meow

hosts/ds9/attic.nix

@@ -5,13 +5,17 @@
   inputs,
   ...
 }:
+let
+  stateDir = "/var/lib/atticd2";
+in
 {
   # imports = [ inputs.attic.nixosModules.atticd ];
   ragon.agenix.secrets.ds9AtticEnv = { };
   ragon.persist.extraDirectories = [
-    "/var/lib/atticd"
+    stateDir
   ];
-  
+
+  systemd.services.atticd.serviceConfig.ReadWritePaths = [ stateDir ];
   services.atticd = {
     enable = true;
 
@@ -20,6 +24,11 @@
 
     settings = {
       listen = "[::]:8089";
+      database.url = "sqlite://${stateDir}/server.db?mode=rwc";
+      storage = {
+        type = "local";
+        path = "${stateDir}/storage";
+      };
 
       jwt = { };
 

hosts/ds9/containers.nix

@@ -72,6 +72,7 @@ in
     image = "docker.io/tensorchord/pgvecto-rs:pg16-v0.2.1";
     extraOptions = [
       "--network=db-net"
+      "--network=podman"
       "--health-cmd"
       "pg_isready -U postgres"
     ];
@@ -82,6 +83,7 @@ in
     environmentFiles = [
       config.age.secrets.ds9PostgresEnv.path
     ];
+    ports = [ "5432:5432"];
     volumes = [
       "${postgres-multi-db}:/docker-entrypoint-initdb.d/create-multiple-postgresql-databases.sh"
       "postgres:/var/lib/postgresql/data"

hosts/ds9/default.nix

@@ -299,11 +299,15 @@ in
           import podmanRedir http://copyparty:3923
         }
         @noauth {
-          method GET OPTIONS HEAD
           path_regexp ^\/(noauth(\/.*|)|[a-z.]+\.(css|js)|[1-9].png)$
         }
+        @getoptionshead {
+          method GET OPTIONS HEAD
+        }
         handle @noauth {
-          import podmanRedir http://copyparty:3923
+          handle @getoptionshead {
+            import podmanRedir http://copyparty:3923
+          }
         }
         handle {
           import podmanRedirWithAuth http://copyparty:3923
@@ -321,14 +325,18 @@ in
       enable = true;
       enabledCollectors = [ "systemd" ];
     };
+    exporters.postgres = {
+      enable = true;
+      environmentFile = config.age.secrets.ds9PostgresExporterEnv.path;
+    };
     scrapeConfigs = [
-
       {
-        job_name = "jellyfin";
+        job_name = "postgres";
         static_configs = [
           {
             targets = [
-              "127.0.0.1:8096"
+              "localhost:${toString config.services.prometheus.exporters.postgres.port}"
+              "picard.kangaroo-galaxy.ts.net:${toString config.services.prometheus.exporters.postgres.port}"
             ];
           }
         ];
@@ -393,6 +401,7 @@ in
   ragon = {
     agenix.secrets."desec" = { };
     agenix.secrets."ds9DynDns" = { };
+    agenix.secrets."ds9PostgresExporterEnv" = { };
     user.enable = true;
     persist.enable = true;
     persist.extraDirectories = [