flake update, niri stuff

modules/apps/audio/default.nix

@@ -25,6 +25,7 @@
             pavucontrol
             playerctl
             streamrip
+            gst_all_1.gstreamer
           ]
         else
           [ ]

modules/apps/internet/default.nix

@@ -9,5 +9,6 @@
   imports = [
     ./browser.nix
     ./mail.nix
+    ./rss.nix
   ];
 }

modules/apps/internet/rss.nix

@@ -0,0 +1,29 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+
+{
+  options = {
+    apps.internet.rss = {
+      enable = lib.mkEnableOption "enable rss";
+    };
+  };
+  config = {
+    environment.systemPackages =
+      with pkgs;
+      [
+
+      ]
+      ++ (
+        if config.apps.internet.rss.enable then
+          [
+            newsflash
+          ]
+        else
+          [ ]
+      );
+  };
+}

modules/device/default.nix

@@ -9,14 +9,7 @@
   options = {
     device.type = lib.mkOption {
       default = "minimal";
-      description = "device type (desktop, laptop, server, minimal) for base config";
+      description = "device type";
     };
   };
-
-  imports = [
-    ./minimal.nix
-    ./desktop.nix
-    ./laptop.nix
-    ./server.nix
-  ];
 }

modules/device/desktop.nix

@@ -6,5 +6,14 @@
 }:
 
 {
-  config = { };
+  config = {
+    device.type = "desktop";
+    apps = {
+      internet = {
+        rss = {
+          enable = true;
+        };
+      };
+    };
+  };
 }

modules/server/misc/default.nix

@@ -10,5 +10,6 @@
     ./dawarich.nix
     ./forgejo.nix
     ./lauti.nix
+    ./vaultwarden.nix
   ];
 }

modules/server/misc/vaultwarden.nix

@@ -0,0 +1,49 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+
+{
+  options = {
+    server.misc.vaultwarden = {
+      enable = lib.mkEnableOption "enable dawarich";
+      port = lib.mkOption {
+        default = 8000;
+        description = "vaultwarden port";
+      };
+      public = lib.mkEnableOption "make vaultwarden public";
+      subdomain = lib.mkOption {
+        default = "vault";
+        description = "vaultwarden subdomain";
+      };
+    };
+  };
+  config = {
+    services = {
+      vaultwarden = {
+        enable = true;
+        config = {
+          DOMAIN = "https://${config.server.misc.vaultwarden.subdomain}.${config.networking.domain}";
+          SIGNUPS_ALLOWED = false;
+        };
+      };
+      nginx = {
+        virtualHosts = {
+          "${config.server.misc.vaultwarden.subdomain}.${config.networking.domain}" =
+            if config.server.misc.vaultwarden.public then
+              {
+                enableACME = true;
+                forceSSL = true;
+                locations."/" = {
+                  proxyPass = "http://127.0.0.1:${toString config.server.misc.vaultwarden.port}";
+                };
+              }
+            else
+              { };
+        };
+      };
+    };
+  };
+}