     wantedBy = [
-          VPN_SERVICE_PROVIDER = "airvpn";
+  #       "docker-gluetun.service"
-          VPN_TYPE = "wireguard";
+  #       "docker-transmission.service"
-          # WIREGUARD_PRIVATE_KEY = "from agenix";
+  #     ];
-          # WIREGUARD_PRESHARED_KEY = "from agenix";
+  #     serviceConfig = {
-          # WIREGUARD_ADDRESSES = "from agenix";
+  #       ExecStart = "${lib.getExe pkgs.docker} network create docker-transmission; exit 0";
-          # SERVER_COUNTRIES = "from agenix";
+  #     };
-          FIREWALL_VPN_INPUT_PORTS = "13277,${peerport}";
+  #   };
+  # };
+
+  virtualisation.oci-containers =
+    let
+      peerport = "63369";
+    in
+    {
+      backend = "docker";
+      containers = {
+        gluetun = {
+          image = "qmcgaw/gluetun";
+          environment = {
+            VPN_SERVICE_PROVIDER = "airvpn";
+            VPN_TYPE = "wireguard";
+            # WIREGUARD_PRIVATE_KEY = "from agenix";
+            # WIREGUARD_PRESHARED_KEY = "from agenix";
+            # WIREGUARD_ADDRESSES = "from agenix";
+            # SERVER_COUNTRIES = "from agenix";
+            FIREWALL_VPN_INPUT_PORTS = "13277,${peerport}";
+          };
+          environmentFiles = [
+            config.age.secrets.airvpn-params.path
+          ];
+          extraOptions = [
+            "--cap-add=NET_ADMIN"
+            "--device=/dev/net/tun"
+            # "--network=docker-transmission"
+          ];
+          ports = [
+            "13277:13277"
+            "9091:13277"
+            "${peerport}:${peerport}"
+            "${peerport}:${peerport}/udp"
+          ];
         };
-        environmentFiles = [
+        transmission = {
-          config.age.secrets.airvpn-params.path
+          image = "docker.io/linuxserver/transmission:latest";
-        ];
+          volumes = [
-        extraOptions = [
+            "/etc/transmission:/config"
-          "--cap-add=NET_ADMIN"
+            "/etc/localtime:/etc/localtime:ro"
-          "--device=/dev/net/tun"
+            "/mnt/mediacenter/torrents:/mnt/mediacenter/torrents"
-        ];
+            "/mnt/data/transmission_downloads:/mnt/data/transmission_downloads"
-        ports = [
+          ];
-          "13277:13277"
+          dependsOn = [
-          "9091:13277"
+            "gluetun"
-          "${peerport}:${peerport}"
+          ];
-          "${peerport}:${peerport}/udp"
+          extraOptions = [
-        ];
+            "--network=container:gluetun"
-      };
+          ];
-      transmission = {
+          environment = {
-        image = "docker.io/linuxserver/transmission:latest";
+            PUID = toString config.users.users.transmission.uid;
-        volumes = [
+            GUID = toString config.users.groups.transmission.gid;
-          "/etc/transmission:/config"
+            PEERPORT = peerport;
-          "/etc/localtime:/etc/localtime:ro"
+          };
-          "/mnt/mediacenter/torrents:/mnt/mediacenter/torrents"
-          "/mnt/data/transmission_downloads:/mnt/data/transmission_downloads"
-        ];
-        dependsOn = [
-          "gluetun"
-        ];
-        extraOptions = [
-          "--network=container:gluetun"
-        ];
-        environment = {
-          PUID = toString config.users.users.transmission.uid;
-          GUID = toString config.users.groups.transmission.gid;
-          PEERPORT = peerport;
         };
       };
     };
-  };
 }

hosts/thea/configuration.nix

@@ -2,18 +2,26 @@
 # your system. Help is available in the configuration.nix(5) man page, on
 # https://search.nixos.org/options and in the NixOS manual (`nixos-help`).
 
-{ config, lib, pkgs, nodes, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  nodes,
+  ...
+}:
+let
+  sin-address = "192.168.1.14";
+in
 
 {
-  imports =
+  imports = [
-    [
+    ./nginx.nix
-      ./nginx.nix
+    # ./striped
-      # ./striped
+    # ./cybercoffee
-      # ./cybercoffee
+    ./ollama.nix
-      ./ollama.nix
+    ./minecraft.nix
-      ./minecraft.nix
+    ./nix-serve.nix
-      # ./shares.nix
+  ];
-    ];
 
   # Use the systemd-boot EFI boot loader.
   boot.loader.systemd-boot.enable = true;
@@ -22,9 +30,11 @@
   networking = {
     hostName = "thea"; # Define your hostname.
 
-    nameservers = [ "10.0.0.4" ];
+    networkmanager.enable = true;
 
-    dhcpcd.extraConfig = "nohook resolv.conf";
+    # nameservers = [ "10.0.0.4" ];
+
+    # dhcpcd.extraConfig = "nohook resolv.conf";
 
     firewall = {
       allowedTCPPorts = [ nodes.sin.config.services.gitea.settings.server.SSH_PORT ];
@@ -33,18 +43,23 @@
       enable = true;
       internalInterfaces = [ "enp1s0" ];
       externalInterface = "enp1s0";
-      forwardPorts = [ {
+      forwardPorts = [
-        # TODO refactor this in the gitea/n100 module
+        {
-        sourcePort = nodes.sin.config.services.gitea.settings.server.SSH_PORT;
+          # TODO refactor this in the gitea/n100 module
-        proto = "tcp";
+          sourcePort = nodes.sin.config.services.gitea.settings.server.SSH_PORT;
-        destination = "10.0.0.4:22";  
+          proto = "tcp";
-      } ];
+          destination = "${sin-address}:22";
+        }
+      ];
     };
   };
 
   time.timeZone = "Europe/Paris";
 
-  nix.settings.experimental-features = [ "nix-command" "flakes" ];
+  nix.settings.experimental-features = [
+    "nix-command"
+    "flakes"
+  ];
   nixpkgs.config.allowUnfree = true;
 
   users.users.n100 = {
@@ -53,14 +68,17 @@
     packages = with pkgs; [
     ];
 
-    openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKsu+4S+BHmypQTq2IR9y+ihvbF7sXbBznKtIjVAeHJ1 shobu@nixos" ];
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKsu+4S+BHmypQTq2IR9y+ihvbF7sXbBznKtIjVAeHJ1 shobu@nixos"
+    ];
   };
 
   users.users.root = {
-    openssh.authorizedKeys.keys = [ "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKsu+4S+BHmypQTq2IR9y+ihvbF7sXbBznKtIjVAeHJ1 shobu@nixos" ];
+    openssh.authorizedKeys.keys = [
+      "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKsu+4S+BHmypQTq2IR9y+ihvbF7sXbBznKtIjVAeHJ1 shobu@nixos"
+    ];
   };
 
-
   environment.systemPackages = with pkgs; [
     lunarvim
     wget
@@ -108,4 +126,3 @@
   system.stateVersion = "24.11"; # Did you read the comment?
 
 }
-

hosts/thea/cybercoffee/default.nix

@@ -1,4 +1,4 @@
-{pkgs, ...}:
+{ pkgs, ... }:
 {
   imports = [
     ./halflife.nix

hosts/thea/cybercoffee/halflife.nix

@@ -1,2 +1 @@
-
+{ ... }: { }
-{...}: {}

hosts/thea/flake.nix

@@ -12,23 +12,24 @@
   };
 
   # Flake outputs
-  outputs = inputs@{
+  outputs =
-    self,
+    inputs@{
-    nixpkgs,
+      self,
-    nix-minecraft,
+      nixpkgs,
-    shoblog-front,
+      nix-minecraft,
-    striped-front,
+      shoblog-front,
-    striped-back,
+      striped-front,
-    ...
+      striped-back,
-  }:
+      ...
-  {
+    }:
-    nixosConfigurations.n100 = nixpkgs.lib.nixosSystem {
+    {
-      system = "x86_64-linux";
+      nixosConfigurations.n100 = nixpkgs.lib.nixosSystem {
-      specialArgs = { inherit inputs; };
+        system = "x86_64-linux";
-      modules = [
+        specialArgs = { inherit inputs; };
-        ./configuration.nix
+        modules = [
-        ./hardware-configuration.nix
+          ./configuration.nix
-      ];
+          ./hardware-configuration.nix
+        ];
+      };
     };
-  };
 }

hosts/thea/hardware-configuration.nix

@@ -1,47 +1,61 @@
 # Do not modify this file!  It was generated by ‘nixos-generate-config’
 # and may be overwritten by future invocations.  Please make changes
 # to /etc/nixos/configuration.nix instead.
-{ config, lib, pkgs, modulesPath, ... }:
+{
+  config,
+  lib,
+  pkgs,
+  modulesPath,
+  ...
+}:
 
 {
-  imports =
+  imports = [
-    [ (modulesPath + "/installer/scan/not-detected.nix")
+    (modulesPath + "/installer/scan/not-detected.nix")
-    ];
+  ];
 
-  boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "sd_mod" "sdhci_pci" ];
+  boot.initrd.availableKernelModules = [
+    "xhci_pci"
+    "ahci"
+    "sd_mod"
+    "sdhci_pci"
+  ];
   boot.initrd.kernelModules = [ ];
   boot.kernelModules = [ "kvm-intel" ];
   boot.extraModulePackages = [ ];
 
-  fileSystems."/" =
+  fileSystems."/" = {
-    { device = "/dev/disk/by-uuid/09c733e4-b0df-4416-977b-50d9feb225fc";
+    device = "/dev/disk/by-uuid/09c733e4-b0df-4416-977b-50d9feb225fc";
-      fsType = "btrfs";
+    fsType = "btrfs";
-      options = [ "subvol=root" ];
+    options = [ "subvol=root" ];
-    };
+  };
 
-  fileSystems."/nix" =
+  fileSystems."/nix" = {
-    { device = "/dev/disk/by-uuid/09c733e4-b0df-4416-977b-50d9feb225fc";
+    device = "/dev/disk/by-uuid/09c733e4-b0df-4416-977b-50d9feb225fc";
-      fsType = "btrfs";
+    fsType = "btrfs";
-      options = [ "subvol=nix" ];
+    options = [ "subvol=nix" ];
-    };
+  };
 
-  fileSystems."/home" =
+  fileSystems."/home" = {
-    { device = "/dev/disk/by-uuid/09c733e4-b0df-4416-977b-50d9feb225fc";
+    device = "/dev/disk/by-uuid/09c733e4-b0df-4416-977b-50d9feb225fc";
-      fsType = "btrfs";
+    fsType = "btrfs";
-      options = [ "subvol=home" ];
+    options = [ "subvol=home" ];
-    };
+  };
 
-  fileSystems."/swap" =
+  fileSystems."/swap" = {
-    { device = "/dev/disk/by-uuid/09c733e4-b0df-4416-977b-50d9feb225fc";
+    device = "/dev/disk/by-uuid/09c733e4-b0df-4416-977b-50d9feb225fc";
-      fsType = "btrfs";
+    fsType = "btrfs";
-      options = [ "subvol=swap" ];
+    options = [ "subvol=swap" ];
-    };
+  };
 
-  fileSystems."/boot" =
+  fileSystems."/boot" = {
-    { device = "/dev/disk/by-uuid/D1B9-8019";
+    device = "/dev/disk/by-uuid/D1B9-8019";
-      fsType = "vfat";
+    fsType = "vfat";
-      options = [ "fmask=0077" "dmask=0077" ];
+    options = [
-    };
+      "fmask=0077"
+      "dmask=0077"
+    ];
+  };
 
   swapDevices = [ ];
 

hosts/thea/minecraft.nix

@@ -1,9 +1,15 @@
-{pkgs, inputs, ...}:
+{
+  pkgs,
+  inputs,
+  lib,
+  ...
+}:
 let
   modpack = pkgs.fetchPackwizModpack {
-      url = "file:///${inputs.testing-grounds.modpack}/pack.toml";
+    url = "file:///${inputs.testing-grounds.modpack}/pack.toml";
     packHash = "sha256-+taYj4uroLNxM4Nia3n+5P1Y/g6dzE6Iq13TsZgk4mU=";
   };
+  reclamation = inputs.reclamation.packages.${pkgs.stdenv.system};
 in
 {
   imports = [ inputs.nix-minecraft.nixosModules.minecraft-servers ];
@@ -14,6 +20,28 @@ in
     eula = true;
     openFirewall = true;
 
+    servers.reclamation = {
+      enable = false;
+      package = pkgs.fabricServers.fabric;
+
+      symlinks = {
+        "mods" = "${reclamation.modpack}/mods";
+        "FTBLang" = "${reclamation.modpack}/FTBLang";
+        "defaultconfigs" = "${reclamation.modpack}/defaultconfigs";
+        "ressourcepacks" = "${reclamation.modpack}/ressourcepacks";
+        "config" = "${reclamation.modpack}/config";
+        "kubejs" = "${reclamation.modpack}/kubejs";
+        "patchouli_books" = "${reclamation.modpack}/patchouli_books";
+        "server.dat" = "${reclamation.modpack}/server.dat";
+      };
+
+      serverProperties = {
+        server-port = 43001;
+        motd = "all hail the gorgon v3.14";
+        allow-flight = true;
+      };
+    };
+
     servers.testing-grounds = {
       enable = true;
 

hosts/thea/nginx.nix

@@ -1,9 +1,16 @@
-{inputs, ...}:
+{ inputs, ... }:
 let
-  striped-front = inputs.striped-front;
+  # striped-front = inputs.striped-front;
-in {
 
-  networking.firewall.allowedTCPPorts = [ 80 443 8448 ];
+  sin-address = "192.168.1.14";
+in
+{
+
+  networking.firewall.allowedTCPPorts = [
+    80
+    443
+    8448
+  ];
 
   services.nginx = {
     enable = true;
@@ -11,112 +18,115 @@ in {
     recommendedTlsSettings = true;
 
     virtualHosts =
-    let
+      let
-      mkStarr = host: port: {
+        mkStarr = host: port: {
-        "${host}" = {
+          "${host}" = {
-          enableACME = true;
+            enableACME = true;
-          forceSSL = true;
+            forceSSL = true;
 
-          locations."/" = {
+            locations."/" = {
-            proxyPass = "http://10.0.0.4:${port}";
+              proxyPass = "http://${sin-address}:${port}";
-            proxyWebsockets = true;
+              proxyWebsockets = true;
-            extraConfig = ''
+              extraConfig = ''
-              proxy_ssl_server_name on;
+                proxy_ssl_server_name on;
-              proxy_read_timeout 4800s;
+                proxy_read_timeout 4800s;
-            '';
+              '';
+            };
           };
         };
-      };
+      in
-    in
+      (
-    (
+        mkStarr "jellyfin.shobu.fr" "8096"
-      mkStarr "jellyfin.shobu.fr" "8096"
+        // mkStarr "radarr.shobu.fr" "7878"
-      // mkStarr "radarr.shobu.fr" "7878"
+        // mkStarr "sonarr.shobu.fr" "8989"
-      // mkStarr "sonarr.shobu.fr" "8989"
+        // mkStarr "prowlarr.shobu.fr" "9696"
-      // mkStarr "prowlarr.shobu.fr" "9696"
+        // mkStarr "bazarr.shobu.fr" "6767"
-      // mkStarr "bazarr.shobu.fr" "6767"
+        // mkStarr "jellyseerr.shobu.fr" "5055"
-      // mkStarr "jellyseerr.shobu.fr" "5055"
+        // mkStarr "fileshelter.shobu.fr" "5091"
-      // mkStarr "fileshelter.shobu.fr" "5091"
+        // mkStarr "lidarr.shobu.fr" "8686"
-      // mkStarr "lidarr.shobu.fr" "8686"
+        // mkStarr "transmission.shobu.fr" "9091"
-      // mkStarr "transmission.shobu.fr" "9091"
+        // mkStarr "zimablade-admin.shobu.fr" "61208"
-      // mkStarr "zimablade-admin.shobu.fr" "61208"
+        // {
-      // {
+          "shobu.fr" = {
-        "shobu.fr" = {
+            enableACME = true;
-          enableACME = true;
+            forceSSL = true;
-          forceSSL = true;
 
-          root = "${inputs.shoblog-front.packages.x86_64-linux.default}/dist";
+            root = "${inputs.shoblog-front.packages.x86_64-linux.default}/dist";
-        };
-        "data.shobu.fr" = {
-          enableACME = true;
-          forceSSL = true;
-
-          root = "/mnt/shares/data";
-        };
-        "bddtrans.shobu.fr" = {
-          enableACME = true;
-          forceSSL = true;
-
-          locations."/" = {
-            proxyPass = "http://10.0.0.4:8001";
-            extraConfig = ''
-              proxy_ssl_server_name on;
-            '';
           };
-        };
+          "data.shobu.fr" = {
-        "bddtrans-api.shobu.fr" = {
+            enableACME = true;
-          enableACME = true;
+            forceSSL = true;
-          forceSSL = true;
 
-          locations."/" = {
+            root = "/mnt/shares/data";
-              proxyPass = "http://10.0.0.4:8000";
-            proxyWebsockets = true;
-            extraConfig = ''
-              proxy_ssl_server_name on;
-            '';
           };
-        };
+          "bddtrans.shobu.fr" = {
-        "striped.shobu.fr" = {
+            enableACME = true;
-          enableACME = true;
+            forceSSL = true;
-          forceSSL = true;
 
-          root = "${striped-front.packages.x86_64-linux.default}/dist";
+            locations."/" = {
-        };
+              proxyPass = "http://${sin-address}:8001";
-        "dashboard.shobu.fr" = {
+              extraConfig = ''
-          enableACME = true;
+                proxy_ssl_server_name on;
-          forceSSL = true;
+              '';
-
+            };
-          locations."/" = {
-            proxyPass = "http://10.0.0.4:8082";
           };
-        };
+          "bddtrans-api.shobu.fr" = {
-        "git.shobu.fr" = {
+            enableACME = true;
-          enableACME = true;
+            forceSSL = true;
-          forceSSL = true;
 
-          locations."/" = {
+            locations."/" = {
-            proxyPass = "http://10.0.0.4:3000";
+              proxyPass = "http://${sin-address}:8000";
+              proxyWebsockets = true;
+              extraConfig = ''
+                proxy_ssl_server_name on;
+              '';
+            };
           };
-        };
+          # "striped.shobu.fr" = {
-        "files.shobu.fr" = {
+          #   enableACME = true;
-          enableACME = true;
+          #   forceSSL = true;
-          forceSSL = true;
 
-          locations."/" = {
+          #   root = "${striped-front.packages.x86_64-linux.default}/dist";
-            proxyPass = "http://10.0.0.4:8086";
+          # };
+          "dashboard.shobu.fr" = {
+            enableACME = true;
+            forceSSL = true;
+
+            locations."/" = {
+              proxyPass = "http://${sin-address}:8082";
+            };
           };
-        };
+          "git.shobu.fr" = {
-        # "matrix.shobu.fr" = {
+            enableACME = true;
-        #   forceSSL = true;
+            forceSSL = true;
-        #   enableACME = true;
+
-        #   locations."/".extraConfig = ''
+            locations."/" = {
-        #     return 404;
+              proxyPass = "http://${sin-address}:3000";
-        #   '';
+            };
-        #   locations."/_matrix".proxyPass = "http://10.0.0.4:8008";
+          };
-        #   locations."/_synapse/client".proxyPass = "http://10.0.0.4:8008";
+          "files.shobu.fr" = {
-        #   locations."/.well-known/matrix/server".proxyPass = "http://10.0.0.4:8008/.well-known/matrix/server";
+            enableACME = true;
-        # };
+            forceSSL = true;
-      }
+
-    );
+            locations."/" = {
+              proxyPass = "http://${sin-address}:8086";
+              extraConfig = ''
+                proxy_set_header X-Real-IP $remote_addr;
+              '';
+            };
+          };
+          # "matrix.shobu.fr" = {
+          #   forceSSL = true;
+          #   enableACME = true;
+          #   locations."/".extraConfig = ''
+          #     return 404;
+          #   '';
+          #   locations."/_matrix".proxyPass = "http://${sin-address}:8008";
+          #   locations."/_synapse/client".proxyPass = "http://${sin-address}:8008";
+          #   locations."/.well-known/matrix/server".proxyPass = "http://${sin-address}:8008/.well-known/matrix/server";
+          # };
+        }
+      );
   };
 
   security.acme = {

hosts/thea/ollama.nix

@@ -1,4 +1,5 @@
-{inputs, ...}: {
+{ inputs, ... }:
+{
   # virtualisation.docker = {
   #   enable = true;
   #   storageDriver = "btrfs";

hosts/thea/shares.nix

@@ -1,10 +1,14 @@
-{...}: {
+{ ... }:
+let
+  sin-address = "192.168.1.14";
+in
+{
   boot.supportedFilesystems = [ "fuse.sshfs" ];
   programs.fuse.userAllowOther = true;
 
   fileSystems = {
     "/mnt/shares/data" = {
-      device = "shobu@10.0.0.4:/mnt/data/";
+      device = "shobu@${sin-address}:/mnt/data/";
       fsType = "fuse.sshfs";
       options = [
         "debug"

hosts/thea/striped/back.nix

@@ -1,7 +1,8 @@
-{inputs, ...}:
+{ inputs, ... }:
 let
   striped-back = inputs.striped-back;
-in {
+in
+{
   imports = [
     striped-back.nixosModules.default
   ];
@@ -17,7 +18,7 @@ in {
     socket.enable = true;
 
     settings.django = {
-      allowed-hosts = ["striped-api.shobu.fr"];
+      allowed-hosts = [ "striped-api.shobu.fr" ];
       debug = true;
       databases = {
         default = {

hosts/thea/striped/default.nix

@@ -1,4 +1,5 @@
-{striped-back, striped-front, ...}:{
+{ striped-back, striped-front, ... }:
+{
   imports = [
     ./back.nix
   ];

modules/gitea/sin/default.nix

@@ -1,6 +1,8 @@
-{lib, ...}: let
+{ lib, ... }:
+let
   ssh_port = 24658;
-in {
+in
+{
   services = {
     gitea = {
       enable = true;

modules/gitea/thea/default.nix

@@ -1,10 +1,56 @@
-{nodes, ...}:{
+{
+  nodes,
+  inputs,
+  pkgs,
+  ...
+}:
+let
+  sin-address = "192.168.1.14";
+  unstable = import inputs.unstable { system = pkgs.system; };
+in
+{
   imports = [
     ./virtualisation.nix
   ];
-  networking.nat.forwardPorts = [{
+  networking.nat.forwardPorts = [
-    sourcePort = nodes.sin.config.services.gitea.settings.server.SSH_PORT;
+    {
-    proto = "tcp";
+      sourcePort = nodes.sin.config.services.gitea.settings.server.SSH_PORT;
-    destination = "10.0.0.4:22";  
+      proto = "tcp";
-  }];
+      destination = "${sin-address}:22";
+    }
+  ];
+
+  services.gitea-actions-runner.package = unstable.gitea-actions-runner;
+
+  # services.gitea-actions-runner.instances = {
+  #   "gitea.shobu.fr-runner" = {
+  #     enable = true;
+  #     name = "gitea.shobu.fr-runner";
+  #     url = nodes.sin.config.services.gitea.settings.server.ROOT_URL;
+  #     token = "uEDPBW6Z9oItAKRtloVwis0LkPbD4OmV2w5esOhW";
+  #     labels = [
+  #       "ubuntu-22.04:docker://docker.gitea.com/runner-images:ubuntu-22.04"
+  #     ];
+  #     settings = {
+  #       cache = {
+  #         # Enable cache server to use actions/cache.
+  #         enabled = true;
+  #         # The directory to store the cache data.
+  #         # If it's empty, the cache data will be stored in $HOME/.cache/actcache.
+  #         dir = "";
+  #         # The host of the cache server.
+  #         # It's not for the address to listen, but the address to connect from job containers.
+  #         # So 0.0.0.0 is a bad choice, leave it empty to detect automatically.
+  #         host = "";
+  #         # The port of the cache server.
+  #         # 0 means to use a random available port.
+  #         port = 0;
+  #         # The external cache server URL. Valid only when enable is true.
+  #         # If it's specified, act_runner will use this URL as the ACTIONS_CACHE_URL rather than start a server by itself.
+  #         # The URL should generally end with "/".
+  #         external_server = "";
+  #       };
+  #     };
+  #   };
+  # };
 }

modules/gitea/thea/virtualisation.nix

@@ -1,4 +1,5 @@
-{nodes, pkgs, ...}: {
+{ nodes, pkgs, ... }:
+{
   systemd.sockets.podman.socketConfig.Symlinks = [
     "/run/docker.sock"
   ];
@@ -15,32 +16,36 @@
     };
   };
 
-  virtualisation.oci-containers.containers = let
+  virtualisation.oci-containers.containers =
-    runner_config = pkgs.writeTextFile {
+    let
-      name = "config.yml";
+      runner_config = pkgs.writeTextFile {
-      text = ''
+        name = "config.yml";
+        text = ''
           container:
-            network: "bridge"
+            network: "host"
+            valid_volumes:
+              - "/var/nix/hosted-store"
         '';
-    };
-  in {
-    gitea-runner = {
-      image = "gitea/act_runner@sha256:8477d5b61b655caad4449888bae39f1f34bebd27db56cb15a62dccb3dcf3a944";
-      autoStart = true;
-
-      # capabilities = {
-      #   NET_RAW = true;
-      # };
-      
-      environment = {
-        GITEA_INSTANCE_URL = nodes.sin.config.services.gitea.settings.server.ROOT_URL;
-        GITEA_RUNNER_REGISTRATION_TOKEN = "uEDPBW6Z9oItAKRtloVwis0LkPbD4OmV2w5esOhW";
-        CONFIG_FILE = "/config.yml";
       };
-      volumes = [
+    in
-        "/var/run/docker.sock:/var/run/docker.sock"
+    {
-        "${runner_config}:/config.yml:ro"
+      gitea-runner = {
-      ];
+        image = "gitea/act_runner@sha256:8477d5b61b655caad4449888bae39f1f34bebd27db56cb15a62dccb3dcf3a944";
+        autoStart = true;
+
+        # capabilities = {
+        #   NET_RAW = true;
+        # };
+
+        environment = {
+          GITEA_INSTANCE_URL = nodes.sin.config.services.gitea.settings.server.ROOT_URL;
+          GITEA_RUNNER_REGISTRATION_TOKEN = "uEDPBW6Z9oItAKRtloVwis0LkPbD4OmV2w5esOhW";
+          CONFIG_FILE = "/config.yml";
+        };
+        volumes = [
+          "/var/run/docker.sock:/var/run/docker.sock"
+          "${runner_config}:/config.yml:ro"
+        ];
+      };
     };
-  };
 }

scripts/upload-to-cache.sh

@@ -0,0 +1,11 @@
+#!/bin/sh
+set -eu
+set -f
+
+if ! nix --version; then
+  exit 0
+fi
+
+export IFS=' '
+echo "Uploading paths" $OUT_PATHS
+exec nix copy --to "ssh://root@localhost" $OUT_PATHS