manatee: Remove calibre-web module

manatee: nixfmt
manatee: Add komga-bookmanager service
2026-03-07 12:10:30 +00:00 · 2026-03-07 12:08:01 +00:00 · 2026-03-07 12:07:05 +00:00 · 2026-03-07 12:05:41 +00:00 · 2026-03-07 12:05:07 +00:00 · 2026-03-02 21:41:41 +01:00
18 changed files with 309 additions and 67 deletions
--- a/flake.lock
+++ b/flake.lock
@@ -573,6 +573,27 @@
        "type": "github"
      }
    },
+    "komga-bookmanager": {
+      "inputs": {
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1772572455,
+        "narHash": "sha256-B4KOdV2GQogU1XL9903qFkOFf/6H7UGa+dprNGctgMY=",
+        "ref": "main",
+        "rev": "002732d4ebc5b80c2b8522896427c9f6bee9e1d1",
+        "revCount": 6,
+        "type": "git",
+        "url": "ssh://gitea@git.ppp.pm:1122/alex/komga-bookmanager.git"
+      },
+      "original": {
+        "ref": "main",
+        "type": "git",
+        "url": "ssh://gitea@git.ppp.pm:1122/alex/komga-bookmanager.git"
+      }
+    },
    "komga-comictracker": {
      "inputs": {
        "nixpkgs": [
@@ -580,11 +601,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1771079752,
-        "narHash": "sha256-4Pw8MhQUVWcTH3fg31sP19k+qgHDxqSKtSoDU/CYf/Y=",
+        "lastModified": 1772884418,
+        "narHash": "sha256-2V/JnGsIhvQoAiH7iIQkOPX5OTZVwGTOEv+nFetd4I8=",
        "ref": "main",
-        "rev": "2b5cc59e3d4dba439a9a5f0d1fc2c30d9bdf45e1",
-        "revCount": 32,
+        "rev": "0b91385e8906ca40cc89381bf8394ed24a116c6b",
+        "revCount": 49,
        "type": "git",
        "url": "ssh://gitea@git.ppp.pm:1122/alex/komga-comictracker.git"
      },
@@ -786,6 +807,7 @@
        "home-manager": "home-manager_2",
        "hyprland": "hyprland",
        "hyprland-contrib": "hyprland-contrib",
+        "komga-bookmanager": "komga-bookmanager",
        "komga-comictracker": "komga-comictracker",
        "naviterm": "naviterm",
        "nh": "nh",
--- a/flake.nix
+++ b/flake.nix
@@ -74,6 +74,12 @@
      # url = "path:/home/alex/code/own/komga-comictracker";
      inputs.nixpkgs.follows = "nixpkgs";
    };
+
+    komga-bookmanager = {
+      url = "git+ssh://gitea@git.ppp.pm:1122/alex/komga-bookmanager.git?ref=main";
+      # url = "path:/home/alex/code/own/komga-comictracker";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
  };

  outputs =
--- a/hosts/backwards/configuration.nix
+++ b/hosts/backwards/configuration.nix
@@ -22,6 +22,13 @@
    alsa.enable = true;
    alsa.support32Bit = true;
    pulse.enable = true;
+
+    extraConfig.pipewire."90-hdmi-fix" = {
+      "context.properties" = {
+        "default.clock.rate" = 48000;
+        "default.clock.allowed-rates" = [ 48000 ];
+      };
+    };
  };

  hardware = {
--- a/hosts/backwards/modules/boot/default.nix
+++ b/hosts/backwards/modules/boot/default.nix
@@ -41,6 +41,7 @@ in

      extraModprobeConfig = ''
        options snd-intel-dspcfg dsp_driver=1
+        options snd_hda_intel power_save=0 power_save_controller=N
      '';
    };
  };
--- a/hosts/manatee/modules/audiobookshelf/default.nix
+++ b/hosts/manatee/modules/audiobookshelf/default.nix
@@ -10,6 +10,14 @@ in
  };

  config = lib.mkIf enabled {
+    mod.homepage.services = [
+      {
+        name = "Audiobookshelf";
+        port = 8000;
+        description = "Audiobooks & podcasts";
+      }
+    ];
+
    users.users.audiobookshelf = {
      isSystemUser = true;
      description = "audiobookshelf";
--- a/hosts/manatee/modules/calibre-web/default.nix
+++ b/hosts/manatee/modules/calibre-web/default.nix
@@ -1,34 +0,0 @@
-{ lib, config, ... }:
-let
-  enabled = config.mod.calibre-web.enable;
-in
-{
-  options = {
-    mod.calibre-web = {
-      enable = lib.mkEnableOption "add calibre-web module";
-    };
-  };
-
-  config = lib.mkIf enabled {
-    services = {
-      calibre-web = {
-        enable = true;
-
-        user = "storage";
-        group = "storage";
-
-        listen = {
-          ip = "0.0.0.0";
-          port = 8083;
-        };
-
-        dataDir = "/mnt/media/public/books";
-
-        options = {
-          calibreLibrary = "/mnt/media/public/books";
-          enableBookUploading = true;
-        };
-      };
-    };
-  };
-}
--- a/hosts/manatee/modules/certs/default.nix
+++ b/hosts/manatee/modules/certs/default.nix
@@ -20,6 +20,19 @@
          "--http-timeout=60"
        ];
      };
+
+      "komga.ppp.pm" = {
+        dnsProvider = "hetzner";
+        environmentFile = config.age.secrets.hetzner-dns.path;
+        group = "nginx";
+
+        extraLegoFlags = [
+          "--dns.resolvers=1.1.1.1:53,8.8.8.8:53"
+          "--dns.propagation-wait=60s"
+          "--dns-timeout=60"
+          "--http-timeout=60"
+        ];
+      };
    };
  };

--- a/hosts/manatee/modules/default.nix
+++ b/hosts/manatee/modules/default.nix
@@ -16,12 +16,12 @@ in
      nginx.enable = true;
      syncthing.enable = true;
      transmission.enable = true;
-      calibre-web.enable = true;
      audiobookshelf.enable = true;
      jellyfin.enable = true;
      immich.enable = true;
      navidrome.enable = true;
      komga.enable = true;
+      homepage.enable = true;
    };
  };
 }
--- a/hosts/manatee/modules/home-assistant/default.nix
+++ b/hosts/manatee/modules/home-assistant/default.nix
@@ -62,6 +62,14 @@ let
  '';
 in
 {
+  mod.homepage.services = [
+    {
+      name = "Home Assistant";
+      port = 8123;
+      description = "Home automation";
+    }
+  ];
+
  hardware.bluetooth.enable = true;

  virtualisation.oci-containers = {
@@ -154,13 +162,13 @@ in

    user = {
      timers = {
-        "update-hetzner-ha-dns" = {
+        "update-hetzner-dns" = {
          unitConfig = {
-            Description = "updates Hetzner DNS for home-assistant";
+            Description = "updates Hetzner DNS records";
          };

          timerConfig = {
-            Unit = "update-hetzner-ha-dns.service";
+            Unit = "update-hetzner-dns.service";
            OnCalendar = "*-*-* *:00/30:00";
            Persistent = true;
          };
@@ -170,9 +178,9 @@ in
      };

      services = {
-        "update-hetzner-ha-dns" = {
+        "update-hetzner-dns" = {
          unitConfig = {
-            Description = "updates Hetzner DNS for home-assistant";
+            Description = "updates Hetzner DNS records";
          };

          serviceConfig = {
@@ -182,38 +190,41 @@ in

          path = [
            pkgs.curl
-            pkgs.coreutils # For `cat`
+            pkgs.coreutils
            pkgs.jq
          ];

          script = ''
-            LAST_IP_FILE="/tmp/hetzner-dns-ha-ip"
+            SUBDOMAINS="ha komga"
            INTERFACE="enp3s0"

            CURRENT_IP=$(curl -s --fail --interface "$INTERFACE" ifconfig.me)

-            LAST_IP=""
-            if [[ -f "$LAST_IP_FILE" ]]; then
-                LAST_IP=$(cat "$LAST_IP_FILE")
-            fi
+            for SUBDOMAIN in $SUBDOMAINS; do
+              LAST_IP_FILE="/tmp/hetzner-dns-''${SUBDOMAIN}-ip"

-            if [[ "$CURRENT_IP" == "$LAST_IP" ]]; then
-                echo "IP unchanged, NOOP update."
-                exit 0
-            else
-                echo "Updating IP"
+              LAST_IP=""
+              if [[ -f "$LAST_IP_FILE" ]]; then
+                  LAST_IP=$(cat "$LAST_IP_FILE")
+              fi

-                JSON_BODY=$(jq -n --arg ip "$CURRENT_IP" '{records: [{value: $ip}]}')
+              if [[ "$CURRENT_IP" == "$LAST_IP" ]]; then
+                  echo "$SUBDOMAIN: IP unchanged, NOOP update."
+              else
+                  echo "$SUBDOMAIN: Updating IP"

-                curl \
-                  --fail \
-                	-X POST \
-                  -H "Authorization: Bearer $HETZNER_API_TOKEN" \
-                  -H "Content-Type: application/json" \
-                  -d "$JSON_BODY" \
-                  "https://api.hetzner.cloud/v1/zones/ppp.pm/rrsets/ha/A/actions/set_records" \
-                  && echo $CURRENT_IP > $LAST_IP_FILE
-            fi
+                  JSON_BODY=$(jq -n --arg ip "$CURRENT_IP" '{records: [{value: $ip}]}')
+
+                  curl \
+                    --fail \
+                  	-X POST \
+                    -H "Authorization: Bearer $HETZNER_API_TOKEN" \
+                    -H "Content-Type: application/json" \
+                    -d "$JSON_BODY" \
+                    "https://api.hetzner.cloud/v1/zones/ppp.pm/rrsets/''${SUBDOMAIN}/A/actions/set_records" \
+                    && echo $CURRENT_IP > $LAST_IP_FILE
+              fi
+            done
          '';
        };
      };
--- a/hosts/manatee/modules/homepage/default.nix
+++ b/hosts/manatee/modules/homepage/default.nix
@@ -0,0 +1,111 @@
+{
+  pkgs,
+  lib,
+  config,
+  ...
+}:
+let
+  enabled = config.mod.homepage.enable;
+  nginxEnabled = config.mod.nginx.enable;
+  services = config.mod.homepage.services;
+
+  serviceToCard = svc: ''
+    <a class="card" href="http://manatee:${toString svc.port}">
+      <div class="name">${svc.name}</div>
+      <div class="desc">${svc.description}</div>
+      <div class="port">:${toString svc.port}</div>
+    </a>
+  '';
+
+  page = pkgs.writeTextDir "index.html" ''
+    <!DOCTYPE html>
+    <html lang="en">
+    <head>
+      <meta charset="UTF-8">
+      <meta name="viewport" content="width=device-width, initial-scale=1.0">
+      <title>manatee</title>
+      <style>
+        * { margin: 0; padding: 0; box-sizing: border-box; }
+        body {
+          font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif;
+          background: #1a1b26;
+          color: #c0caf5;
+          min-height: 100vh;
+          padding: 3rem 1.5rem;
+        }
+        h1 {
+          text-align: center;
+          font-size: 1.5rem;
+          font-weight: 400;
+          color: #7aa2f7;
+          margin-bottom: 2rem;
+        }
+        .grid {
+          display: grid;
+          grid-template-columns: repeat(auto-fill, minmax(200px, 1fr));
+          gap: 1rem;
+          max-width: 900px;
+          margin: 0 auto;
+        }
+        .card {
+          display: block;
+          background: #24283b;
+          border: 1px solid #414868;
+          border-radius: 8px;
+          padding: 1.25rem;
+          text-decoration: none;
+          color: inherit;
+          transition: border-color 0.15s;
+        }
+        .card:hover { border-color: #7aa2f7; }
+        .name { font-size: 1.1rem; font-weight: 600; color: #c0caf5; }
+        .desc { font-size: 0.85rem; color: #565f89; margin-top: 0.35rem; }
+        .port { font-size: 0.8rem; color: #414868; margin-top: 0.5rem; font-family: monospace; }
+      </style>
+    </head>
+    <body>
+      <h1>manatee</h1>
+      <div class="grid">
+        ${lib.concatMapStrings serviceToCard services}
+      </div>
+    </body>
+    </html>
+  '';
+in
+{
+  options = {
+    mod.homepage = {
+      enable = lib.mkEnableOption "Enable homepage module";
+      services = lib.mkOption {
+        type = lib.types.listOf (
+          lib.types.submodule {
+            options = {
+              name = lib.mkOption { type = lib.types.str; };
+              port = lib.mkOption { type = lib.types.port; };
+              description = lib.mkOption { type = lib.types.str; };
+            };
+          }
+        );
+        default = [ ];
+        description = "Services to display on the homepage";
+      };
+    };
+  };
+
+  config = lib.mkIf (enabled && nginxEnabled) {
+    services.nginx.virtualHosts."homepage" = {
+      listen = [
+        {
+          addr = "0.0.0.0";
+          port = 9999;
+        }
+      ];
+      root = page;
+      locations."/" = {
+        index = "index.html";
+      };
+    };
+
+    networking.firewall.allowedTCPPorts = [ 9999 ];
+  };
+}
--- a/hosts/manatee/modules/immich/default.nix
+++ b/hosts/manatee/modules/immich/default.nix
@@ -10,6 +10,14 @@ in
  };

  config = lib.mkIf enabled {
+    mod.homepage.services = [
+      {
+        name = "Immich";
+        port = 2283;
+        description = "Photo library";
+      }
+    ];
+
    users.users.immich = {
      isSystemUser = true;
      group = "storage";
--- a/hosts/manatee/modules/jellyfin/default.nix
+++ b/hosts/manatee/modules/jellyfin/default.nix
@@ -47,6 +47,14 @@ in
      };
    };

+    mod.homepage.services = [
+      {
+        name = "Jellyfin";
+        port = 8096;
+        description = "Media streaming";
+      }
+    ];
+
    networking = {
      firewall.allowedTCPPorts = [ 8096 ];
    };
--- a/hosts/manatee/modules/komga/default.nix
+++ b/hosts/manatee/modules/komga/default.nix
@@ -16,9 +16,30 @@ in
    };
  };

-  imports = [ inputs.komga-comictracker.nixosModules.default ];
+  imports = [
+    inputs.komga-comictracker.nixosModules.default
+    inputs.komga-bookmanager.nixosModules.default
+  ];

  config = lib.mkIf enabled {
+    mod.homepage.services = [
+      {
+        name = "Komga";
+        port = 8002;
+        description = "Comic library";
+      }
+      {
+        name = "Komga Reader";
+        port = 8888;
+        description = "Comic reader";
+      }
+      {
+        name = "Komga Book Manager";
+        port = 8686;
+        description = "Book manager";
+      }
+    ];
+
    users.users.komga = {
      isSystemUser = true;
      group = "storage";
@@ -34,6 +55,7 @@ in
        server.port = 8002;
        komga."cors.allowed-origins" = [
          "http://manatee:8888"
+          "https://komga.ppp.pm"
        ];
      };

@@ -55,22 +77,49 @@ in
          tryFiles = "$uri $uri/ /komga-reader.html";
        };
      };
+
+      virtualHosts."komga.ppp.pm" = {
+        forceSSL = true;
+        useACMEHost = "komga.ppp.pm";
+
+        locations."/" = {
+          proxyPass = "http://127.0.0.1:8002";
+          proxyWebsockets = true;
+        };
+      };
    };

    networking.firewall.allowedTCPPorts = [ 8888 ];

    programs.comictracker = {
      enable = true;
-      komgaUrl = "http://manatee:8002";
+      komgaUrl = "http://127.0.0.1:8002";
+      komgaLibraryId = "0NVZH5AK3RPE1";
      secretsFile = config.age.secrets.komga-comicbooktracker-credentials.path;
    };

+    services.komga-book-manager = {
+      enable = true;
+      port = 8686;
+      group = "storage";
+      komgaUrl = "http://127.0.0.1:8002";
+      credentialsFile = config.age.secrets.komga-bookmanager-credentials.path;
+      libraryRoot = "/mnt/media/public/books";
+      libraryId = "0PNE1NEPY6995";
+    };
+
    age.secrets = {
      "komga-comicbooktracker-credentials" = {
        file = ../../../../secrets/manatee/komga-comicbooktracker-credentials.age;
        owner = "alex";
        group = "users";
      };
+
+      "komga-bookmanager-credentials" = {
+        file = ../../../../secrets/manatee/komga-bookmanager-credentials.age;
+        owner = "alex";
+        group = "users";
+      };
    };
  };
 }
--- a/hosts/manatee/modules/navidrome/default.nix
+++ b/hosts/manatee/modules/navidrome/default.nix
@@ -15,6 +15,14 @@ in
  };

  config = {
+    mod.homepage.services = lib.mkIf navidromeEnabled [
+      {
+        name = "Navidrome";
+        port = 4533;
+        description = "Music streaming";
+      }
+    ];
+
    services = lib.mkIf navidromeEnabled {
      navidrome = {
        enable = true;
--- a/hosts/manatee/modules/syncthing/default.nix
+++ b/hosts/manatee/modules/syncthing/default.nix
@@ -10,6 +10,14 @@ in
  };

  config = lib.mkIf enabled {
+    mod.homepage.services = [
+      {
+        name = "Syncthing";
+        port = 8384;
+        description = "File sync";
+      }
+    ];
+
    services.syncthing = {
      enable = true;

--- a/hosts/manatee/modules/transmission/default.nix
+++ b/hosts/manatee/modules/transmission/default.nix
@@ -15,6 +15,14 @@ in
  };

  config = lib.mkIf enabled {
+    mod.homepage.services = [
+      {
+        name = "Transmission";
+        port = 9091;
+        description = "Torrent client";
+      }
+    ];
+
    services = {
      transmission = {
        enable = true;
--- a/secrets/manatee/komga-bookmanager-credentials.age
+++ b/secrets/manatee/komga-bookmanager-credentials.age
@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 wkRvNA GW8mvnaXpspxr78xV0fKhXwHVvReyjvDc0v7uPwhuBI
+Rne8JZYVhrTTesSFpRQ/IOZlFIMoX9Wmv5n1Ed7Ehv8
+-> ssh-ed25519 +oNaHQ d7utzodGQ7LsD2Uht1rbT8Qq9BZp3PkJS9EDhajCjnk
+qd2Vj+1TQrjEKkSVAf0cXcCdkgeN/Jbp4UrBSp3cKYQ
+--- JQr5UQlutONqnTeoT/mIVZL8ME7ipUDK8zDfNcN3uhU
+ø5-VŸÌ²ÂòÀ-®ªÁÅ'^žô5kú.t(d1‡)É'<u%
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -34,6 +34,7 @@ in {
  "manatee/syncthing-key.age".publicKeys = [ manatee alex ];
  "manatee/hetzner-dns.age".publicKeys = [ manatee alex ];
  "manatee/komga-comicbooktracker-credentials.age".publicKeys = [ manatee alex];
+  "manatee/komga-bookmanager-credentials.age".publicKeys = [ manatee alex];

  "backwards/root.backwards.age".publicKeys = [ backwards alex ];
  "backwards/root.backwards.pub.age".publicKeys = [ backwards alex ];
Author	SHA1	Message	Date
Alexander Heldt	7d6785f27e	manatee: Remove `calibre-web` module	2026-03-07 12:10:30 +00:00
Alexander Heldt	f446706a9c	manatee: nixfmt	2026-03-07 12:08:01 +00:00
Alexander Heldt	6ea5db6d37	manatee: Add `komga-bookmanager` service	2026-03-07 12:07:05 +00:00
Alexander Heldt	e46b5689a2	Add `komga-bookmanager` input	2026-03-07 12:05:41 +00:00
Alexander Heldt	8fa60a1b06	Update `komga-comictracker` input	2026-03-07 12:05:07 +00:00
Alexander Heldt	4f5de3b4cc	manatee: Expose komga publicly via komga.ppp.pm	2026-03-02 21:41:41 +01:00
Alexander Heldt	65569f6b57	manatee: Add services homepage with auto-discovery Add a homepage module that generates a static landing page served on port 9999 via nginx. Each service module registers itself via the shared mod.homepage.services option, so enabling a module automatically adds it to the page.	2026-02-28 22:03:12 +01:00
Alexander Heldt	f2130be7e4	backwards: Continued attempt to fix audio output	2026-02-17 21:35:51 +01:00