move stuff

modules/nixos/services/immich/default.nix

@@ -0,0 +1,38 @@
+{
+  config,
+  lib,
+  namespace,
+  ...
+}:
+with lib;
+let
+  cfg = config.${namespace}.services.immich;
+
+  immichPort = 2283;
+  dataDir = "/media/nas/main/photos";
+  dbPassword = config.sops.secrets."jallen-nas/immich/db-password".path;
+in
+{
+  imports = [ ./options.nix ];
+
+  config = mkIf cfg.enable {
+    # Enable immich service
+    services.immich = {
+      enable = true;
+      port = immichPort;
+      openFirewall = true;
+      secretsFile = dbPassword;
+      mediaLocation = dataDir;
+
+      environment = {
+        IMMICH_HOST = lib.mkForce "0.0.0.0";
+        IMMICH_TRUSTED_PROXIES = "10.0.1.3";
+        TZ = "America/Chicago";
+      };
+
+      machine-learning = {
+        enable = true;
+      };
+    };
+  };
+}

modules/nixos/services/immich/options.nix

@@ -0,0 +1,7 @@
+{ lib, namespace, ... }:
+with lib;
+{
+  options.${namespace}.services.immich = {
+    enable = mkEnableOption "enable immich";
+  };
+}