manatee: Add services homepage with auto-discovery

Add a homepage module that generates a static landing page served on
port 80 via nginx. Each service module registers itself via the shared
mod.homepage.services option, so enabling a module automatically adds
it to the page.

flake.lock

@@ -573,27 +573,6 @@
         "type": "github"
       }
     },
-    "komga-bookmanager": {
-      "inputs": {
-        "nixpkgs": [
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1772572455,
-        "narHash": "sha256-B4KOdV2GQogU1XL9903qFkOFf/6H7UGa+dprNGctgMY=",
-        "ref": "main",
-        "rev": "002732d4ebc5b80c2b8522896427c9f6bee9e1d1",
-        "revCount": 6,
-        "type": "git",
-        "url": "ssh://gitea@git.ppp.pm:1122/alex/komga-bookmanager.git"
-      },
-      "original": {
-        "ref": "main",
-        "type": "git",
-        "url": "ssh://gitea@git.ppp.pm:1122/alex/komga-bookmanager.git"
-      }
-    },
     "komga-comictracker": {
       "inputs": {
         "nixpkgs": [
@@ -601,11 +580,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1772884418,
+        "lastModified": 1771079752,
-        "narHash": "sha256-2V/JnGsIhvQoAiH7iIQkOPX5OTZVwGTOEv+nFetd4I8=",
+        "narHash": "sha256-4Pw8MhQUVWcTH3fg31sP19k+qgHDxqSKtSoDU/CYf/Y=",
         "ref": "main",
-        "rev": "0b91385e8906ca40cc89381bf8394ed24a116c6b",
+        "rev": "2b5cc59e3d4dba439a9a5f0d1fc2c30d9bdf45e1",
-        "revCount": 49,
+        "revCount": 32,
         "type": "git",
         "url": "ssh://gitea@git.ppp.pm:1122/alex/komga-comictracker.git"
       },
@@ -807,7 +786,6 @@
         "home-manager": "home-manager_2",
         "hyprland": "hyprland",
         "hyprland-contrib": "hyprland-contrib",
-        "komga-bookmanager": "komga-bookmanager",
         "komga-comictracker": "komga-comictracker",
         "naviterm": "naviterm",
         "nh": "nh",

flake.nix

@@ -74,12 +74,6 @@
       # url = "path:/home/alex/code/own/komga-comictracker";
       inputs.nixpkgs.follows = "nixpkgs";
     };
-
-    komga-bookmanager = {
-      url = "git+ssh://gitea@git.ppp.pm:1122/alex/komga-bookmanager.git?ref=main";
-      # url = "path:/home/alex/code/own/komga-comictracker";
-      inputs.nixpkgs.follows = "nixpkgs";
-    };
   };
 
   outputs =

hosts/manatee/modules/audiobookshelf/default.nix

@@ -10,13 +10,11 @@ in
   };
 
   config = lib.mkIf enabled {
-    mod.homepage.services = [
+    mod.homepage.services = [{
-      {
       name = "Audiobookshelf";
       port = 8000;
       description = "Audiobooks & podcasts";
-      }
+    }];
-    ];
 
     users.users.audiobookshelf = {
       isSystemUser = true;

hosts/manatee/modules/calibre-web/default.nix

@@ -0,0 +1,40 @@
+{ lib, config, ... }:
+let
+  enabled = config.mod.calibre-web.enable;
+in
+{
+  options = {
+    mod.calibre-web = {
+      enable = lib.mkEnableOption "add calibre-web module";
+    };
+  };
+
+  config = lib.mkIf enabled {
+    mod.homepage.services = [{
+      name = "Calibre-Web";
+      port = 8083;
+      description = "E-book library";
+    }];
+
+    services = {
+      calibre-web = {
+        enable = true;
+
+        user = "storage";
+        group = "storage";
+
+        listen = {
+          ip = "0.0.0.0";
+          port = 8083;
+        };
+
+        dataDir = "/mnt/media/public/books";
+
+        options = {
+          calibreLibrary = "/mnt/media/public/books";
+          enableBookUploading = true;
+        };
+      };
+    };
+  };
+}

hosts/manatee/modules/certs/default.nix

@@ -20,19 +20,6 @@
           "--http-timeout=60"
         ];
       };
-
-      "komga.ppp.pm" = {
-        dnsProvider = "hetzner";
-        environmentFile = config.age.secrets.hetzner-dns.path;
-        group = "nginx";
-
-        extraLegoFlags = [
-          "--dns.resolvers=1.1.1.1:53,8.8.8.8:53"
-          "--dns.propagation-wait=60s"
-          "--dns-timeout=60"
-          "--http-timeout=60"
-        ];
-      };
     };
   };
 

hosts/manatee/modules/default.nix

@@ -16,6 +16,7 @@ in
       nginx.enable = true;
       syncthing.enable = true;
       transmission.enable = true;
+      calibre-web.enable = true;
       audiobookshelf.enable = true;
       jellyfin.enable = true;
       immich.enable = true;

hosts/manatee/modules/home-assistant/default.nix

@@ -62,14 +62,6 @@ let
   '';
 in
 {
-  mod.homepage.services = [
-    {
-      name = "Home Assistant";
-      port = 8123;
-      description = "Home automation";
-    }
-  ];
-
   hardware.bluetooth.enable = true;
 
   virtualisation.oci-containers = {
@@ -162,13 +154,13 @@ in
 
     user = {
       timers = {
-        "update-hetzner-dns" = {
+        "update-hetzner-ha-dns" = {
           unitConfig = {
-            Description = "updates Hetzner DNS records";
+            Description = "updates Hetzner DNS for home-assistant";
           };
 
           timerConfig = {
-            Unit = "update-hetzner-dns.service";
+            Unit = "update-hetzner-ha-dns.service";
             OnCalendar = "*-*-* *:00/30:00";
             Persistent = true;
           };
@@ -178,9 +170,9 @@ in
       };
 
       services = {
-        "update-hetzner-dns" = {
+        "update-hetzner-ha-dns" = {
           unitConfig = {
-            Description = "updates Hetzner DNS records";
+            Description = "updates Hetzner DNS for home-assistant";
           };
 
           serviceConfig = {
@@ -190,28 +182,26 @@ in
 
           path = [
             pkgs.curl
-            pkgs.coreutils
+            pkgs.coreutils # For `cat`
             pkgs.jq
           ];
 
           script = ''
-            SUBDOMAINS="ha komga"
+            LAST_IP_FILE="/tmp/hetzner-dns-ha-ip"
             INTERFACE="enp3s0"
 
             CURRENT_IP=$(curl -s --fail --interface "$INTERFACE" ifconfig.me)
 
-            for SUBDOMAIN in $SUBDOMAINS; do
-              LAST_IP_FILE="/tmp/hetzner-dns-''${SUBDOMAIN}-ip"
-
             LAST_IP=""
             if [[ -f "$LAST_IP_FILE" ]]; then
                 LAST_IP=$(cat "$LAST_IP_FILE")
             fi
 
             if [[ "$CURRENT_IP" == "$LAST_IP" ]]; then
-                  echo "$SUBDOMAIN: IP unchanged, NOOP update."
+                echo "IP unchanged, NOOP update."
+                exit 0
             else
-                  echo "$SUBDOMAIN: Updating IP"
+                echo "Updating IP"
 
                 JSON_BODY=$(jq -n --arg ip "$CURRENT_IP" '{records: [{value: $ip}]}')
 
@@ -221,10 +211,9 @@ in
                   -H "Authorization: Bearer $HETZNER_API_TOKEN" \
                   -H "Content-Type: application/json" \
                   -d "$JSON_BODY" \
-                    "https://api.hetzner.cloud/v1/zones/ppp.pm/rrsets/''${SUBDOMAIN}/A/actions/set_records" \
+                  "https://api.hetzner.cloud/v1/zones/ppp.pm/rrsets/ha/A/actions/set_records" \
                   && echo $CURRENT_IP > $LAST_IP_FILE
             fi
-            done
           '';
         };
       };

hosts/manatee/modules/homepage/default.nix

@@ -77,15 +77,13 @@ in
     mod.homepage = {
       enable = lib.mkEnableOption "Enable homepage module";
       services = lib.mkOption {
-        type = lib.types.listOf (
+        type = lib.types.listOf (lib.types.submodule {
-          lib.types.submodule {
           options = {
             name = lib.mkOption { type = lib.types.str; };
             port = lib.mkOption { type = lib.types.port; };
             description = lib.mkOption { type = lib.types.str; };
           };
-          }
+        });
-        );
         default = [ ];
         description = "Services to display on the homepage";
       };
@@ -97,7 +95,7 @@ in
       listen = [
         {
           addr = "0.0.0.0";
-          port = 9999;
+          port = 80;
         }
       ];
       root = page;
@@ -106,6 +104,6 @@ in
       };
     };
 
-    networking.firewall.allowedTCPPorts = [ 9999 ];
+    networking.firewall.allowedTCPPorts = [ 80 ];
   };
 }

hosts/manatee/modules/immich/default.nix

@@ -10,13 +10,11 @@ in
   };
 
   config = lib.mkIf enabled {
-    mod.homepage.services = [
+    mod.homepage.services = [{
-      {
       name = "Immich";
       port = 2283;
       description = "Photo library";
-      }
+    }];
-    ];
 
     users.users.immich = {
       isSystemUser = true;

hosts/manatee/modules/jellyfin/default.nix

@@ -47,13 +47,11 @@ in
       };
     };
 
-    mod.homepage.services = [
+    mod.homepage.services = [{
-      {
       name = "Jellyfin";
       port = 8096;
       description = "Media streaming";
-      }
+    }];
-    ];
 
     networking = {
       firewall.allowedTCPPorts = [ 8096 ];

hosts/manatee/modules/komga/default.nix

@@ -16,10 +16,7 @@ in
     };
   };
 
-  imports = [
+  imports = [ inputs.komga-comictracker.nixosModules.default ];
-    inputs.komga-comictracker.nixosModules.default
-    inputs.komga-bookmanager.nixosModules.default
-  ];
 
   config = lib.mkIf enabled {
     mod.homepage.services = [
@@ -33,11 +30,6 @@ in
         port = 8888;
         description = "Comic reader";
       }
-      {
-        name = "Komga Book Manager";
-        port = 8686;
-        description = "Book manager";
-      }
     ];
 
     users.users.komga = {
@@ -55,7 +47,6 @@ in
         server.port = 8002;
         komga."cors.allowed-origins" = [
           "http://manatee:8888"
-          "https://komga.ppp.pm"
         ];
       };
 
@@ -77,49 +68,22 @@ in
           tryFiles = "$uri $uri/ /komga-reader.html";
         };
       };
-
-      virtualHosts."komga.ppp.pm" = {
-        forceSSL = true;
-        useACMEHost = "komga.ppp.pm";
-
-        locations."/" = {
-          proxyPass = "http://127.0.0.1:8002";
-          proxyWebsockets = true;
-        };
-      };
     };
 
     networking.firewall.allowedTCPPorts = [ 8888 ];
 
     programs.comictracker = {
       enable = true;
-      komgaUrl = "http://127.0.0.1:8002";
+      komgaUrl = "http://manatee:8002";
-      komgaLibraryId = "0NVZH5AK3RPE1";
       secretsFile = config.age.secrets.komga-comicbooktracker-credentials.path;
     };
 
-    services.komga-book-manager = {
-      enable = true;
-      port = 8686;
-      group = "storage";
-      komgaUrl = "http://127.0.0.1:8002";
-      credentialsFile = config.age.secrets.komga-bookmanager-credentials.path;
-      libraryRoot = "/mnt/media/public/books";
-      libraryId = "0PNE1NEPY6995";
-    };
-
     age.secrets = {
       "komga-comicbooktracker-credentials" = {
         file = ../../../../secrets/manatee/komga-comicbooktracker-credentials.age;
         owner = "alex";
         group = "users";
       };
-
-      "komga-bookmanager-credentials" = {
-        file = ../../../../secrets/manatee/komga-bookmanager-credentials.age;
-        owner = "alex";
-        group = "users";
-      };
     };
   };
 }

hosts/manatee/modules/navidrome/default.nix

@@ -15,13 +15,11 @@ in
   };
 
   config = {
-    mod.homepage.services = lib.mkIf navidromeEnabled [
+    mod.homepage.services = lib.mkIf navidromeEnabled [{
-      {
       name = "Navidrome";
       port = 4533;
       description = "Music streaming";
-      }
+    }];
-    ];
 
     services = lib.mkIf navidromeEnabled {
       navidrome = {

hosts/manatee/modules/syncthing/default.nix

@@ -10,13 +10,11 @@ in
   };
 
   config = lib.mkIf enabled {
-    mod.homepage.services = [
+    mod.homepage.services = [{
-      {
       name = "Syncthing";
       port = 8384;
       description = "File sync";
-      }
+    }];
-    ];
 
     services.syncthing = {
       enable = true;

hosts/manatee/modules/transmission/default.nix

@@ -15,13 +15,11 @@ in
   };
 
   config = lib.mkIf enabled {
-    mod.homepage.services = [
+    mod.homepage.services = [{
-      {
       name = "Transmission";
       port = 9091;
       description = "Torrent client";
-      }
+    }];
-    ];
 
     services = {
       transmission = {

secrets/manatee/komga-bookmanager-credentials.age

@@ -1,7 +0,0 @@
-age-encryption.org/v1
--> ssh-ed25519 wkRvNA GW8mvnaXpspxr78xV0fKhXwHVvReyjvDc0v7uPwhuBI
-Rne8JZYVhrTTesSFpRQ/IOZlFIMoX9Wmv5n1Ed7Ehv8
--> ssh-ed25519 +oNaHQ d7utzodGQ7LsD2Uht1rbT8Qq9BZp3PkJS9EDhajCjnk
-qd2Vj+1TQrjEKkSVAf0cXcCdkgeN/Jbp4UrBSp3cKYQ
---- JQr5UQlutONqnTeoT/mIVZL8ME7ipUDK8zDfNcN3uhU
-ø5-VŸÌ²ÂòÀ-®ªÁÅ'^žô5kú.t(d1‡)É'<u%

secrets/secrets.nix

@@ -34,7 +34,6 @@ in {
   "manatee/syncthing-key.age".publicKeys = [ manatee alex ];
   "manatee/hetzner-dns.age".publicKeys = [ manatee alex ];
   "manatee/komga-comicbooktracker-credentials.age".publicKeys = [ manatee alex];
-  "manatee/komga-bookmanager-credentials.age".publicKeys = [ manatee alex];
 
   "backwards/root.backwards.age".publicKeys = [ backwards alex ];
   "backwards/root.backwards.pub.age".publicKeys = [ backwards alex ];