feat: ente: added

nixos/system/hectic-lab/attic.nix

@@ -8,6 +8,7 @@
   hectic.services.attic = {
     enable          = true;
     hostName        = "cache.${domain}";
+    port            = 8081;
     environmentFile = config.sops.secrets."atticd/environment".path;
     storage = {
       bucket   = "cache-hectic-lab";
@@ -23,7 +24,7 @@
       client_max_body_size 0;
     '';
     locations."/" = {
-      proxyPass = "http://127.0.0.1:8080";
+      proxyPass = "http://127.0.0.1:8081";
     };
   };
 }

nixos/system/hectic-lab/ente.nix

@@ -0,0 +1,42 @@
+{
+  domain,
+  ...
+}: {
+  config,
+  ...
+}: let
+  enteDomain = "ente.${domain}";
+in {
+  hectic.services.ente = {
+    enable              = true;
+    apiDomain           = "api.${enteDomain}";
+    disableRegistration = false;
+
+    domains = {
+      accounts = "accounts.${enteDomain}";
+      cast     = "cast.${enteDomain}";
+      albums   = "albums.${enteDomain}";
+      photos   = "photos.${enteDomain}";
+    };
+
+    smtp = {
+      enable = true;
+      host   = "mail.${domain}";
+      email  = "security@${domain}";
+    };
+
+    storage = {
+      bucket   = "ente-hectic-lab";
+      endpoint = "https://hel1.your-objectstorage.com";
+      region   = "hel1";
+    };
+
+    secrets = {
+      encryptionKeyFile = config.sops.secrets."ente/key-encryption".path;
+      hashKeyFile       = config.sops.secrets."ente/key-hash".path;
+      jwtSecretFile     = config.sops.secrets."ente/jwt-secret".path;
+      s3AccessKeyFile   = config.sops.secrets."ente/s3-access-key".path;
+      s3SecretKeyFile   = config.sops.secrets."ente/s3-secret-key".path;
+    };
+  };
+}

nixos/system/hectic-lab/hectic-lab.nix

@@ -37,6 +37,13 @@ let
       hashedPasswordFile = config.sops.secrets."mailserver/${name}/hashedPassword".path;
     };
   };
+  mkEnteSecret = name: {
+    name  = "ente/${name}";
+    value = {
+      owner = "ente";
+      group = "ente";
+    };
+  };
 in {
   imports = [
     self.nixosModules.hectic
@@ -50,6 +57,7 @@ in {
 
     (import ./attic.nix              { inherit flake self inputs domain; })
     (import ./containers.nix          { inherit flake self inputs; })
+    (import ./ente.nix               { inherit domain; })
     (import ./mechabellum.nix         { inherit flake self inputs domain; })
     (import (./. + "/sentinèlla.nix") { inherit flake self inputs domain; })
   ];
@@ -115,7 +123,13 @@ in {
       };
       "atticd/environment" = {};
       "wg-bfs/private-key" = {};
-    };
+    } // builtins.listToAttrs (map mkEnteSecret [
+      "key-encryption"
+      "key-hash"
+      "jwt-secret"
+      "s3-access-key"
+      "s3-secret-key"
+    ]);
   };
 
   users.users.root.openssh.authorizedKeys.keys = [