try harmonia instead of attic

hosts/chunk/Caddyfile

@@ -63,5 +63,5 @@ element.cything.io {
 
 cache.cything.io {
   import common
-  reverse_proxy localhost:8090
+  reverse_proxy localhost:5000
 }

hosts/chunk/default.nix

@@ -24,7 +24,7 @@
     ./conduwuit.nix
     ./immich.nix
     ./element.nix
-    ./attic.nix
+    ./harmonia.nix
   ];
 
   sops.age.keyFile = "/root/.config/sops/age/keys.txt";
@@ -82,8 +82,8 @@
     "rsyncnet/id_ed25519" = {
       sopsFile = ../../secrets/de3911/chunk.yaml;
     };
-    "attic/env" = {
-      sopsFile = ../../secrets/services/attic.yaml;
+    "harmonia/key" = {
+      sopsFile = ../../secrets/services/harmonia.yaml;
     };
   };
 

hosts/chunk/harmonia.nix

@@ -0,0 +1,9 @@
+{ config, ... }: {
+  services.harmonia = {
+    enable = true;
+    signKeyPaths = [ config.sops.secrets."harmonia/key".path ];
+    settings = {
+      real_nix_store = "/mnt/harmonia";
+    };
+  };
+}

hosts/chunk/postgres.nix

@@ -10,13 +10,6 @@
     enableTCPIP = true;
     ensureDatabases = [
       "hedgedoc"
-      "atticd"
-    ];
-    ensureUsers = [
-      {
-        name = "atticd";
-        ensureDBOwnership = true;
-      }
     ];
   };
   services.postgresqlBackup = {

hosts/chunk/rclone.nix

@@ -22,20 +22,20 @@
     };
   };
 
-  systemd.services.attic-mount = {
+  systemd.services.harmonia-mount = {
     enable = true;
-    description = "Mount the attic data remote";
+    description = "Mount the harmonia data remote";
     requires = [ "network-online.target" ];
     after = [ "network-online.target" ];
-    requiredBy = [ "atticd.service" ];
-    before = [ "atticd.service" ];
+    requiredBy = [ "harmonia.service" ];
+    before = [ "harmonia.service" ];
     serviceConfig = {
       Type = "notify";
-      ExecStartPre = "/usr/bin/env mkdir -p /mnt/attic";
+      ExecStartPre = "/usr/bin/env mkdir -p /mnt/harmonia";
       ExecStart = "${lib.getExe pkgs.rclone} mount --config ${
         config.sops.secrets."rclone/config".path
-      } --cache-dir /var/cache/rclone --transfers=32 --allow-other rsyncnet:attic /mnt/attic ";
-      ExecStop = "${lib.getExe' pkgs.fuse "fusermount"} -u /mnt/photos";
+      } --cache-dir /var/cache/rclone --transfers=32 --allow-other rsyncnet:harmonia /mnt/harmonia ";
+      ExecStop = "${lib.getExe' pkgs.fuse "fusermount"} -u /mnt/harmonia";
     };
   };
   programs.fuse.userAllowOther = true;

hosts/common.nix

@@ -6,8 +6,8 @@
       auto-optimise-store = true;
       flake-registry = "";
       trusted-users = [ "root" "@wheel" ];
-      trusted-public-keys = [ "central:cuiJMi+5BFUGeBPNMNWiKO6dlVTOHbHizFY+t7UW12w=" ];
-      substituters = [ "https://cache.cything.io/central" ];
+      trusted-public-keys = [ "cache.cything.io:4NhyCpZuroY7+JP18m1wkAgJGb6WL0jrtx2Bgrvdtow=" ];
+      substituters = [ "https://cache.cything.io/" ];
     };
     channel.enable = false;
     optimise = {