refactor!: restructure and document configuration

hosts/wizdesk/services/nixos/archi.nix

@@ -0,0 +1,20 @@
+{
+  services.archisteamfarm = {
+    enable = true;
+    web-ui.enable = true;
+
+    bots.wizardlink = {
+      enabled = true;
+      username = "master1891891";
+
+      settings = {
+        CustomGamePlayedWhileFarming = "In the fields";
+      };
+    };
+
+    bots.zak = {
+      enabled = true;
+      username = "matheuszak";
+    };
+  };
+}

hosts/wizdesk/services/nixos/caddy.nix

@@ -0,0 +1,57 @@
+{ ... }:
+{
+  services.caddy = {
+    enable = true;
+    email = "contact@thewizard.link";
+
+    virtualHosts."thewizard.link".extraConfig = ''
+      redir https://github.com/wizardlink/
+      header Strict-Transport-Security "max-age=63072000; includeSubDomains"
+    '';
+
+    virtualHosts."jellyfin.thewizard.link".extraConfig = ''
+      encode gzip
+      reverse_proxy 127.0.0.1:8096 {
+        flush_interval -1
+      }
+    '';
+
+    virtualHosts."jellyseerr.thewizard.link".extraConfig = ''
+      reverse_proxy http://127.0.0.1:5055
+    '';
+
+    virtualHosts."foundry.thewizard.link".extraConfig = ''
+      reverse_proxy 127.0.0.1:30000 {
+          flush_interval -1
+        }
+    '';
+
+    virtualHosts."git.thewizard.link".extraConfig = ''
+      reverse_proxy 127.0.0.1:3788
+    '';
+
+    virtualHosts."files.thewizard.link".extraConfig = ''
+      root * /srv/files
+      file_server
+    '';
+
+    virtualHosts."torrent.thewizard.link".extraConfig = ''
+      reverse_proxy 127.0.0.1:8144
+    '';
+
+    virtualHosts."shoko.thewizard.link".extraConfig = ''
+      reverse_proxy 127.0.0.1:8111
+    '';
+
+    virtualHosts."api.cosplay.thewizard.link".extraConfig = ''
+      reverse_proxy 127.0.0.1:3000
+    '';
+
+    virtualHosts."cosplay.thewizard.link".extraConfig = ''
+      root * /srv/cosplay
+      encode
+      try_files {path} /index.html
+      file_server
+    '';
+  };
+}

hosts/wizdesk/services/nixos/default.nix

@@ -0,0 +1,12 @@
+{ ... }:
+
+{
+  imports = [
+    ./archi.nix
+    ./caddy.nix
+    ./forgejo.nix
+    ./jellyfin.nix
+    ./nix-serve.nix
+    ./postgresql.nix
+  ];
+}

hosts/wizdesk/services/nixos/forgejo.nix

@@ -0,0 +1,26 @@
+{
+  services.forgejo = {
+    enable = true;
+
+    lfs.enable = true;
+
+    settings = {
+      server = {
+        HTTP_PORT = 3788;
+        LANDING_PAGE = "explore";
+        ROOT_URL = "https://git.thewizard.link";
+      };
+
+      ui = {
+        # HACK: Unfortunately we need to manually put files in /var/lib/forgejo/custom/public/assets/css
+        # so this will break in a new system.
+        DEFAULT_THEME = "catppuccin-frappe-lavender";
+        THEMES = "forgejo-auto,forgejo-light,forgejo-dark,gitea-auto,gitea-light,gitea-dark,forgejo-auto-deuteranopia-protanopia,forgejo-light-deuteranopia-protanopia,forgejo-dark-deuteranopia-protanopia,forgejo-auto-tritanopia,forgejo-light-tritanopia,forgejo-dark-tritanopia,catppuccin-latte-rosewater,catppuccin-latte-flamingo,catppuccin-latte-pink,catppuccin-latte-mauve,catppuccin-latte-red,catppuccin-latte-maroon,catppuccin-latte-peach,catppuccin-latte-yellow,catppuccin-latte-green,catppuccin-latte-teal,catppuccin-latte-sky,catppuccin-latte-sapphire,catppuccin-latte-blue,catppuccin-latte-lavender,catppuccin-frappe-rosewater,catppuccin-frappe-flamingo,catppuccin-frappe-pink,catppuccin-frappe-mauve,catppuccin-frappe-red,catppuccin-frappe-maroon,catppuccin-frappe-peach,catppuccin-frappe-yellow,catppuccin-frappe-green,catppuccin-frappe-teal,catppuccin-frappe-sky,catppuccin-frappe-sapphire,catppuccin-frappe-blue,catppuccin-frappe-lavender,catppuccin-macchiato-rosewater,catppuccin-macchiato-flamingo,catppuccin-macchiato-pink,catppuccin-macchiato-mauve,catppuccin-macchiato-red,catppuccin-macchiato-maroon,catppuccin-macchiato-peach,catppuccin-macchiato-yellow,catppuccin-macchiato-green,catppuccin-macchiato-teal,catppuccin-macchiato-sky,catppuccin-macchiato-sapphire,catppuccin-macchiato-blue,catppuccin-macchiato-lavender,catppuccin-mocha-rosewater,catppuccin-mocha-flamingo,catppuccin-mocha-pink,catppuccin-mocha-mauve,catppuccin-mocha-red,catppuccin-mocha-maroon,catppuccin-mocha-peach,catppuccin-mocha-yellow,catppuccin-mocha-green,catppuccin-mocha-teal,catppuccin-mocha-sky,catppuccin-mocha-sapphire,catppuccin-mocha-blue,catppuccin-mocha-lavender";
+      };
+
+      service = {
+        DISABLE_REGISTRATION = true;
+      };
+    };
+  };
+}

hosts/wizdesk/services/nixos/jellyfin.nix

@@ -0,0 +1,36 @@
+{ pkgs, ... }:
+
+{
+  services.jellyfin = {
+    enable = true;
+    openFirewall = true;
+    user = "wizardlink";
+    package = pkgs.jellyfin.override {
+      jellyfin-web = pkgs.jellyfin-web.overrideAttrs (
+        final: prev: {
+          installPhase = ''
+            runHook preInstall
+
+            # Inject the skip intro button script.
+            sed -i "s#</head>#<script src=\"configurationpage?name=skip-intro-button.js\"></script></head>#" dist/index.html
+
+            mkdir -p $out/share
+            cp -a dist $out/share/jellyfin-web
+
+            runHook postInstall
+          '';
+        }
+      );
+    };
+  };
+
+  services.jellyseerr = {
+    enable = true;
+    openFirewall = true;
+    package = pkgs.jellyseerr.overrideAttrs (
+      _final: _prev: {
+        dontCheckForBrokenSymlinks = true;
+      }
+    );
+  };
+}

hosts/wizdesk/services/nixos/nix-serve.nix

@@ -0,0 +1,9 @@
+{ ... }:
+
+{
+  services.nix-serve = {
+    enable = true;
+    port = 7373;
+    secretKeyFile = "/etc/keys/nix-store-wizdesk-1";
+  };
+}

hosts/wizdesk/services/nixos/postgresql.nix

@@ -0,0 +1,13 @@
+{ pkgs, ... }:
+
+{
+  services.postgresql = {
+    enable = true;
+
+    initialScript = pkgs.writeText "backend-initScript" ''
+      CREATE ROLE wizardlink WITH LOGIN SUPERUSER PASSWORD 'wizardlink' CREATEDB CREATEROLE REPLICATION;
+      CREATE DATABASE wizardlink;
+      GRANT ALL PRIVILEGES ON DATABASE wizardlink TO wizardlink;
+    '';
+  };
+}