bring back attic. this time with garage backend

modules/attic.nix

@@ -0,0 +1,47 @@
+{
+  config,
+  lib,
+  ...
+}:
+let
+  cfg = config.my.attic;
+in
+{
+  options.my.attic = {
+    enable = lib.mkEnableOption "attic";
+  };
+
+  config = lib.mkIf cfg.enable {
+    services.atticd = {
+      enable = true;
+      environmentFile = config.sops.secrets."attic/env".path;
+      settings = {
+        listen = "[::]:8091";
+        api-endpoint = "https://cache.cy7.sh/";
+        allowed-hosts = [ "cache.cy7.sh" ];
+        require-proof-of-possession = false;
+        compression = {
+          type = "zstd";
+          level = 3;
+        };
+        database.url = "postgresql:///atticd?host=/run/postgresql";
+
+        storage = {
+          type = "s3";
+          region = "us-east-1";
+          bucket = "attic";
+          endpoint = "https://s3.cy7.sh";
+        };
+
+        garbage-collection = {
+          default-retention-period = "1 month";
+        };
+      };
+    };
+
+    services.caddy.virtualHosts."cache.cy7.sh".extraConfig = ''
+      import common
+      reverse_proxy localhost:8091
+    '';
+  };
+}

modules/default.nix

@@ -8,5 +8,6 @@
     ./containerization.nix
     ./vaultwarden.nix
     ./searx.nix
+    ./attic.nix
   ];
 }