update flake

hosts/nas/apps/jellyseerr/default.nix

@@ -2,7 +2,7 @@
 
 let
   jellyseerrPort = 5055;
-  dataDir = "/var/lib/jellyseerr";
+  dataDir = "/var/lib/private/jellyseerr";
 in
 {
   containers.jellyseerr = {
@@ -44,6 +44,18 @@ in
           useHostResolvConf = lib.mkForce false;
         };
 
+        # Create and set permissions for required directories
+        system.activationScripts.jellyseerr-dirs = ''
+          mkdir -p /var/lib/private/jellyseerr
+
+          chown -R jellyseerr:jellyseerr /var/lib/private/jellyseerr
+
+          chmod -R 775 /var/lib/private/jellyseerr
+
+          ln -sf /var/lib/private/jellyseerr /var/lib/jellyfin
+
+        '';
+
         services.resolved.enable = true;
         system.stateVersion = "23.11";
       };

hosts/nas/apps/nextcloud/default.nix

@@ -42,6 +42,7 @@ in
     config =
       { pkgs, lib, ... }:
       {
+        imports = [ ../../../../share/nvidia ];
         nixpkgs.config.allowUnfree = true;
 
         services = {
@@ -66,6 +67,7 @@ in
               dbuser = "nextcloud";
             };
             settings = {
+              loglevel = 3;
               allow_local_remote_servers = true;
               upgrade.disable-web = false;
               datadirectory = "/data";
@@ -76,6 +78,7 @@ in
                 "10.0.2.18:443"
                 "cloud.mjallen.dev"
               ];
+              opcache.interned_strings_buffer = 16;
               trusted_proxies = [ "10.0.1.18" ];
               maintenance_window_start = 6;
               default_phone_region = "US";
@@ -114,6 +117,9 @@ in
 
         # System packages
         environment.systemPackages = with pkgs; [
+          cudaPackages.cudnn
+          cudatoolkit
+          ffmpeg
           libtensorflow-bin
           nextcloud30
           nodejs
@@ -153,6 +159,25 @@ in
 
         '';
 
+        hardware = {
+          graphics = {
+            enable = true;
+            # setLdLibraryPath = true;
+          };
+        };
+
+        programs = {
+          nix-ld.enable = true;
+        };
+
+        share.hardware.nvidia = {
+          enable = true;
+          enableBeta = true;
+          enableOpen = true;
+          nvidiaSettings = true;
+          enableNvidiaDocker = true;
+        };
+
         system.stateVersion = "23.11";
         networking = {
           firewall = {

hosts/nas/apps/ollama/default.nix

@@ -19,9 +19,12 @@
     environmentFile = config.sops.secrets."jallen-nas/open-webui".path;
     environment = {
       OPENID_PROVIDER_URL = "https://authentik.mjallen.dev/application/o/chat/.well-known/openid-configuration";
-      OPENID_PROVIDER_NAME = "authentik";
+      OAUTH_PROVIDER_NAME = "authentik";
+      OPENID_REDIRECT_URI = "https://chat.mjallen.dev/oauth/oidc/callback";
       ENABLE_OAUTH_SIGNUP = "true";
       OAUTH_MERGE_ACCOUNTS_BY_EMAIL = "true";
+      ENABLE_SIGNUP = "False";
+      ENABLE_LOGIN_FORM = "False";
       ANONYMIZED_TELEMETRY = "False";
       DO_NOT_TRACK = "True";
       SCARF_NO_ANALYTICS = "True";

hosts/nas/configuration.nix

@@ -118,12 +118,15 @@ in
       sbctl
       speedtest-cli
       tailscale
+      tigervnc
       tpm2-tools
       tpm2-tss
       usbutils
       vim
       vulkan-tools
       wget
+      xorg.xinit
+      xorg.xauth
     ];
   };
 
@@ -210,6 +213,7 @@ in
         papirus-icon-theme
         firefox
         swtpm
+        tigervnc
       ];
     };
 

hosts/nas/services.nix

@@ -95,9 +95,9 @@ in
 
     # Enable RDP
     xrdp = {
-      enable = enableDisplayManager;
-      defaultWindowManager = "startplasma-x11";
-      openFirewall = enableDisplayManager;
+      enable = true;
+      defaultWindowManager = "${pkgs.lxqt.lxqt-session}/bin/startlxqt";
+      openFirewall = true;
     };
 
     avahi = {