snapshot

hosts/galadriel/configuration.nix

@@ -19,6 +19,16 @@
       ../../modules/podman.nix
       ../../modules/basePackages.nix
       ../../modules/develPackages.nix
+
+      ../../modules/blog.nix
+      ../../modules/jupyterhub.nix
+      ../../modules/jellyfin.nix
+      ../../modules/qbittorrent.nix
+      ../../modules/miniflux.rss
+      ../../modules/mealie.nix
+      ../../modules/openwebui.nix
+      ../../modules/ollama.nix
+
     ];
 
   # Bootloader.

modules/immich.nix

@@ -0,0 +1,27 @@
+{
+  config,
+  pkgs,
+  ...
+}: {
+  
+  services.immich = {
+    enable = true;
+    #mediaLocation = "/Main/Data/photos"; # Your photo/video directory
+    
+    port = 8082;
+    host = "0.0.0.0";
+    openFirewall = true;
+
+    user = "immich";
+    group = "immich";
+
+    machine-learning = {
+      enable = true;
+      #environment = {
+      #  CUDA_VISIBLE_DEVICES = "0";
+      #};
+    };
+
+  };
+}
+

modules/openwebui.nix

@@ -0,0 +1,54 @@
+{ config, pkgs, lib, ... }:
+
+let
+  stateDir = "/var/lib/open-webui";
+  port = 8081;
+in
+{
+  virtualisation = {
+    podman.enable = true;
+    podman.dockerCompat = true;
+
+    oci-containers = {
+      backend = "podman";
+      containers = {
+        openwebui = {
+          autoStart = true;
+          image = "ghcr.io/open-webui/open-webui:main";
+          ports = [ "0.0.0.0:${lib.mkStr port}:8080" ];
+          
+          environment = {
+            ANONYMIZED_TELEMETRY = "False";
+            DO_NOT_TRACK = "True";
+            SCARF_NO_ANALYTICS = "True";
+            WEBUI_AUTH = "True";
+            #ENABLE_SIGNUP = "True";
+            ENABLE_SIGNUP_PASSWORD_CONFIRMATION = "True";
+            #DEFAULT_USER_ROLE = "admin";
+            ENV = "prod";
+          };
+          volumes = [
+            "${stateDir}:/app/backend/data"
+          ];
+          extraOptions = [ "--pull=always" ];
+        };
+      };
+    };
+  };
+
+  # make sure the directory exists
+  environment.etc = {
+    "var/lib/open-webui" = {
+      source = null;
+      mode = "0755";
+      owner = "root";
+      group = "root";
+    };
+  };
+
+  # open firewall port 3000 if you run a firewall
+  networking.firewall = {
+    allowedTCPPorts = lib.mkList port;
+  };
+}
+