Correctly enable Fish so aliases are set.

hosts/hub/apps/gts.nix

@@ -0,0 +1,24 @@
+{ pkgs, ... }:
+
+let
+  package = pkgs.unstable.gotosocial;
+in
+{
+  services = {
+    gotosocial = {
+      enable = true;
+      package = package;
+      settings = {
+        application-name = "Nolan's Social Media";
+        host = "gts.thewordnerd.info";
+        port = 8081;
+        landing-page-user = "nolan";
+      };
+    };
+
+    caddy.virtualHosts."gts.thewordnerd.info".extraConfig = ''
+      reverse_proxy http://localhost:8081
+    '';
+  };
+  environment.systemPackages = [ package ];
+}

hosts/hub/apps/karakeep.nix

@@ -1,23 +0,0 @@
-{ config, ... }:
-
-{
-  systemd.tmpfiles.rules = [
-    "d /var/lib/actual 0755 root root"
-  ];
-
-  virtualisation.oci-containers.containers.actual = {
-    image = "actualbudget/actual-server:latest";
-    ports = [
-      "5006:5006"
-    ];
-    environment = {
-      ACTUAL_LOGIN_METHOD = "header";
-    };
-    volumes = [ "/var/lib/actual:/data" ];
-  };
-
-  services.caddy.virtualHosts."https://budget.tailc50184.ts.net".extraConfig = ''
-    bind tailscale/budget
-    reverse_proxy http://localhost:5006
-  '';
-}

hosts/hub/apps/peertube.nix

@@ -0,0 +1,21 @@
+{ config, ... }:
+
+{
+  age.secrets.thewordnerd_peertube = {
+    file = ../../../secrets/thewordnerd_peertube.age;
+    owner = config.services.peertube.user;
+  };
+  services = {
+    peertube = {
+      enable = true;
+      localDomain = "peertube.thewordnerd.info";
+      listenWeb = 443;
+      redis.createLocally = true;
+      database.createLocally = true;
+      secrets.secretsFile = config.age.secrets.thewordnerd_peertube.path;
+    };
+    caddy.virtualHosts."peertube.thewordnerd.info".extraConfig = ''
+      reverse_proxy http://localhost:9000
+    '';
+  };
+}

hosts/hub/default.nix

@@ -18,7 +18,6 @@
     ../../roles/lldap.nix
     ../../roles/authelia.nix
     ../../roles/podman.nix
-    ../../roles/minio.nix
     ../../roles/caddy.nix
     ../../roles/vscode-remote.nix
     ../../roles/postgres.nix
@@ -28,6 +27,8 @@
     ./apps/dev.nix
     ./apps/nextcloud.nix
     ./apps/paperless.nix
+    ./apps/gts.nix
+    ./apps/peertube.nix
     ./apps/searxng.nix
     ./apps/actual.nix
     ./apps/adguard.nix

secrets/secrets.nix

@@ -37,4 +37,5 @@ in
     hub
     nolan
   ];
+  "thewordnerd_peertube.age".publicKeys = [ hub ];
 }

secrets/thewordnerd_peertube.age

@@ -0,0 +1,5 @@
+age-encryption.org/v1
+-> ssh-ed25519 5X7MKw 8HgABUK/pWaX4v3hcf4Q0QKNrvwZfLLGGYNSYEY6eAE
+DaPJEDRHG60VWEJCdRxlU+N/gsPL608nqYl4/w0d8fw
+--- XdjnYGqiHzc1SCNXV9p08Tonizbg5wXSJiCUV+Sgj2g
+ù*‘œü!”
SÆìSÊ|.
{–¥¢Uú¥¯<C2A5>`—‰Yf~‡z+K—¬1ÕêjS\/cÄb^‚R±I<C2B1>öš§&¿&&¡È¼ŸsjCŽÐø‰ûöÑÅxXKVF­­ 

users/root.nix

@@ -10,11 +10,14 @@
 
   programs.fish.enable = true;
 
-  home-manager.users.root.home = {
-    shellAliases = {
-      "systemctl" = "systemctl --no-ager -l";
-      "journalctl" = "journalctl --no-pager -l";
+  home-manager.users.root = {
+    programs.fish.enable = true;
+    home = {
+      shellAliases = {
+        "systemctl" = "systemctl --no-pager -l";
+        "journalctl" = "journalctl --no-pager -l";
+      };
+      stateVersion = "24.11";
     };
-    stateVersion = "24.11";
   };
 }