tsuki/hydra: put all services below `system-hydra.slice`

hosts/tsuki/services/hydra.nix

@@ -5,10 +5,35 @@
   services.hydra = {
     enable = true;
     hydraURL = "https://hydra.nani.wtf";
+    listenHost = "localhost";
     notificationSender = "hydra@nani.wtf";
     useSubstitutes = true;
     package = unstable-pkgs.hydra_unstable;
-    port = secrets.ports.hydra;
     buildMachinesFiles = [];
+    dbi = "dbi:Pg:dbname=hydra;host=/var/run/postgresql;user=hydra;";
+  };
+
+  systemd.slices.system-hydra = {
+    description = "Nix Hydra slice";
+    requires = [
+      "system.slice"
+      "postgresql.service"
+    ];
+    after = [ "system.slice" ];
+  };
+
+  systemd.services = {
+    hydra-evaluator.serviceConfig.Slice = "system-hydra.slice";
+    hydra-init.serviceConfig.Slice = "system-hydra.slice";
+    hydra-notify.serviceConfig.Slice = "system-hydra.slice";
+    hydra-queue-runner.serviceConfig.Slice = "system-hydra.slice";
+    hydra-send-stats.serviceConfig.Slice = "system-hydra.slice";
+    hydra-server.serviceConfig.Slice = "system-hydra.slice";
+  };
+
+  systemd.timers = {
+    hydra-check-space.timerConfig.Slice = "system-hydra.slice";
+    hydra-compress-logs.timerConfig.Slice = "system-hydra.slice";
+    hydra-update-gc-roots.timerConfig.Slice = "system-hydra.slice";
   };
 }

hosts/tsuki/services/nginx/default.nix

@@ -141,6 +141,7 @@
       (proxy ["vpn"] "http://localhost:${s config.services.headscale.port}" {
         locations."/".proxyWebsockets = true;
       })
+      (proxy ["hydra"] "http://localhost:${s config.services.hydra.port}" {})
     ] ++ (let
       stickerpickers = pkgs.callPackage ../matrix/maunium-stickerpicker.nix {
         inherit (inputs) maunium-stickerpicker secrets;