Merge branch 'main' of ssh://codeberg.org/dnscio/nix-config

hosts/dnsc-air/default.nix

@@ -24,6 +24,7 @@
     description = "Dennis Schoepf";
   };
   nix.settings.trusted-users = [ "dennis" ];
+  security.pam.services.sudo_local.touchIdAuth = true;
 
   # Device specific overlays
   nixpkgs.overlays = [ ];
@@ -63,6 +64,7 @@
   homebrew.casks = lib.mkAfter ([
     "cyberduck"
     "krita"
+    "darktable"
   ]);
 
   # Shells

hosts/dnsc-server/default.nix

@@ -18,6 +18,7 @@
     ../../modules/actual-server
     ../../modules/immich
     ../../modules/cockpit
+    ../../modules/backrest
   ];
 
   # General
@@ -35,7 +36,9 @@
   # Secrets
   age = {
     identityPaths = [ "${config.users.users.dennis.home}/.ssh/id_ed25519" ];
-    secrets."restic/password".file = ../../secrets/restic/password.age;
+    secrets."restic/password" = {
+      file = ../../secrets/restic/password.age;
+    };
   };
 
   # Nix Settings
@@ -64,10 +67,12 @@
     allowedTCPPorts = [
       22
       443
+      9004
     ];
     allowedUDPPorts = [
       22
       443
+      9004
     ];
   };
 
@@ -147,6 +152,10 @@
       reverse_proxy http://127.0.0.1:9003
       tls internal
     '';
+    virtualHosts."backup.home.lan".extraConfig = ''
+      reverse_proxy http://127.0.0.1:9004
+      tls internal
+    '';
   };
 
   # Environment variables