flake.lock

@@ -255,11 +255,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1777580503,
-        "narHash": "sha256-JBnRWEkz7jV1IBZWYS5e97rngP66sYRB++3CzM2fnv4=",
+        "lastModified": 1772342291,
+        "narHash": "sha256-hXlWBR5yBOtxgF/7Vr2tVknh4LxFGheiS7yHD8sWbfs=",
         "ref": "refs/heads/master",
-        "rev": "5771d6c6cbff83d956d54cb2fec1a7e337b8af67",
-        "revCount": 83,
+        "rev": "1ef6d4cd8517855b9aaf7671dccc6f992eea1f6c",
+        "revCount": 74,
         "type": "git",
         "url": "https://git.posixlycorrect.com/fabian/homepage.git"
       },

home/modules/gaming.nix

@@ -11,11 +11,10 @@ in {
     enable = mkEnableOption "gaming apps";
   };
   config = mkIf cfg.enable {
-    home.packages = with pkgs; [
-      ckan # ksp mod manager
-      lutris # game launcher
-      openrct2 # rollercoaster tycoon
-      prismlauncher # minecraft
+    home.packages = [
+      pkgs.lutris
+      pkgs.openrct2
+      pkgs.prismlauncher
     ];
   };
 }

sys/platforms/vps/hardware-configuration.nix

@@ -14,6 +14,12 @@ in {
       options = ["nofail" "noatime"];
     };
 
+    "/mnt/export2178" = {
+      device = "172.16.129.151:/nas/5876/immich";
+      fsType = "nfs";
+      options = ["nofail" "noatime"];
+    };
+
     "/mnt/export2179" = {
       device = "172.16.131.31:/nas/5876/syncthing";
       fsType = "nfs";

sys/platforms/vps/srv/default.nix

@@ -14,6 +14,7 @@ with lib; {
     ./trilium.nix
     ./syncthing.nix
     ./calibre-web.nix
+    ./immich.nix
     ./mealie.nix
     ./dufs.nix
     ./isso.nix

sys/platforms/vps/srv/immich.nix

@@ -0,0 +1,72 @@
+{
+  lib,
+  pkgs,
+  ...
+}:
+with lib; {
+  services = {
+    nginx = {
+      virtualHosts."photos.posixlycorrect.com" = {
+        enableACME = true;
+        forceSSL = true;
+        extraConfig = ''
+          proxy_headers_hash_max_size 512;
+          proxy_headers_hash_bucket_size 128;
+        '';
+        locations."/" = {
+          proxyPass = "http://localhost:2283";
+        };
+      };
+    };
+
+    immich = {
+      enable = true;
+      secretsFile = "/var/trust/immich/secrets.txt";
+      mediaLocation = "/mnt/export2178/immich/media";
+      machine-learning.enable = false;
+      environment = {
+        IMMICH_TELEMETRY_EXCLUDE = "host,api,io,repo,job";
+      };
+      settings = {
+        machineLearning = {
+          enabled = false;
+        };
+        job = {
+          backgroundTask = {
+            concurrency = 1;
+          };
+          smartSearch = {
+            concurrency = 1;
+          };
+          metadataExtraction = {
+            concurrency = 1;
+          };
+          faceDetection = {
+            concurrency = 1;
+          };
+          search = {
+            concurrency = 1;
+          };
+          sidecar = {
+            concurrency = 1;
+          };
+          library = {
+            concurrency = 1;
+          };
+          migration = {
+            concurrency = 1;
+          };
+          thumbnailGeneration = {
+            concurrency = 1;
+          };
+          videoConversion = {
+            concurrency = 1;
+          };
+          notifications = {
+            concurrency = 1;
+          };
+        };
+      };
+    };
+  };
+}