💚 fix CI build problems

machines/chungus/configuration.nix

@@ -46,9 +46,10 @@
 
     ./service-atuin.nix
     ./service-forgejo.nix
-    ./service-paperless.nix
     ./service-paperless-backup.nix
     ./service-paperless-healthchecks.nix
+    ./service-paperless-tika.nix
+    ./service-paperless.nix
     ./service-s3.nix
     #./service-taskwarrior.nix
     ./service-vault.nix

machines/chungus/service-paperless-tika.nix

@@ -0,0 +1,36 @@
+{
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+{
+
+  services.paperless = {
+    settings = {
+      PAPERLESS_TIKA_ENABLED = true;
+      PAPERLESS_TIKA_ENDPOINT = "http://127.0.0.1:${toString config.services.tika.port}";
+      PAPERLESS_TIKA_GOTENBERG_ENDPOINT = "http://127.0.0.1:${toString config.services.gotenberg.port}";
+    };
+  };
+
+  services.tika = {
+    enable = true;
+  };
+
+  services.gotenberg = {
+    enable = true;
+    timeout = "300s";
+    port = 3214;
+  };
+
+  systemd.services.gotenberg = {
+    environment.HOME = "/run/gotenberg";
+    serviceConfig = {
+      SystemCallFilter = lib.mkAfter [ "@chown" ]; # TODO remove when fixed (https://github.com/NixOS/nixpkgs/issues/349123)
+      WorkingDirectory = "/run/gotenberg";
+      RuntimeDirectory = "gotenberg";
+    };
+  };
+
+}

machines/chungus/service-paperless.nix

@@ -9,6 +9,15 @@
   services.paperless = {
     enable = true;
     address = "0.0.0.0";
+    package = pkgs.paperless-ngx.overrideAttrs (old: rec {
+      version = "2.13.4";
+      src = pkgs.fetchFromGitHub {
+        owner = "paperless-ngx";
+        repo = "paperless-ngx";
+        rev = "refs/tags/v${version}";
+        hash = "sha256-db8omhyngvenAgfGGpMAhGkgqGug/sv7AL1G+sniM/c=";
+      };
+    });
     settings = {
       PAPERLESS_OCR_LANGUAGE = "deu+eng";
       PAPERLESS_APP_TITLE = "paperless.chungus.private";