glance: fix pinchflat icon

clan/flake-module.nix

@@ -0,0 +1,180 @@
+{ self, lib, ... }:
+{
+  imports = [
+    ./machines.nix
+    ./monitoring.nix
+    ./network.nix
+  ];
+
+  clan.meta.name = "blossom";
+
+  clan.inventory.instances."rpqt-admin" = {
+    module.input = "clan-core";
+    module.name = "admin";
+    roles.default.tags.server = { };
+    roles.default.machines.haze = { };
+    roles.default.settings.allowedKeys = {
+      rpqt_haze = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGa8R8obgptefcp27Cdp9bc2fiyc9x0oTfMsTPFp2ktE rpqt@haze";
+      nixbld_haze = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIyNC2sn5m7m52r4kVZqg0T7abqdz5xh/blU3cYtHKAE nixbld@haze";
+    };
+  };
+
+  clan.inventory.instances."sshd" = {
+    module.input = "clan-core";
+    module.name = "sshd";
+    roles.server.tags.all = { };
+    roles.server.extraModules = [
+      self.nixosModules.hardened-ssh-server
+    ];
+    roles.server.settings = {
+      certificate.searchDomains = [
+        "home.rpqt.fr"
+      ];
+    };
+
+    roles.client.tags.all = { };
+    roles.client.settings = {
+      certificate.searchDomains = [
+        "home.rpqt.fr"
+      ];
+    };
+  };
+
+  clan.inventory.instances.user-rpqt = {
+    module.input = "clan-core";
+    module.name = "users";
+    roles.default.machines.haze = {
+      settings = {
+        user = "rpqt";
+      };
+    };
+    roles.default.extraModules = [
+      self.nixosModules.user-rpqt
+    ];
+  };
+
+  clan.inventory.instances.common-config = {
+    module = {
+      input = "clan-core";
+      name = "importer";
+    };
+    roles.default.tags.all = { };
+    roles.default.extraModules = [ self.nixosModules.common ];
+  };
+
+  clan.inventory.instances.server-config = {
+    module = {
+      input = "clan-core";
+      name = "importer";
+    };
+    roles.default.tags.server = { };
+    roles.default.extraModules = [
+      {
+        nix.gc.automatic = lib.mkDefault true;
+        nix.gc.dates = lib.mkDefault "Mon 3:15";
+        nix.gc.randomizedDelaySec = lib.mkDefault "30min";
+        nix.gc.options = lib.mkDefault "--delete-older-than 30d";
+      }
+    ];
+  };
+
+  clan.inventory.instances."garage" = {
+    module.input = "clan-core";
+    module.name = "garage";
+    roles.default.tags.garage = { };
+  };
+
+  clan.inventory.instances."garage-config" = {
+    module.input = "clan-core";
+    module.name = "importer";
+    roles.default.tags.garage = { };
+    roles.default.extraModules = [ ../modules/garage.nix ];
+  };
+
+  clan.inventory.instances."trusted-nix-caches" = {
+    module.input = "clan-core";
+    module.name = "trusted-nix-caches";
+    roles.default.tags.all = { };
+  };
+
+  clan.inventory.instances."borgbackup-storagebox" = {
+    module.input = "clan-core";
+    module.name = "borgbackup";
+
+    roles.client.machines = lib.genAttrs [ "crocus" "genepi" "verbena" ] (
+      machine:
+      let
+        config = self.nixosConfigurations.${machine}.config;
+        user = "u422292";
+        host = "${user}.your-storagebox.de";
+      in
+      {
+        settings.destinations."storagebox-${config.networking.hostName}" = {
+          repo = "${user}@${host}:./borgbackup/${config.networking.hostName}";
+          rsh = "ssh -oPort=23 -i ${
+            config.clan.core.vars.generators.borgbackup.files."borgbackup.ssh".path
+          } -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null";
+        };
+      }
+    );
+    roles.client.extraModules = [
+      ../modules/storagebox.nix
+    ];
+    roles.server.machines = { };
+  };
+
+  clan.inventory.instances.syncthing = {
+    roles.peer.tags.syncthing = { };
+    roles.peer.settings.folders = {
+      Documents = {
+        path = "~/Documents";
+      };
+      Music = {
+        path = "~/Music";
+      };
+      Pictures = {
+        path = "~/Pictures";
+      };
+      Videos = {
+        path = "~/Videos";
+      };
+    };
+    roles.peer.settings.extraDevices = {
+      pixel-7a = {
+        id = "IZE7B4Z-LKTJY6Q-77NN4JG-ADYRC77-TYPZTXE-Q35BWV2-AEO7Q3R-ZE63IAU";
+        name = "Pixel 7a";
+        addresses = [ "dynamic" ];
+      };
+    };
+  };
+
+  clan.inventory.instances.buildbot = {
+    module.input = "self";
+    module.name = "@rpqt/buildbot";
+
+    roles.master.machines.verbena = {
+      settings = {
+        domain = "buildbot.turifer.dev";
+        admins = [ "rpqt" ];
+        topic = "buildbot-nix";
+        gitea.instanceUrl = "https://git.turifer.dev";
+      };
+    };
+
+    roles.master.extraModules = [
+      {
+        services.nginx.virtualHosts."buildbot.turifer.dev" = {
+          enableACME = true;
+          forceSSL = true;
+        };
+
+        security.acme.certs."buildbot.turifer.dev" = {
+          email = "admin@turifer.dev";
+        };
+      }
+    ];
+
+    roles.worker.machines.verbena = { };
+  };
+
+}

clan/machines.nix

@@ -0,0 +1,28 @@
+{
+  clan.inventory.machines = {
+    crocus = {
+      tags = [
+        "garage"
+        "server"
+      ];
+    };
+    genepi = {
+      tags = [
+        "garage"
+        "server"
+        "syncthing"
+      ];
+    };
+    haze = {
+      tags = [
+        "syncthing"
+      ];
+    };
+    verbena = {
+      tags = [
+        "garage"
+        "server"
+      ];
+    };
+  };
+}

clan/monitoring.nix

@@ -0,0 +1,46 @@
+{ self, ... }:
+{
+  clan.inventory.instances.prometheus = {
+    module.input = "self";
+    module.name = "@rpqt/prometheus";
+
+    roles.scraper.machines.genepi = { };
+    roles.scraper.settings = {
+      extraScrapeConfigs = [
+        {
+          job_name = "garage";
+          static_configs = [
+            {
+              labels.instance = "crocus";
+              targets = [ "crocus.home.rpqt.fr:3903" ];
+            }
+            {
+              labels.instance = "genepi";
+              targets = [ "genepi.home.rpqt.fr:3903" ];
+            }
+            {
+              labels.instance = "verbena";
+              targets = [ "verbena.home.rpqt.fr:3903" ];
+            }
+          ];
+          authorization = {
+            type = "Bearer";
+            credentials_file =
+              self.nixosConfigurations.verbena.config.clan.core.vars.generators.garage.files.metrics_token.path;
+          };
+        }
+      ];
+    };
+
+    roles.target.tags.server = { };
+    roles.target.settings = {
+      exporters = {
+        node = {
+          enabledCollectors = [
+            "systemd"
+          ];
+        };
+      };
+    };
+  };
+}

clan/network.nix

@@ -0,0 +1,20 @@
+{
+  clan.inventory.instances.zerotier = {
+    roles.controller.machines.crocus = { };
+    roles.moon.machines.crocus = {
+      settings = {
+        stableEndpoints = [
+          "116.203.18.122"
+          "2a01:4f8:1c1e:e415::/64"
+        ];
+      };
+    };
+    roles.peer.tags."all" = { };
+  };
+
+  clan.inventory.instances.internet = {
+    roles.default.machines.verbena = {
+      settings.host = "git.turifer.dev";
+    };
+  };
+}

clanServices/prometheus/default.nix

@@ -51,7 +51,7 @@
                           targetHost = targetConfig.clan.core.vars.generators.zerotier.files.zerotier-ip.value;
                         in
                         [
-                          "${targetHost}:${toString targetConfig.services.prometheus.exporters.${exporter}.port}"
+                          "[${targetHost}]:${toString targetConfig.services.prometheus.exporters.${exporter}.port}"
                         ];
                       labels.instance = machineName;
                     }) machinesWithExporter;

flake.nix

@@ -15,11 +15,10 @@
     flake-parts.lib.mkFlake { inherit inputs; } ({
       imports = [
         inputs.clan-core.flakeModules.default
-
+        ./clan/flake-module.nix
         ./clanServices/flake-module.nix
         ./devShells/flake-module.nix
         ./home-manager/flake-module.nix
-        ./machines/flake-module.nix
         ./modules/flake-module.nix
         ./packages/flake-module.nix
       ];

home-manager/desktop/terminal.nix

@@ -15,7 +15,8 @@
   ];
 
   programs.alacritty.enable = true;
-  xdg.configFile."alacritty".source = "${config.dotfiles.path}/.config/alacritty";
+  xdg.configFile."alacritty/alacritty.toml".source =
+    "${config.dotfiles.path}/.config/alacritty/alacritty.toml";
 
   xdg.configFile."ghostty/config".source = "${config.dotfiles.path}/.config/ghostty/config";
 }

home-manager/desktop/vicinae.nix

@@ -1,4 +1,9 @@
-{ config, inputs, ... }:
+{
+  config,
+  inputs,
+  lib,
+  ...
+}:
 {
   imports = [
     inputs.vicinae.homeManagerModules.default
@@ -9,6 +14,9 @@
     autoStart = true;
   };
 
+  xdg.configFile."vicinae/vicinae.json".source =
+    lib.mkForce "${config.dotfiles.path}/.config/vicinae/vicinae.json";
+
   xdg.configFile."matugen/config.toml".source = "${config.dotfiles.path}/.config/matugen/config.toml";
   xdg.configFile."matugen/templates/vicinae.toml".source =
     "${config.dotfiles.path}/.config/matugen/templates/vicinae.toml";

home-manager/dev.nix

@@ -13,6 +13,7 @@
 
   home.packages = with pkgs; [
     direnv
+    gh
     hut
     jujutsu
     nix-output-monitor
@@ -23,6 +24,7 @@
     typescript-language-server
     nil # Nix language server
     nixfmt-rfc-style
+    nixpkgs-review
   ];
 
   programs.direnv = {

home/.config/ghostty/config

@@ -2,4 +2,5 @@ theme = dark:Kanagawa Wave,light:Builtin Light
 font-feature = -liga
 font-feature = -calt
 font-feature = -dlig
+font-size = 14
 window-inherit-working-directory = false

home/.config/niri/config.kdl

@@ -345,7 +345,6 @@ screenshot-path "~/Pictures/Screenshots/Screenshot from %Y-%m-%d %H-%M-%S.png"
 spawn-at-startup "dms" "run"
 spawn-at-startup "kdeconnect-indicator"
 spawn-at-startup "~/rep/flocon/home/bin/monitor-dark-mode.sh"
-spawn-at-startup "vicinae" "server"
 
 spawn-at-startup "xwayland-satellite"
 environment {

machines/flake-module.nix

@@ -1,253 +0,0 @@
-{ self, lib, ... }:
-{
-  clan = {
-    meta.name = "blossom";
-    inventory.machines = {
-      crocus = {
-        tags = [
-          "garage"
-          "server"
-        ];
-      };
-      genepi = {
-        tags = [
-          "garage"
-          "server"
-          "syncthing"
-        ];
-      };
-      haze = {
-        tags = [
-          "syncthing"
-        ];
-      };
-      verbena = {
-        tags = [
-          "garage"
-          "server"
-        ];
-      };
-    };
-
-    inventory.instances = {
-      "rpqt-admin" = {
-        module.input = "clan-core";
-        module.name = "admin";
-        roles.default.tags.server = { };
-        roles.default.machines.haze = { };
-        roles.default.settings.allowedKeys = {
-          rpqt_haze = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGa8R8obgptefcp27Cdp9bc2fiyc9x0oTfMsTPFp2ktE rpqt@haze";
-        };
-      };
-
-      zerotier = {
-        roles.controller.machines.crocus = { };
-        roles.moon.machines.crocus = {
-          settings = {
-            stableEndpoints = [
-              "116.203.18.122"
-              "2a01:4f8:1c1e:e415::/64"
-            ];
-          };
-        };
-        roles.peer.tags."all" = { };
-      };
-
-      internet = {
-        roles.default.machines.verbena = {
-          settings.host = "git.turifer.dev";
-        };
-      };
-
-      "sshd" = {
-        module.input = "clan-core";
-        module.name = "sshd";
-        roles.server.tags.all = { };
-        roles.server.extraModules = [
-          self.nixosModules.hardened-ssh-server
-        ];
-      };
-
-      user-rpqt = {
-        module.input = "clan-core";
-        module.name = "users";
-        roles.default.machines.haze = {
-          settings = {
-            user = "rpqt";
-          };
-        };
-        roles.default.extraModules = [
-          self.nixosModules.user-rpqt
-        ];
-      };
-
-      common-config = {
-        module = {
-          input = "clan-core";
-          name = "importer";
-        };
-        roles.default.tags.all = { };
-        roles.default.extraModules = [ self.nixosModules.common ];
-      };
-
-      server-config = {
-        module = {
-          input = "clan-core";
-          name = "importer";
-        };
-        roles.default.tags.server = { };
-        roles.default.extraModules = [
-          {
-            nix.gc.automatic = lib.mkDefault true;
-            nix.gc.dates = lib.mkDefault "Mon 3:15";
-            nix.gc.randomizedDelaySec = lib.mkDefault "30min";
-            nix.gc.options = lib.mkDefault "--delete-older-than 30d";
-          }
-        ];
-      };
-
-      "garage" = {
-        module.input = "clan-core";
-        module.name = "garage";
-        roles.default.tags.garage = { };
-      };
-
-      "garage-config" = {
-        module.input = "clan-core";
-        module.name = "importer";
-        roles.default.tags.garage = { };
-        roles.default.extraModules = [ ../modules/garage.nix ];
-      };
-
-      "trusted-nix-caches" = {
-        module.input = "clan-core";
-        module.name = "trusted-nix-caches";
-        roles.default.tags.all = { };
-      };
-
-      "borgbackup-storagebox" = {
-        module.input = "clan-core";
-        module.name = "borgbackup";
-
-        roles.client.machines = lib.genAttrs [ "crocus" "genepi" "verbena" ] (
-          machine:
-          let
-            config = self.nixosConfigurations.${machine}.config;
-            user = "u422292";
-            host = "${user}.your-storagebox.de";
-          in
-          {
-            settings.destinations."storagebox-${config.networking.hostName}" = {
-              repo = "${user}@${host}:./borgbackup/${config.networking.hostName}";
-              rsh = "ssh -oPort=23 -i ${
-                config.clan.core.vars.generators.borgbackup.files."borgbackup.ssh".path
-              } -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null";
-            };
-          }
-        );
-        roles.client.extraModules = [
-          ../modules/storagebox.nix
-        ];
-        roles.server.machines = { };
-      };
-
-      prometheus = {
-        module.input = "self";
-        module.name = "@rpqt/prometheus";
-
-        roles.scraper.machines.genepi = { };
-        roles.scraper.settings = {
-          extraScrapeConfigs = [
-            {
-              job_name = "garage";
-              static_configs = [
-                {
-                  labels.instance = "crocus";
-                  targets = [ "crocus.home.rpqt.fr:3903" ];
-                }
-                {
-                  labels.instance = "genepi";
-                  targets = [ "genepi.home.rpqt.fr:3903" ];
-                }
-                {
-                  labels.instance = "verbena";
-                  targets = [ "verbena.home.rpqt.fr:3903" ];
-                }
-              ];
-              authorization = {
-                type = "Bearer";
-                credentials_file =
-                  self.nixosConfigurations.verbena.config.clan.core.vars.generators.garage.files.metrics_token.path;
-              };
-            }
-          ];
-        };
-
-        roles.target.tags.server = { };
-        roles.target.settings = {
-          exporters = {
-            node = {
-              enabledCollectors = [
-                "systemd"
-              ];
-            };
-          };
-        };
-      };
-
-      syncthing = {
-        roles.peer.tags.syncthing = { };
-        roles.peer.settings.folders = {
-          Documents = {
-            path = "~/Documents";
-          };
-          Music = {
-            path = "~/Music";
-          };
-          Pictures = {
-            path = "~/Pictures";
-          };
-          Videos = {
-            path = "~/Videos";
-          };
-        };
-        roles.peer.settings.extraDevices = {
-          pixel-7a = {
-            id = "IZE7B4Z-LKTJY6Q-77NN4JG-ADYRC77-TYPZTXE-Q35BWV2-AEO7Q3R-ZE63IAU";
-            name = "Pixel 7a";
-            addresses = [ "dynamic" ];
-          };
-        };
-      };
-
-      buildbot = {
-        module.input = "self";
-        module.name = "@rpqt/buildbot";
-
-        roles.master.machines.verbena = {
-          settings = {
-            domain = "buildbot.turifer.dev";
-            admins = [ "rpqt" ];
-            topic = "buildbot-nix";
-            gitea.instanceUrl = "https://git.turifer.dev";
-          };
-        };
-
-        roles.master.extraModules = [
-          {
-            services.nginx.virtualHosts."buildbot.turifer.dev" = {
-              enableACME = true;
-              forceSSL = true;
-            };
-
-            security.acme.certs."buildbot.turifer.dev" = {
-              email = "admin@turifer.dev";
-            };
-          }
-        ];
-
-        roles.worker.machines.verbena = { };
-      };
-    };
-  };
-}

machines/genepi/glance-config.nix

@@ -44,11 +44,6 @@
                   url = "https://images.home.rpqt.fr";
                   icon = "sh:immich";
                 }
-                {
-                  title = "Grafana";
-                  url = "https://grafana.home.rpqt.fr";
-                  icon = "sh:grafana";
-                }
                 {
                   title = "FreshRSS";
                   url = "https://rss.home.rpqt.fr";
@@ -72,7 +67,7 @@
                 {
                   title = "Pinchflat";
                   url = "https://pinchflat.home.rpqt.fr";
-                  icon = "sh:pinchflat";
+                  icon = "https://cdn.jsdelivr.net/gh/selfhst/icons/png/pinchflat.png";
                 }
                 {
                   title = "Home Assistant";
@@ -96,6 +91,23 @@
                 }
               ];
             }
+            {
+              type = "monitor";
+              cache = "1m";
+              title = "Monitoring";
+              sites = [
+                {
+                  title = "Grafana";
+                  url = "https://grafana.home.rpqt.fr";
+                  icon = "sh:grafana";
+                }
+                {
+                  title = "Prometheus";
+                  url = "http://genepi.home.rpqt.fr:9090";
+                  icon = "sh:prometheus";
+                }
+              ];
+            }
             {
               type = "monitor";
               cache = "1m";

modules/nextcloud.nix

@@ -38,15 +38,14 @@ in
     };
   };
 
-  services.postgresql = {
+  clan.core.postgresql = {
     enable = true;
-    ensureDatabases = [ "nextcloud" ];
-    ensureUsers = [
-      {
-        name = "nextcloud";
-        ensureDBOwnership = true;
-      }
-    ];
+    databases = {
+      nextcloud = {
+        create.enable = true;
+        restore.stopOnRestore = [ "nextcloud" ];
+      };
+    };
   };
 
   systemd.services."nextcloud-setup" = {