feat: Added stuff

nixos/mirai/services/immich.nix

@@ -3,10 +3,12 @@
     secrets."authelia/oidc/immich/client_id" = {
       owner = config.systemd.services.authelia-darksailor.serviceConfig.User;
       mode = "0440";
+      restartUnits = ["immich-server.service" "authelia-darksailor.service"];
     };
     secrets."authelia/oidc/immich/client_secret" = {
       owner = config.systemd.services.authelia-darksailor.serviceConfig.User;
       mode = "0440";
+      restartUnits = ["immich-server.service" "authelia-darksailor.service"];
     };
     templates = {
       "immich-config.json" = {
@@ -36,10 +38,10 @@
           '';
         mode = "0400";
         owner = "immich";
+        restartUnits = ["immich-server.service" "authelia-darksailor.service"];
       };
     };
   };
-  users.users.immich.extraGroups = [config.systemd.services.authelia-darksailor.serviceConfig.Group];
   services.immich = {
     enable = true;
     mediaLocation = "/media/photos/immich";

nixos/mirai/services/llama.nix

@@ -28,7 +28,7 @@
       };
     };
     open-webui = {
-      enable = false;
+      enable = true;
       port = 7070;
       environment = {
         SCARF_NO_ANALYTICS = "True";

nixos/mirai/services/lldap.nix

@@ -13,8 +13,6 @@
       http_port = 5090;
       ldap_port = 389;
       ldap_host = "::";
-      # environment = {
-      # };
       environmentFile = ''
         LLDAP_LDAP_USER_PASS_FILE = ${config.sops.secrets."lldap/admin".path};
         LLDAP_JWT_SECRET_FILE = ${config.sops.secrets."lldap/jwt".path};

nixos/tsuba/services/servarr.nix

@@ -4,26 +4,37 @@
   lib,
   ...
 }: {
-  services = {
+  services = let
+    settings = {
+      auth = {
+        authentication_enabled = true;
+        authentication_method = "External";
+      };
+    };
+  in {
     sonarr = {
       enable = true;
       package = unstablePkgs.sonarr;
       group = "media";
+      inherit settings;
     };
     radarr = {
       enable = true;
       package = unstablePkgs.radarr;
       group = "media";
+      inherit settings;
     };
     lidarr = {
       enable = true;
       package = unstablePkgs.lidarr;
       group = "media";
+      inherit settings;
     };
     bazarr = {
       enable = true;
       package = unstablePkgs.bazarr;
       group = "media";
+      # settings.AuthenticationMethod = "External";
     };
     caddy.virtualHosts = {
       "sonarr.tsuba.darksailor.dev".extraConfig = ''