remove gpu capabilities from browsers

flake.lock

@@ -434,6 +434,24 @@
         "type": "github"
       }
     },
+    "flake-utils_7": {
+      "inputs": {
+        "systems": "systems_2"
+      },
+      "locked": {
+        "lastModified": 1694529238,
+        "narHash": "sha256-zsNZZGTGnMOf9YpHKJqMSsa0dXbfmxeoJ7xHlrt+xmY=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "ff7b65b44d01cf9ba6a71320833626af21126384",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
     "format-all": {
       "flake": false,
       "locked": {
@@ -1042,7 +1060,8 @@
         "retiolum": "retiolum",
         "secrets": "secrets",
         "sops-nix": "sops-nix",
-        "stylix": "stylix"
+        "stylix": "stylix",
+        "taskshell": "taskshell"
       }
     },
     "rotate-text": {
@@ -1167,6 +1186,42 @@
         "type": "github"
       }
     },
+    "systems_2": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "taskshell": {
+      "inputs": {
+        "flake-utils": "flake-utils_7",
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1700120351,
+        "narHash": "sha256-yXT05+0/2P3ld0cG9Zd6Pg32WowIh1l97b4fP72Jl0s=",
+        "owner": "mrvandalo",
+        "repo": "taskshell",
+        "rev": "f4b8a0068e79ca8671f3d4a79e6f3e1ab18f9aa6",
+        "type": "github"
+      },
+      "original": {
+        "owner": "mrvandalo",
+        "repo": "taskshell",
+        "type": "github"
+      }
+    },
     "ts-fold": {
       "flake": false,
       "locked": {

flake.nix

@@ -76,6 +76,10 @@
       #inputs.nixpkgs.follows = "nixpkgs";
       #inputs.home-manager.follows = "home-manager";
     };
+    taskshell = {
+      url = "github:mrvandalo/taskshell";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
   };
 
   outputs =
@@ -104,6 +108,7 @@
     , secrets
     , sops-nix
     , stylix
+    , taskshell
     }:
     let
       system = "x86_64-linux";
@@ -141,6 +146,7 @@
               landingpage = landingpage.packages.${system}.plain;
               trilium-server = nixpkgs-unstable.legacyPackages.${system}.trilium-server;
               kmonad = kmonad.packages.${system}.kmonad;
+              tasksh = taskshell.packages.${system}.tasksh;
             })
             (import ./nixos/pkgs)
           ];

nixos/components/gui/browser.nix

@@ -16,7 +16,7 @@ in
         google = {
           home = "${homeFolder}/google-browser";
           homeBackup = "${backupFolder}/google-browser";
-          gpu = true;
+          gpu = false;
         };
         finance = {
           home = "${homeFolder}/finance-browser";

nixos/components/network/tinc/private.nix

@@ -24,6 +24,9 @@ let
     "sync.robi" = hosts.robi;
     "transmission.robi" = hosts.robi;
     "transmission2.robi" = hosts.robi;
+    "sonarr.robi" = hosts.robi;
+    "radarr.robi" = hosts.robi;
+    "tadarr.robi" = hosts.robi;
     # pepe
     "grafana.pepe" = hosts.pepe;
     "loki.pepe" = hosts.pepe;

nixos/machines/cream/packages.nix

@@ -122,6 +122,7 @@ in
     emoji-picker
 
     gojq
+    pureref
 
     steam-run
 

nixos/machines/robi/configuration.nix

@@ -33,6 +33,7 @@
     ./media-syncthing.nix
     ./media-transmission.nix
     ./media-transmission2.nix
+    ./media-arr.nix
 
     ./social-jitsi.nix
 

nixos/machines/robi/media-arr.nix

@@ -0,0 +1,38 @@
+{ config, ... }:
+{
+  services.sonarr = {
+    enable = true;
+    group = "media";
+    user = "media";
+  };
+
+  services.radarr = {
+    enable = true;
+    group = "media";
+    user = "media";
+  };
+
+  services.nginx.virtualHosts = {
+    "radarr.${config.networking.hostName}.private" = {
+      extraConfig = ''
+        allow ${config.tinc.private.subnet};
+        deny all;
+      '';
+      locations."/" = {
+        proxyPass = "http://localhost:7878";
+        proxyWebsockets = true;
+      };
+    };
+    "sonarr.${config.networking.hostName}.private" = {
+      extraConfig = ''
+        allow ${config.tinc.private.subnet};
+        deny all;
+      '';
+      locations."/" = {
+        proxyPass = "http://localhost:8989";
+        proxyWebsockets = true;
+      };
+    };
+  };
+
+}