From 77e83981d749e0ad96807b3d0c154ac7799e7cf2 Mon Sep 17 00:00:00 2001
From: Satria <admin@satr14.my.id>
Date: Tue, 3 Mar 2026 17:40:06 +0700
Subject: [PATCH] add ollama and safe mode

---
 modules/system/homelab/ai.nix    | 18 +++++++++++++-
 modules/system/homelab/dash.nix  | 42 ++++++++++++++------------------
 modules/system/homelab/proxy.nix |  5 +++-
 modules/system/server.nix        |  6 +++--
 4 files changed, 43 insertions(+), 28 deletions(-)

diff --git a/modules/system/homelab/ai.nix b/modules/system/homelab/ai.nix
index 49afe3d..dc6b291 100644
--- a/modules/system/homelab/ai.nix
+++ b/modules/system/homelab/ai.nix
@@ -1,3 +1,19 @@
 { ... }: {
-  
+  services = {
+    ollama = {
+      enable = true;
+      host = "127.0.0.1";
+      port = 11434;
+      # loadModels = [ "gemma3n:e4b" "gemma3n:e2b"  ];
+    };
+    open-webui = {
+      enable = true;
+      port = 8080;
+      environment = {
+        OLLAMA_BASE_URL = "http://localhost:11434";
+        WEBUI_AUTH = "False";
+        
+      };
+    };
+  };
 }
\ No newline at end of file
diff --git a/modules/system/homelab/dash.nix b/modules/system/homelab/dash.nix
index 672ad60..7147de9 100644
--- a/modules/system/homelab/dash.nix
+++ b/modules/system/homelab/dash.nix
@@ -58,6 +58,7 @@
     [ "ApacheHTTPD" "apache" "https://cdn.proxy.${homelab.domain}" "http://localhost:3000/" ]
     [ "Forgejo" "forgejo" "https://git.proxy.${homelab.domain}" "http://localhost:5080/" ]
     [ "Dockge" "docker" "https://containers.proxy.${homelab.domain}" "http://localhost:5001/" ]
+    [ "Ollama" "ollama" "https://ai.proxy.${homelab.domain}" "http://localhost:8080/" ]
   ];
   bookmarks = [
     [ "Tailscale" "tailscale" "https://login.tailscale.com/" ]
@@ -187,6 +188,22 @@ in {
           name = "Dashboard";
           show-mobile-header = true;
           columns = [
+            {
+              type = "bookmarks";
+              groups = [{
+                links = map (e: {
+                  same-tab = true;
+                  title = builtins.elemAt e 0;
+                  icon = "si:${builtins.elemAt e 1}";
+                  url = builtins.elemAt e 2;
+                }) bookmarks;
+              }];
+            }
+            {
+              type = "to-do";
+              id = "tasks";
+              hide-header = true;
+            }
             {
               size = "small";
               widgets = [
@@ -217,9 +234,7 @@ in {
               widgets = [
                 {
                   type = "server-stats";
-                  servers = [{
-                    type = "local";
-                  }];
+                  servers = [{ type = "local"; }];
                 }
                 {
                   type = "monitor";
@@ -235,27 +250,6 @@ in {
                 }
               ];
             }
-            {
-              size = "small";
-              widgets = [
-                {
-                  type = "bookmarks";
-                  groups = [{
-                    links = map (e: {
-                      same-tab = true;
-                      title = builtins.elemAt e 0;
-                      icon = "si:${builtins.elemAt e 1}";
-                      url = builtins.elemAt e 2;
-                    }) bookmarks;
-                  }];
-                }
-                {
-                  type = "to-do";
-                  id = "tasks";
-                  hide-header = true;
-                }
-              ];
-            }
           ];
         }
       ];
diff --git a/modules/system/homelab/proxy.nix b/modules/system/homelab/proxy.nix
index 162f293..095f535 100644
--- a/modules/system/homelab/proxy.nix
+++ b/modules/system/homelab/proxy.nix
@@ -1,9 +1,11 @@
 { homelab, lib, ... }: let
   base = "proxy.${homelab.domain}";
   proxy-mappings = {
+    "dns"        = { dest = "http://localhost:8088"; auth = true; };
+    "ai"         = { dest = "http://localhost:8080"; auth = true; };
+    
     "containers" = { dest = "http://localhost:5001"; auth = false; };
     "auth"       = { dest = "http://localhost:1411"; auth = false; };
-    "dns"        = { dest = "http://localhost:8088"; auth = true; };
     "cdn"        = { dest = "http://localhost:3000"; auth = false; };
     "git"        = { dest = "http://localhost:5080"; auth = false; };
     "@"          = { dest = "http://localhost:5070"; auth = false; };
@@ -45,6 +47,7 @@ in {
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-Auth-User $remote_user;
           '';
         };
       }) proxy-mappings;
diff --git a/modules/system/server.nix b/modules/system/server.nix
index 4f9b21f..1015f84 100644
--- a/modules/system/server.nix
+++ b/modules/system/server.nix
@@ -1,5 +1,5 @@
-{ lib, ... }: {
-  imports = [
+{ config, lib, ... }: {
+  imports = lib.mkIf (config.specialisation != {}) [
     ./homelab/containers.nix
     ./homelab/gallery.nix
     ./homelab/media.nix
@@ -13,6 +13,8 @@
     ./base.nix
   ];
   
+  specialisation.safe-mode.configuration = {};
+  
   virtualisation = {
     oci-containers.backend = "docker";
     docker = {