modules/system/homelab/ai.nix

@@ -1,19 +1,3 @@
 { ... }: {
-  services = {
-    ollama = {
-      enable = true;
-      host = "127.0.0.1";
-      port = 11434;
-      # loadModels = [ "gemma3n:e4b" "gemma3n:e2b"  ];
-    };
-    open-webui = {
-      enable = true;
-      port = 8080;
-      environment = {
-        OLLAMA_BASE_URL = "http://localhost:11434";
-        WEBUI_AUTH = "False";
   
-      };
-    };
-  };
 }

modules/system/homelab/dash.nix

@@ -58,9 +58,6 @@
     [ "ApacheHTTPD" "apache" "https://cdn.proxy.${homelab.domain}" "http://localhost:3000/" ]
     [ "Forgejo" "forgejo" "https://git.proxy.${homelab.domain}" "http://localhost:5080/" ]
     [ "Dockge" "docker" "https://containers.proxy.${homelab.domain}" "http://localhost:5001/" ]
-    [ "Ollama" "ollama" "https://ai.proxy.${homelab.domain}" "http://localhost:8080/" ]
-    [ "Guacamole" "guacamole" "https://remote.proxy.${homelab.domain}" "http://localhost:8085/" ]
-    [ "Immich" "immich" "https://gallery.proxy.${homelab.domain}" "http://localhost:2283/" ]
   ];
   bookmarks = [
     [ "Tailscale" "tailscale" "https://login.tailscale.com/" ]
@@ -190,22 +187,6 @@ in {
           name = "Dashboard";
           show-mobile-header = true;
           columns = [
-            {
-              type = "bookmarks";
-              groups = [{
-                links = map (e: {
-                  same-tab = true;
-                  title = builtins.elemAt e 0;
-                  icon = "si:${builtins.elemAt e 1}";
-                  url = builtins.elemAt e 2;
-                }) bookmarks;
-              }];
-            }
-            {
-              type = "to-do";
-              id = "tasks";
-              hide-header = true;
-            }
             {
               size = "small";
               widgets = [
@@ -236,7 +217,9 @@ in {
               widgets = [
                 {
                   type = "server-stats";
-                  servers = [{ type = "local"; }];
+                  servers = [{
+                    type = "local";
+                  }];
                 }
                 {
                   type = "monitor";
@@ -252,6 +235,27 @@ in {
                 }
               ];
             }
+            {
+              size = "small";
+              widgets = [
+                {
+                  type = "bookmarks";
+                  groups = [{
+                    links = map (e: {
+                      same-tab = true;
+                      title = builtins.elemAt e 0;
+                      icon = "si:${builtins.elemAt e 1}";
+                      url = builtins.elemAt e 2;
+                    }) bookmarks;
+                  }];
+                }
+                {
+                  type = "to-do";
+                  id = "tasks";
+                  hide-header = true;
+                }
+              ];
+            }
           ];
         }
       ];

modules/system/homelab/dns.nix

@@ -9,8 +9,8 @@
     [ "proxy.${homelab.domain}"          "main.dns.${homelab.domain}" ]
     [ "*.proxy.${homelab.domain}"        "proxy.${homelab.domain}"    ]
     
-    # [ "lancache.steamcontent.com"        "main.dns.${homelab.domain}" ]
+    [ "lancache.steamcontent.com"        "main.dns.${homelab.domain}" ]
-    # [ "steam.cache.lancache.net"         "main.dns.${homelab.domain}" ]
+    [ "steam.cache.lancache.net"         "main.dns.${homelab.domain}" ]
   ];
   blacklist = [
     "https://adaway.org/hosts.txt"

modules/system/homelab/gallery.nix

@@ -1,19 +1,3 @@
 { ... }: {
-  users.users.immich.extraGroups = [ "video" "render" ];
   
-  services = {
-    immich = {
-      enable = true;
-      port = 2283;
-      host = "127.0.0.1";
-      mediaLocation = "/var/lib/immich";
-      accelerationDevices = null;
-      machine-learning.enable = true;
-    };
-    immich-public-proxy = {
-      enable = true;
-      port = 2284;
-      immichUrl = "http://localhost:2283";
-    };
-  };
 }

modules/system/homelab/media.nix

@@ -1,44 +1,3 @@
-{ pkgs, ... }: {
+{ ... }: {
-  # WIP: declaratively integrate media services into homelab configuration
+  
-  environment.systemPackages = with pkgs; [
-    jellyfin jellyfin-web jellyfin-ffmpeg
-  ];
-  services = {
-    jellyfin = {
-      enable = true;
-      hardwareAcceleration.enable = true;
-    };
-    jellyseerr = {
-      enable = true;
-      port = 5055;
-    };
-    radarr = {
-      enable = true;
-      settings = {
-        server = {
-          port = 7878;
-          bindaddress = "127.0.0.1";
-        };
-      };
-    };
-    sonarr = {
-      enable = true;
-      server = {
-        port = 8989;
-        bindaddress = "127.0.0.1";
-      };
-    };
-    qbittorrent = {
-      enable = true;
-      webuiPort = 8020;
-    };
-    jackett = {
-      enable = true;
-      port = 9117;
-    };
-    flaresolverr = {
-      enable = true;
-      port = 8191;
-    };
-  };
 }

modules/system/homelab/proxy.nix

@@ -1,20 +1,9 @@
 { homelab, lib, ... }: let
   base = "proxy.${homelab.domain}";
   proxy-mappings = {
-    "dns"        = { dest = "http://localhost:8088"; auth = true; };
-    "ai"         = { dest = "http://localhost:8080"; auth = true; };
-    
-    # "jsr"        = { dest = "http://localhost:5055"; auth = false; };
-    # "rdr"        = { dest = "http://localhost:5055"; auth = false; };
-    # "snr"        = { dest = "http://localhost:5055"; auth = false; };
-    # "qbt"        = { dest = "http://localhost:8020"; auth = false; };
-    # "jkt"        = { dest = "http://localhost:9117"; auth = false; };
-    # "media"      = { dest = "http://localhost:8096"; auth = false; };
-    
     "containers" = { dest = "http://localhost:5001"; auth = false; };
-    "gallery"    = { dest = "http://localhost:2283"; auth = false; };
-    "remote"     = { dest = "http://localhost:8085"; auth = false; };
     "auth"       = { dest = "http://localhost:1411"; auth = false; };
+    "dns"        = { dest = "http://localhost:8088"; auth = true; };
     "cdn"        = { dest = "http://localhost:3000"; auth = false; };
     "git"        = { dest = "http://localhost:5080"; auth = false; };
     "@"          = { dest = "http://localhost:5070"; auth = false; };
@@ -53,14 +42,9 @@ in {
           proxyWebsockets = true;
           basicAuthFile = if cfg.auth then "/var/lib/nginx/.htpasswd" else null;
           extraConfig = ''
-            proxy_set_header X-Auth-User $remote_user;
             proxy_set_header X-Real-IP $remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Proto $scheme;
-            client_max_body_size 50000M;
-            proxy_read_timeout   600s;
-            proxy_send_timeout   600s;
-            send_timeout         600s;
           '';
         };
       }) proxy-mappings;

modules/system/homelab/remote.nix

@@ -1,19 +0,0 @@
-{ ... }: {
-  services = {
-    guacamole-server = {
-      enable = true;
-      host = "127.0.0.1";
-      port = 4822;
-    };
-    guacamole-client = {
-      enable = true;
-      host = "127.0.0.1";
-      port = 8085;
-      enableWebserver = true;
-      settings = {
-        guacd-hostname = "127.0.0.1";
-        guacd-port = 4822;
-      };
-    };
-  };
-}

modules/system/server.nix

@@ -1,9 +1,8 @@
-{ config, lib, ... }: {
+{ lib, ... }: {
-  imports = lib.mkIf (config.specialisation != {}) [
+  imports = [
     ./homelab/containers.nix
     ./homelab/gallery.nix
-    ./homelab/remote.nix
+    ./homelab/media.nix
-    # ./homelab/media.nix # wip
     ./homelab/share.nix
     ./homelab/proxy.nix
     ./homelab/auth.nix
@@ -14,8 +13,6 @@
     ./base.nix
   ];
   
-  specialisation.safe-mode.configuration = {};
-
   virtualisation = {
     oci-containers.backend = "docker";
     docker = {