Added chatbot-ui container

hosts/common/packages.nix

@@ -4,6 +4,7 @@
   nixpkgs.config.allowUnfree = true;
 
   environment.systemPackages = with pkgs; [
+    agenix
     bind
     btop
     comma

hosts/desktops/common/services.nix

@@ -8,6 +8,7 @@ let
 in {
   services = {
     printing.enable = true;
+    flatpak.enable = true;
     pipewire = {
       enable = true;
       alsa.enable = true;
@@ -38,4 +39,8 @@ in {
       };
     };
   };
+  xdg.portal = {
+    enable = true;
+    xdgOpenUsePortal = true;
+  };
 }

hosts/servers/alexandria/chatbot-ui.nix

@@ -0,0 +1,23 @@
+{ inputs, config, pkgs, lib, ... }:
+
+{
+  virtualisation.oci-containers.containers."chatbot-ui" = {
+    image = "ghcr.io/mckaywrigley/chatbot-ui:main";
+    ports = [ "${config.ports.chatbot-ui}:5006" ];
+    environmentFiles = [ config.age.secrets.chatbot-ui-keys.path ];
+    extraOptions = [ "--pull=always" ];
+  };
+
+  services.nginx.virtualHosts."chat.baduhai.me" = {
+    useACMEHost = "baduhai.me";
+    forceSSL = true;
+    kTLS = true;
+    locations."/".proxyPass = "http://127.0.0.1:${config.ports.chatbot-ui}";
+  };
+
+  age.secrets.chatbot-ui-keys = {
+    file = ../../../secrets/chatbot-ui-keys.age;
+    owner = "root";
+    group = "root";
+  };
+}

hosts/servers/alexandria/variables.nix

@@ -22,6 +22,7 @@ in {
     whoogle = mkStringOption "8007";
     qbittorrent = mkStringOption "8008";
     actual = mkStringOption "8009";
+    chatbot-ui = mkStringOption "8010";
     jellyfin = mkStringOption "8096";
     sonarr = mkStringOption "8989";
     jackett = mkStringOption "9117";

secrets/secrets.nix

@@ -13,4 +13,5 @@ let
 in {
   "cloudflare-creds.age".publicKeys = all-hosts;
   "paperless-pass.age".publicKeys = all-hosts;
+  "chatbot-ui-keys.age".publicKeys = all-hosts;
 }