mkModule various

modules/nixos/services/manyfold/default.nix

@@ -6,16 +6,18 @@
 }:
 with lib;
 let
-  cfg = config.${namespace}.services.manyfold;
+  name = "manyfold";
-in
+  cfg = config.${namespace}.services.${name};
-{
-  imports = [ ./options.nix ];
 
-  config = mkIf cfg.enable {
+  manyfoldConfig = lib.${namespace}.mkModule {
-    virtualisation.oci-containers.containers."${cfg.name}" = {
+    inherit config name;
-      autoStart = cfg.autoStart;
+    description = "manyfold";
-      image = cfg.image;
+    options = { };
-      ports = [ "${cfg.httpPort}:3214" ];
+    moduleConfig = {
+      virtualisation.oci-containers.containers."${name}" = {
+        autoStart = true;
+        image = "ghcr.io/manyfold3d/manyfold-solo";
+        ports = [ "${toString cfg.port}:3214" ];
         extraOptions = [
           "--cap-drop=ALL"
           "--cap-add=CHOWN"
@@ -25,8 +27,8 @@ in
           "--security-opt=no-new-privileges:true"
         ];
         volumes = [
-        "${cfg.configPath}:/config"
+          "${cfg.configDir}/manyfold:/config"
-        "${cfg.dataPath}:/libraries"
+          "${cfg.dataDir}/3d_printer:/libraries"
         ];
         environment = {
           PUID = cfg.puid;
@@ -36,4 +38,8 @@ in
         environmentFiles = [ config.sops.secrets."jallen-nas/manyfold/secretkeybase".path ];
       };
     };
+  };
+in
+{
+  imports = [ manyfoldConfig ];
 }

modules/nixos/services/manyfold/options.nix

@@ -1,52 +0,0 @@
-{ lib, namespace, ... }:
-with lib;
-{
-  options.${namespace}.services.manyfold = {
-    enable = mkEnableOption "manyfold docker service";
-
-    autoStart = mkOption {
-      type = types.bool;
-      default = true;
-    };
-
-    httpPort = mkOption {
-      type = types.str;
-      default = "3214";
-    };
-
-    name = mkOption {
-      type = types.str;
-      default = "manyfold";
-    };
-
-    image = mkOption {
-      type = types.str;
-      default = "ghcr.io/manyfold3d/manyfold-solo";
-    };
-
-    configPath = mkOption {
-      type = types.str;
-      default = "/media/nas/main/nix-app-data/manyfold";
-    };
-
-    dataPath = mkOption {
-      type = types.str;
-      default = "/media/nas/main/3d_printer";
-    };
-
-    puid = mkOption {
-      type = types.str;
-      default = "911";
-    };
-
-    pgid = mkOption {
-      type = types.str;
-      default = "1000";
-    };
-
-    timeZone = mkOption {
-      type = types.str;
-      default = "America/Chicago";
-    };
-  };
-}

modules/nixos/services/matrix/default.nix

@@ -5,13 +5,17 @@
   ...
 }:
 let
-  inherit (lib.${namespace}) mkOpt mkReverseProxyOpt;
+  name = "matrix";
-  cfg = config.${namespace}.services.matrix;
+  cfg = config.${namespace}.services.${name};
 
-  matrixConfig = {
+  matrixConfig = lib.${namespace}.mkModule {
+    inherit config name;
+    description = "config";
+    options = { };
+    moduleConfig = {
       services.matrix-synapse = {
         enable = true;
-      dataDir = cfg.dataDir;
+        dataDir = "${cfg.configDir}/matrix-synapse";
         configureRedisLocally = true;
         enableRegistrationScript = true;
         settings = {
@@ -26,7 +30,7 @@ let
               x_forwarded = true;
               bind_addresses = [
                 "::1"
-              "0.0.0.0"
+                cfg.listenAddress
               ];
               resources = [
                 {
@@ -102,13 +106,6 @@ let
       users.groups.matrix-synapse = { };
 
       services.postgresql = {
-      enable = lib.mkDefault true;
-      #authentication = lib.mkOverride 10 ''
-      #  # TYPE  DATABASE        USER            ADDRESS                 METHOD
-      #  local   all             all                                     peer
-      #  host    all             all             127.0.0.1/32            trust
-      #  host    all             all             ::1/128                 trust
-      #'';
         ensureDatabases = [ "synapse" ];
         ensureUsers = [
           {
@@ -118,35 +115,8 @@ let
         ];
       };
     };
-
-  # Create reverse proxy configuration using mkReverseProxy
-  reverseProxyConfig = lib.${namespace}.mkReverseProxy {
-    name = "matrix";
-    subdomain = cfg.reverseProxy.subdomain;
-    url = "http://${cfg.localAddress}:${toString cfg.port}";
-    middlewares = cfg.reverseProxy.middlewares;
   };
-
-  fullConfig = {
-    ${namespace}.services.traefik = lib.mkIf cfg.reverseProxy.enable {
-      reverseProxies = [ reverseProxyConfig ];
-    };
-  }
-  // matrixConfig;
 in
-with lib;
 {
-  options.${namespace}.services.matrix = {
+  imports = [ matrixConfig ];
-    enable = mkEnableOption "matrix service";
-
-    port = mkOpt types.int 8008 "Port for matrix to be hosted on";
-
-    localAddress = mkOpt types.str "127.0.0.1" "local address of the service";
-
-    dataDir = mkOpt types.str "" "Path to the data dir";
-
-    reverseProxy = mkReverseProxyOpt;
-  };
-
-  config = lib.mkIf cfg.enable fullConfig;
 }

modules/nixos/services/matrix/default.nix.conduit

@@ -1,82 +0,0 @@
-{ config, lib, namespace, ... }:
-let
-  inherit (lib.${namespace}) mkOpt mkReverseProxyOpt;
-  cfg = config.${namespace}.services.matrix;
-
-  matrixConfig = {
-    services = {
-      matrix-conduit = {
-        enable = true;
-        settings = {
-          global = {
-            server_name = "mjallen.dev";
-            address = "0.0.0.0";
-            port = cfg.port;
-            allow_registration = false;
-            well_known = {
-              client = "https://matrix.mjallen.dev";
-              server = "matrix.mjallen.dev:443";
-            };
-          };
-        };
-      };
-    };
-
-    networking = {
-      firewall = {
-        enable = true;
-        allowedTCPPorts = [ cfg.port 8448 ];
-        allowedUDPPorts = [ cfg.port 8448 ];
-      };
-      # Use systemd-resolved inside the container
-      # Workaround for bug https://github.com/NixOS/nixpkgs/issues/162686
-      useHostResolvConf = lib.mkForce false;
-    };
-    services.resolved.enable = true;
-  };
-
-  bindMounts = {
-    "/var/lib" = {
-      hostPath = cfg.dataDir;
-      isReadOnly = false;
-    };
-  };
-
-  # Create reverse proxy configuration using mkReverseProxy
-  reverseProxyConfig = lib.${namespace}.mkReverseProxy {
-    name = "matrix";
-    subdomain = cfg.reverseProxy.subdomain;
-    url = "http://${cfg.localAddress}:${toString cfg.port}";
-    middlewares = cfg.reverseProxy.middlewares;
-  };
-
-  matrixContainer = (lib.${namespace}.mkContainer {
-    name = "matrix-conduit";
-    localAddress = cfg.localAddress;
-    port = cfg.port;
-    bindMounts = bindMounts;
-    config = matrixConfig;
-  }) { inherit lib; };
-
-  fullConfig = {
-    ${namespace}.services.traefik = lib.mkIf cfg.reverseProxy.enable {
-      reverseProxies = [ reverseProxyConfig ];
-    };
-  } // matrixContainer;
-in
-with lib;
-{
-  options.${namespace}.services.matrix = {
-    enable = mkEnableOption "matrix service";
-
-    port = mkOpt types.int 8008 "Port for matrix to be hosted on";
-
-    localAddress = mkOpt types.str "127.0.0.1" "local address of the service";
-
-    dataDir = mkOpt types.str "" "Path to the data dir";
-
-    reverseProxy = mkReverseProxyOpt;
-  };
-
-  config = lib.mkIf cfg.enable fullConfig;
-}

modules/nixos/services/minecraft/default.nix

@@ -1,11 +1,19 @@
-{ config, ... }:
+{ config, lib, namespace, ... }:
-{
+let
+  name = "minecraft";
+  cfg = config.${namespace}.services.${name};
+
+  mincraftConfig = lib.${namespace}.mkModule {
+    inherit config name;
+    description = "minecraft server";
+    options = { };
+    moduleConfig = {
       services.minecraft-server = {
-    enable = false;
+        enable = true;
         eula = true;
         declarative = true;
-    openFirewall = true;
+        openFirewall = cfg.openFirewall;
-    dataDir = "/media/nas/main/ssd_app_data/minecraft";
+        dataDir = "/media/nas/main/ssd_app_data/minecraft"; # todo
         serverProperties = {
           enforce-whitelist = true;
           white-list = true;
@@ -20,4 +28,9 @@
         };
         jvmOpts = "-Xms4092M -Xmx4092M -XX:+UseG1GC -XX:ParallelGCThreads=2 -XX:MinHeapFreeRatio=5 -XX:MaxHeapFreeRatio=10";
       };
+    };
+  };
+in
+{
+  imports = [ mincraftConfig ];
 }

modules/nixos/services/mongodb/default.nix

@@ -6,17 +6,19 @@
 }:
 with lib;
 let
-  cfg = config.${namespace}.services.mongodb;
+  name = "mongodb";
-in
+  cfg = config.${namespace}.services.${name};
-{
-  imports = [ ./options.nix ];
 
-  config = mkIf cfg.enable {
+  mongodbConfig = lib.${namespace}.mkModule {
+    inherit config name;
+    description = "mongodb";
+    options = { };
+    moduleConfig = {
       virtualisation.oci-containers.containers."${cfg.name}" = {
-      autoStart = cfg.autoStart;
+        autoStart = true;
-      image = cfg.image;
+        image = "mongo";
         ports = [ "${cfg.port}:27017" ];
-      volumes = [ "${cfg.configPath}:/data/db" ];
+        volumes = [ "${cfg.configPath}/mongodb:/data/db" ];
         extraOptions = [ "--network-alias=mongo" ];
         # environmentFiles = cfg.environmentFiles;
         environment = {
@@ -28,4 +30,8 @@ in
         };
       };
     };
+  };
+in
+{
+  imports = [ mongodbConfig ];
 }

modules/nixos/services/mongodb/options.nix

@@ -1,52 +0,0 @@
-{ lib, namespace, ... }:
-with lib;
-{
-  options.${namespace}.services.mongodb = {
-    enable = mkEnableOption "mongodb docker service";
-
-    autoStart = mkOption {
-      type = types.bool;
-      default = true;
-    };
-
-    port = mkOption {
-      type = types.str;
-      default = "27017";
-    };
-
-    name = mkOption {
-      type = types.str;
-      default = "mongo";
-    };
-
-    image = mkOption {
-      type = types.str;
-      default = "mongo";
-    };
-
-    configPath = mkOption {
-      type = types.str;
-      default = "/media/nas/main/mongodb";
-    };
-
-    puid = mkOption {
-      type = types.str;
-      default = "911";
-    };
-
-    pgid = mkOption {
-      type = types.str;
-      default = "1000";
-    };
-
-    timeZone = mkOption {
-      type = types.str;
-      default = "America/Chicago";
-    };
-
-    environmentFiles = mkOption {
-      type = with types; listOf path;
-      default = [ ];
-    };
-  };
-}

modules/nixos/services/netbootxyz/default.nix

@@ -6,21 +6,26 @@
 }:
 with lib;
 let
-  cfg = config.${namespace}.services.netbootxyz;
+  inherit (lib.${namespace}) mkOpt;
-in
+  name = "netbootxyz";
-{
+  cfg = config.${namespace}.services.${name};
-  imports = [ ./options.nix ];
 
-  config = mkIf cfg.enable {
+  netbootxyzConfig = lib.${namespace}.mkModule {
+    inherit config name;
+    description = "netbootxyz";
+    options = {
+      assetPort = mkOpt types.port 4001 "NGINX server for hosting assets.";
+
+      tftpPort = mkOpt types.port 69 "HTTPS port for netbootxyz";
+    };
+    moduleConfig = {
       # Open firewall for netbootxyz if enabled
       networking.firewall = mkIf cfg.openFirewall {
         allowedTCPPorts = [
-        cfg.webPort
           cfg.assetPort
           cfg.tftpPort
         ];
         allowedUDPPorts = [
-        cfg.webPort
           cfg.assetPort
           cfg.tftpPort
         ];
@@ -31,15 +36,19 @@ in
           autoStart = true;
           image = "ghcr.io/netbootxyz/netbootxyz:latest";
           ports = [
-          "${toString cfg.webPort}:3000"
+            "${toString cfg.port}:3000"
             "${toString cfg.assetPort}:80"
             "${toString cfg.tftpPort}:69"
           ];
           volumes = [
-          "${cfg.dataDir}:/config"
+            "${cfg.configDir}/netbootxyz:/config"
-          "${cfg.assetDir}:/assets"
+            "${cfg.dataDir}/isos:/assets"
           ];
         };
       };
     };
+  };
+in
+{
+  imports = [ netbootxyzConfig ];
 }

modules/nixos/services/netbootxyz/options.nix

@@ -1,43 +0,0 @@
-{ lib, namespace, ... }:
-with lib;
-{
-  options.${namespace}.services.netbootxyz = {
-    enable = mkEnableOption "netbootxyz network boot service";
-
-    webPort = mkOption {
-      type = types.port;
-      default = 4000;
-      description = "HTTP port for netbootxyz";
-    };
-
-    assetPort = mkOption {
-      type = types.port;
-      default = 4001;
-      description = "NGINX server for hosting assets.";
-    };
-
-    tftpPort = mkOption {
-      type = types.port;
-      default = 69;
-      description = "HTTPS port for netbootxyz";
-    };
-
-    openFirewall = mkOption {
-      type = types.bool;
-      default = true;
-      description = "Whether to open firewall for netbootxyz";
-    };
-
-    dataDir = mkOption {
-      type = types.str;
-      default = "/media/nas/main/nix-app-data/netbootxyz";
-      description = "Data directory for netbootxyz";
-    };
-
-    assetDir = mkOption {
-      type = types.str;
-      default = "/media/nas/main/isos";
-      description = "Asset directory for netbootxyz";
-    };
-  };
-}

modules/nixos/services/nextcloud/container.nix

@@ -1,293 +0,0 @@
-{
-  config,
-  lib,
-  pkgs,
-  namespace,
-  ...
-}:
-with lib;
-let
-  cfg = config.${namespace}.services.nextcloud;
-
-  adminpass = config.sops.secrets."jallen-nas/nextcloud/adminpassword".path;
-  secretsFile = config.sops.secrets."jallen-nas/nextcloud/smtp_settings".path;
-  jwtSecretFile = config.sops.secrets."jallen-nas/onlyoffice-key".path;
-  nextcloudUserId = config.users.users.nix-apps.uid;
-  nextcloudGroupId = config.users.groups.jallen-nas.gid;
-  hostAddress = "10.0.1.3";
-  localAddress = "10.0.2.18";
-  nextcloudPortExtHttp = 9988;
-  nextcloudPortExtHttps = 9943;
-  onlyofficePortExt = 9943;
-
-  nextcloudPhotos = pkgs.${namespace}.nextcloud-app-photos;
-  nextcloudPdfViewer = pkgs.${namespace}.nextcloud-app-pdfviewer;
-  nextcloudAssist = pkgs.${namespace}.nextcloud-app-assistant;
-in
-{
-  imports = [ ./options.nix ];
-
-  config = mkIf cfg.enable {
-    containers.nextcloud = {
-      autoStart = false;
-      privateNetwork = true;
-      hostAddress = hostAddress;
-      localAddress = localAddress;
-      specialArgs = {
-        inherit namespace;
-      };
-
-      bindMounts = {
-        secrets = {
-          hostPath = "/run/secrets/jallen-nas/nextcloud";
-          isReadOnly = true;
-          mountPoint = "/run/secrets/jallen-nas/nextcloud";
-        };
-
-        secrets2 = {
-          hostPath = "/run/secrets/jallen-nas/onlyoffice-key";
-          isReadOnly = true;
-          mountPoint = "/run/secrets/jallen-nas/onlyoffice-key";
-        };
-
-        data = {
-          hostPath = "/media/nas/main/nextcloud";
-          isReadOnly = false;
-          mountPoint = "/data";
-        };
-
-        "/var/lib/nextcloud" = {
-          hostPath = "/media/nas/main/nix-app-data/nextcloud";
-          isReadOnly = false;
-          mountPoint = "/var/lib/nextcloud";
-        };
-
-        "/var/lib/onlyoffice" = {
-          hostPath = "/media/nas/main/nix-app-data/onlyoffice";
-          isReadOnly = false;
-          mountPoint = "/var/lib/onlyoffice";
-        };
-      };
-
-      config =
-        {
-          pkgs,
-          lib,
-          ...
-        }:
-        {
-          nixpkgs.config.allowUnfree = true;
-          networking.extraHosts = ''
-            ${hostAddress} host.containers protonmail-bridge
-          '';
-
-          #          services.nginx.virtualHosts."cloud.mjallen.dev".listen = [
-          #            {
-          #              addr = "0.0.0.0";
-          #              port = 8080;
-          #            }
-          #          ];
-
-          services = {
-            nextcloud = {
-              enable = false;
-              package = pkgs.nextcloud32;
-              # datadir = "/data";
-              database.createLocally = true;
-              hostName = "cloud.mjallen.dev";
-              appstoreEnable = false;
-              caching.redis = true;
-              configureRedis = true;
-              enableImagemagick = true;
-              https = true;
-              secretFile = secretsFile;
-
-              extraApps = {
-                inherit (pkgs.nextcloud31Packages.apps)
-                  app_api
-                  bookmarks
-                  mail
-                  calendar
-                  contacts
-                  integration_openai
-                  integration_paperless
-                  maps
-                  oidc_login
-                  onlyoffice
-                  previewgenerator
-                  recognize
-                  richdocuments
-                  user_oidc
-                  ;
-
-                inherit
-                  nextcloudPhotos
-                  nextcloudPdfViewer
-                  nextcloudAssist
-                  ;
-              };
-
-              config = {
-                adminuser = "mjallen";
-                adminpassFile = adminpass;
-                dbhost = "localhost";
-                dbtype = "sqlite";
-                dbname = "nextcloud";
-                dbuser = "nextcloud";
-              };
-              settings = {
-                loglevel = 3;
-                allow_local_remote_servers = true;
-                upgrade.disable-web = false;
-                datadirectory = "/data";
-                trusted_domains = [
-                  "${hostAddress}:${toString nextcloudPortExtHttp}"
-                  "${hostAddress}:${toString nextcloudPortExtHttps}"
-                  "${localAddress}:80"
-                  "${localAddress}:8080"
-                  "${localAddress}:443"
-                  "cloud.mjallen.dev"
-                ];
-                opcache.interned_strings_buffer = 16;
-                trusted_proxies = [ hostAddress ];
-                maintenance_window_start = 6;
-                default_phone_region = "US";
-                enable_previews = true;
-                enabledPreviewProviders = [
-                  "OC\\Preview\\PNG"
-                  "OC\\Preview\\JPEG"
-                  "OC\\Preview\\GIF"
-                  "OC\\Preview\\BMP"
-                  "OC\\Preview\\XBitmap"
-                  "OC\\Preview\\MP3"
-                  "OC\\Preview\\TXT"
-                  "OC\\Preview\\MarkDown"
-                  "OC\\Preview\\OpenDocument"
-                  "OC\\Preview\\Krita"
-                  "OC\\Preview\\HEIC"
-                  "OC\\Preview\\Movie"
-                  "OC\\Preview\\MSOffice2003"
-                  "OC\\Preview\\MSOffice2007"
-                  "OC\\Preview\\MSOfficeDoc"
-                ];
-                installed = true;
-                user_oidc = {
-                  auto_provision = false;
-                  soft_auto_provision = false;
-                  allow_multiple_user_backends = false; # auto redirect to authentik for login
-                };
-
-                social_login_auto_redirect = true;
-              };
-            };
-          };
-
-          services.onlyoffice = {
-            enable = true;
-            port = onlyofficePortExt;
-            hostname = "office.mjallen.dev";
-            jwtSecretFile = jwtSecretFile;
-          };
-
-          # System packages
-          environment.systemPackages = with pkgs; [
-            ffmpeg
-            # libtensorflow-bin
-            nextcloud32
-            nodejs
-            onlyoffice-documentserver
-            sqlite
-          ];
-
-          # Create required users and groups
-          users.users.nextcloud = {
-            isSystemUser = true;
-            uid = lib.mkForce nextcloudUserId;
-            group = "nextcloud";
-          };
-
-          users.users.onlyoffice = {
-            group = lib.mkForce "nextcloud";
-          };
-
-          users.groups = {
-            nextcloud = {
-              gid = lib.mkForce nextcloudGroupId;
-            };
-            downloads = { };
-          };
-
-          # Create and set permissions for required directories
-          system.activationScripts.nextcloud-dirs = ''
-            mkdir -p /data
-
-            chown -R nextcloud:nextcloud /data
-
-            chown  -R nextcloud:nextcloud /run/secrets/jallen-nas/nextcloud
-            chown  -R nextcloud:nextcloud /run/secrets/jallen-nas/onlyoffice-key
-
-            chmod -R 775 /data
-
-            chmod  -R 750 /run/secrets/jallen-nas/nextcloud
-            chmod  -R 750 /run/secrets/jallen-nas/onlyoffice-key
-          '';
-
-          hardware = {
-            graphics = {
-              enable = true;
-              # setLdLibraryPath = true;
-            };
-          };
-
-          programs = {
-            nix-ld.enable = true;
-          };
-
-          system.stateVersion = "23.11";
-          networking = {
-            firewall = {
-              enable = true;
-              allowedTCPPorts = [
-                8080
-                80
-                443
-                onlyofficePortExt
-              ];
-            };
-            # Use systemd-resolved inside the container
-            # Workaround for bug https://github.com/NixOS/nixpkgs/issues/162686
-            useHostResolvConf = lib.mkForce false;
-          };
-          services.resolved.enable = true;
-
-        };
-    };
-
-    networking = {
-      nat = {
-        forwardPorts = [
-          {
-            destination = "${localAddress}:443";
-            sourcePort = nextcloudPortExtHttps;
-          }
-          # {
-          #   destination = "${localAddress}:80";
-          #   sourcePort = nextcloudPortExtHttp;
-          # }
-          {
-            destination = "${localAddress}:8080";
-            sourcePort = nextcloudPortExtHttp;
-          }
-          {
-            destination = "${localAddress}:8000";
-            sourcePort = 8000;
-          }
-          {
-            destination = "${localAddress}:${toString onlyofficePortExt}";
-            sourcePort = onlyofficePortExt;
-          }
-        ];
-      };
-    };
-  };
-}

modules/nixos/services/nextcloud/default.nix

@@ -6,21 +6,23 @@
 }:
 with lib;
 let
-  cfg = config.${namespace}.services.nextcloud;
+  name = "nextcloud";
-in
+  cfg = config.${namespace}.services.${name};
-{
-  imports = [ ./options.nix ];
 
-  config = mkIf cfg.enable {
+  nextcloudConfig = lib.${namespace}.mkModule {
-    virtualisation.oci-containers.containers."${cfg.name}" = {
+    inherit config name;
-      autoStart = cfg.autoStart;
+    description = "nextcloud";
-      image = cfg.image;
+    options = { };
+    moduleConfig = {
+      virtualisation.oci-containers.containers."${name}" = {
+        autoStart = true;
+        image = "lscr.io/linuxserver/nextcloud";
         ports = [
-        "${cfg.port}:443"
+          "${toString cfg.port}:443"
         ];
         volumes = [
-        "${cfg.configPath}:/config"
+          "${cfg.configDir}/nextcloud:/config"
-        "${cfg.dataPath}:/data"
+          "${cfg.dataDir}/nextcloud:/data"
           "/run/postgresql:/run/postgresql"
         ];
         environmentFiles = [ ];
@@ -31,4 +33,8 @@ in
         };
       };
     };
+  };
+in
+{
+  imports = [ nextcloudConfig ];
 }

modules/nixos/services/nextcloud/default.nix.bak

@@ -1,167 +0,0 @@
-{
-  config,
-  lib,
-  pkgs,
-  namespace,
-  ...
-}:
-with lib;
-let
-  cfg = config.${namespace}.services.nextcloud;
-
-  adminpass = config.sops.secrets."jallen-nas/nextcloud/adminpassword".path;
-  secretsFile = config.sops.secrets."jallen-nas/nextcloud/smtp_settings".path;
-  jwtSecretFile = config.sops.secrets."jallen-nas/onlyoffice-key".path;
-  nextcloudUserId = config.users.users.nix-apps.uid;
-  nextcloudGroupId = config.users.groups.jallen-nas.gid;
-  hostAddress = "10.0.1.3";
-  nextcloudPortExtHttp = 9988;
-  nextcloudPortExtHttps = 9943;
-  onlyofficePortExt = 9943;
-
-  nextcloudPhotos = pkgs.${namespace}.nextcloud-app-photos;
-  nextcloudPdfViewer = pkgs.${namespace}.nextcloud-app-pdfviewer;
-  nextcloudAssist = pkgs.${namespace}.nextcloud-app-assistant;
-in
-{
-  imports = [ ./options.nix ];
-
-  config = mkIf cfg.enable {
-    services.nginx.virtualHosts."cloud.mjallen.dev".listen = [ { addr = "0.0.0.0"; port = nextcloudPortExtHttp; } ];
-
-    # Create required users and groups
-    users.users.nextcloud = {
-      isSystemUser = lib.mkForce true;
-      isNormalUser = lib.mkForce false;
-      group = "nextcloud";
-    };
-
-    users.groups = {
-      nextcloud = { };
-      downloads = { };
-    };
-
-    services = {
-
-      ocis = {
-        enable = false;
-        configDir = "/media/nas/main/nix-app-data/ocis";
-        address = "0.0.0.0";
-        port = 9988;
-        environment = {
-            OCIS_URL = "https://localhost:9200";
-        };
-      };
-    
-      opencloud = {
-        enable = false;
-        url = "https://10.0.1.3:9988";
-        address = "0.0.0.0";
-        port = nextcloudPortExtHttp;
-        stateDir = "/media/nas/main/nix-app-data/opencloud";
-      };
-
-      onlyoffice = {
-        enable = false;
-        port = onlyofficePortExt;
-        hostname = "office.mjallen.dev";
-        jwtSecretFile = jwtSecretFile;
-      };
-
-      nextcloud = {
-        enable = true;
-        package = pkgs.nextcloud32;
-        home = "/media/nas/main/nix-app-data/nextcloud";
-        database.createLocally = true;
-        hostName = "cloud.mjallen.dev";
-        appstoreEnable = false;
-        caching.redis = true;
-        configureRedis = true;
-        enableImagemagick = true;
-        https = true;
-        secretFile = secretsFile;
-
-        extraApps = {
-          inherit (pkgs.nextcloud32Packages.apps)
-            # app_api
-            # bookmarks
-            mail
-            calendar
-            contacts
-            integration_openai
-            integration_paperless
-            # maps
-            # oidc_login
-            onlyoffice
-            previewgenerator
-            # recognize
-            # richdocuments
-            user_oidc
-            ;
-
-          # inherit
-          #   nextcloudPhotos
-          #   nextcloudPdfViewer
-          #   nextcloudAssist
-            # ;
-        };
-
-        config = {
-          adminuser = "mjallen";
-          adminpassFile = adminpass;
-          dbhost = "localhost";
-          dbtype = "pgsql";
-          dbname = "nextcloud";
-          dbuser = "nextcloud";
-        };
-        settings = {
-          log_type = "syslog";
-          syslog_tag = "nextcloud";
-          logfile = "";
-          loglevel = 3;
-          allow_local_remote_servers = true;
-          upgrade.disable-web = false;
-          datadirectory = "/media/nas/main/nextcloud";
-          trusted_domains = [
-            "${hostAddress}:${toString nextcloudPortExtHttp}"
-            "${hostAddress}:${toString nextcloudPortExtHttps}"
-            # "${localAddress}:80"
-            # "${localAddress}:8080"
-            # "${localAddress}:443"
-            "cloud.mjallen.dev"
-          ];
-          opcache.interned_strings_buffer = 16;
-          trusted_proxies = [ hostAddress ];
-          maintenance_window_start = 6;
-          default_phone_region = "US";
-          enable_previews = true;
-          enabledPreviewProviders = [
-            "OC\\Preview\\PNG"
-            "OC\\Preview\\JPEG"
-            "OC\\Preview\\GIF"
-            "OC\\Preview\\BMP"
-            "OC\\Preview\\XBitmap"
-            "OC\\Preview\\MP3"
-            "OC\\Preview\\TXT"
-            "OC\\Preview\\MarkDown"
-            "OC\\Preview\\OpenDocument"
-            "OC\\Preview\\Krita"
-            "OC\\Preview\\HEIC"
-            "OC\\Preview\\Movie"
-            "OC\\Preview\\MSOffice2003"
-            "OC\\Preview\\MSOffice2007"
-            "OC\\Preview\\MSOfficeDoc"
-          ];
-          installed = false;
-          user_oidc = {
-            auto_provision = false;
-            soft_auto_provision = false;
-            allow_multiple_user_backends = false; # auto redirect to authentik for login
-          };
-
-          social_login_auto_redirect = true;
-        };
-      };
-    };
-  };
-}

modules/nixos/services/nextcloud/options.nix

@@ -1,28 +0,0 @@
-{ lib, namespace, ... }:
-with lib;
-let
-  inherit (lib.${namespace}) mkOpt mkBoolOpt;
-in
-{
-  options.${namespace}.services.nextcloud = {
-    enable = mkEnableOption "enable nextcloud";
-
-    autoStart = mkBoolOpt true "autostart container";
-
-    port = mkOpt types.str "9988" "https port";
-
-    name = mkOpt types.str "nextcloud" "container name";
-
-    image = mkOpt types.str "lscr.io/linuxserver/nextcloud" "";
-
-    configPath = mkOpt types.str "/media/nas/main/nix-app-data/nextcloud/config" "";
-
-    dataPath = mkOpt types.str "/media/nas/main/nextcloud" "";
-
-    puid = mkOpt types.str "911" "puid";
-
-    pgid = mkOpt types.str "1000" "pgid";
-
-    timeZone = mkOpt types.str "America/Chicago" "container tz";
-  };
-}

modules/nixos/services/ntfy/default.nix

@@ -6,9 +6,14 @@
 }:
 let
   inherit (lib.${namespace}) mkOpt mkReverseProxyOpt;
-  cfg = config.${namespace}.services.ntfy;
+  name = "ntfy";
+  cfg = config.${namespace}.services.${name};
 
-  ntfyConfig = {
+  ntfyConfig = lib.${namespace}.mkModule {
+    inherit config name;
+    description = "ntfy";
+    options = { };
+    moduleConfig = {
       services = {
         ntfy-sh = {
           enable = true;
@@ -17,11 +22,11 @@ let
             base-url = "https://${cfg.reverseProxy.subdomain}.mjallen.dev";
             enable-login = true;
             listen-http = ":${toString cfg.port}";
-          cache-file = "${cfg.dataDir}/cache.db";
+            cache-file = "${cfg.dataDir}/ntfy/cache.db";
-          attachment-cache-dir = "/${cfg.dataDir}/attachments";
+            attachment-cache-dir = "${cfg.dataDir}/ntfy/attachments";
             behind-proxy = true;
             auth-default-access = "deny-all";
-          auth-file = "${cfg.dataDir}/user.db";
+            auth-file = "${cfg.dataDir}/ntfy/user.db";
             auth-users = [
               "mjallen:$2a$10$g4TqI8UiKKVaKTmrwnXIw.wtajiLBM6oc3UCfJ//lPZFilJnBirn.:admin"
             ];
@@ -48,35 +53,9 @@ let
       };
       users.groups.ntfy-sh = { };
     };
-
-  # Create reverse proxy configuration using mkReverseProxy
-  reverseProxyConfig = lib.${namespace}.mkReverseProxy {
-    name = "ntfy";
-    subdomain = cfg.reverseProxy.subdomain;
-    url = "http://10.0.1.3:${toString cfg.port}";
-    middlewares = cfg.reverseProxy.middlewares;
   };
-
-  fullConfig = {
-    "${namespace}".services.traefik = lib.mkIf cfg.reverseProxy.enable {
-      reverseProxies = [ reverseProxyConfig ];
-    };
-  }
-  // ntfyConfig;
 in
 with lib;
 {
-  options.${namespace}.services.ntfy = {
+  imports = [ ntfyConfig ];
-    enable = mkEnableOption "ntfy service";
-
-    port = mkOpt types.int 8008 "Port for ntfy to be hosted on";
-
-    localAddress = mkOpt types.str "127.0.0.1" "local address of the service";
-
-    dataDir = mkOpt types.str "" "Path to the data dir";
-
-    reverseProxy = mkReverseProxyOpt;
-  };
-
-  config = lib.mkIf cfg.enable fullConfig;
 }

modules/nixos/services/ntfy/default.nix.container

@@ -1,94 +0,0 @@
-{
-  config,
-  lib,
-  namespace,
-  ...
-}:
-let
-  inherit (lib.${namespace}) mkOpt mkReverseProxyOpt;
-  cfg = config.${namespace}.services.ntfy;
-
-  ntfyEnvFile = config.sops.secrets."jallen-nas/ntfy/auth-users".path;
-
-  ntfyConfig = {
-    services = {
-      ntfy-sh = {
-        enable = true;
-        # environmentFile = "/run/.env";
-        settings = {
-          base-url = "https://${cfg.reverseProxy.subdomain}.mjallen.dev";
-          enable-login = true;
-          listen-http = ":${toString cfg.port}";
-          cache-file = "/var/lib/ntfy-sh/cache.db";
-          attachment-cache-dir = "/var/lib/ntfy-sh/attachments";
-          behind-proxy = true;
-          auth-default-access = "deny-all";
-          auth-file = "/var/lib/ntfy-sh/user.db";
-          auth-users = [
-            "mjallen:$2a$10$g4TqI8UiKKVaKTmrwnXIw.wtajiLBM6oc3UCfJ//lPZFilJnBirn.:admin"
-          ];
-        };
-      };
-    };
-    # Create and set permissions for required directories
-    system.activationScripts.ntfy-dirs = ''
-      mkdir -p /var/lib/ntfy-sh
-
-      chown -R ntfy-sh:ntfy-sh /var/lib/ntfy-sh
-
-      chmod -R 775 /var/lib/ntfy-sh
-    '';
-  };
-
-  bindMounts = {
-    "/var/lib/ntfy-sh" = {
-      hostPath = cfg.dataDir;
-      isReadOnly = false;
-    };
-    "/run/.env" = {
-      hostPath = ntfyEnvFile;
-      isReadOnly = true;
-    };
-  };
-
-  # Create reverse proxy configuration using mkReverseProxy
-  reverseProxyConfig = lib.${namespace}.mkReverseProxy {
-    name = "ntfy";
-    subdomain = cfg.reverseProxy.subdomain;
-    url = "http://${cfg.localAddress}:${toString cfg.port}";
-    middlewares = cfg.reverseProxy.middlewares;
-  };
-
-  ntfyContainer =
-    (lib.${namespace}.mkContainer {
-      name = "ntfy";
-      localAddress = cfg.localAddress;
-      ports = [ cfg.port ];
-      bindMounts = bindMounts;
-      config = ntfyConfig;
-    })
-      { inherit lib; };
-
-  fullConfig = {
-    ${namespace}.services.traefik = lib.mkIf cfg.reverseProxy.enable {
-      reverseProxies = [ reverseProxyConfig ];
-    };
-  }
-  // ntfyContainer;
-in
-with lib;
-{
-  options.${namespace}.services.ntfy = {
-    enable = mkEnableOption "ntfy service";
-
-    port = mkOpt types.int 8008 "Port for ntfy to be hosted on";
-
-    localAddress = mkOpt types.str "127.0.0.1" "local address of the service";
-
-    dataDir = mkOpt types.str "" "Path to the data dir";
-
-    reverseProxy = mkReverseProxyOpt;
-  };
-
-  config = lib.mkIf cfg.enable fullConfig;
-}

systems/x86_64-linux/jallen-nas/apps.nix

@@ -102,38 +102,28 @@ in
         enable = true;
         port = 6754;
       };
-      manyfold = enabled;
+      manyfold = {
+        enable = true;
+        port = 3214;
+      };
       matrix = {
         enable = true;
         port = 8448;
-        localAddress = "10.0.1.3";
+        reverseProxy.enable = true;
-        dataDir = "/media/nas/main/nix-app-data/matrix-synapse";
-        reverseProxy = {
-          enable = true;
-          subdomain = "matrix";
-          middlewares = [
-            "crowdsec"
-            "whitelist-geoblock"
-          ];
-        };
       };
+      minecraft = disabled;
+      mongodb = disabled;
       netbootxyz = {
         enable = true;
       };
-      nextcloud = enabled;
+      nextcloud = {
+        enable = true;
+        port = 9988;
+      };
       ntfy = {
         enable = true;
         port = 2586;
-        localAddress = "10.0.1.3";
+        reverseProxy.enable = true;
-        dataDir = "/media/nas/main/nix-app-data/ntfy";
-        reverseProxy = {
-          enable = true;
-          subdomain = "ntfy";
-          middlewares = [
-            "crowdsec"
-            "whitelist-geoblock"
-          ];
-        };
       };
       ocis = disabled;
       onlyoffice = disabled;