feat: selfhosted user - add services

Signed-off-by: Reputable2722 <153411261+Reputable2772@users.noreply.github.com>

Author: Reputable2772

Config/cloudflare-domains.age

@@ -0,0 +1,5 @@
+age-encryption.org/v1
+-> ssh-ed25519 CHk3UA W+yzit9qjy1zU2bD0HrLwk7NNl5GLCYPTrOVUfgp1TM
+sMjOBSpoaPJZQGSohKvYocRJRZM3FsxB6YYUhYjNPjQ
+--- dRFs2zZK/i8P2LRGs7xDgIWdIW1uS3fBV1lefI6PvpI
+��11л��������5��R�<���+�Q�~�[��mVA�T�=�\��E���V���r����r��K��}=�ED9�`�0�.�27��!�儀�Z�
�z�v~���=I��`

Config/config.nix

@@ -323,6 +323,45 @@ rec {
       };
     };
     guest = { };
+    selfhosted = rec {
+      home = _home.wickedwizard or "";
+      inherit (system.hp-laptop) secrets;
+      dir.containers = "${home}/Containers";
+      containers = {
+        minecraft = {
+          dir = null;
+          envFiles = null;
+          env = [
+            "EULA=TRUE"
+            "TYPE=FABRIC"
+            "MEMORY=5G"
+            "TZ=Asia/Kolkata"
+            "ONLINE_MODE=FALSE"
+            "ENFORCE_SECURE_PROFILE=FALSE"
+            "VERSION_FROM_MODRINTH_PROJECTS=FALSE"
+            "VERSION=26.1"
+            # fabrictailor,easyauth,ledge have not been released for 26.1
+            "MODRINTH_PROJECTS=fabric-api,fabric-language-kotlin,lithium,ferrite-core"
+            "OPS=wickedwizard3588"
+          ];
+        };
+        ollama = {
+          dir = null;
+          envFiles = null;
+          env = [
+            "GGML_VULKAN=1"
+            "OLLAMA_KEEP_ALIVE=10m"
+            "OLLAMA_IGPU_ENABLE=1"
+            "OLLAMA_LOAD_TIMEOUT=15m"
+          ];
+        };
+        ddns-updater = {
+          dir = null;
+          envFiles = [ "cloudflare-domains" ];
+          env = null;
+        };
+      };
+    };
   };
 
   # All files should be in the same directory as this file.
@@ -357,6 +396,9 @@ rec {
   "wud.age".publicKeys = [ users.wickedwizard.secrets.encryption.key ];
   "n8n.age".publicKeys = [ users.wickedwizard.secrets.encryption.key ];
   "radicale.age".publicKeys = [ users.wickedwizard.secrets.encryption.key ];
+
+  # HP Laptop Container files
+  "cloudflare-domains.age".publicKeys = [ users.selfhosted.secrets.encryption.key ];
 }
 
 /**
@@ -381,4 +423,6 @@ rec {
   wud.age - Contains env variables like WUD_TRIGGER_NTFY_UPDATENOTIF_TOPIC, WUD_AUTH_BASIC_JOHN_USER, WUD_AUTH_BASIC_JOHN_HASH, etc. Refer to https://getwud.github.io/wud/#/configuration/ for more info.
   n8n.age - Contains env variables like N8N_HOST, WEBHOOK_URL, N8N_RUNNERS_AUTH_TOKEN
   radicale.age - Contains the apache htpasswd file, for user authentication. Should be mounted as a file into the container, not environment variables.
+
+  cloudflare-domains.age - Contains CLOUDFLARE_API_TOKEN, IP6_DOMAINS and PROXIED for cloudflare-ddns updater.
 */

System/HP-Laptop/users.nix

@@ -59,7 +59,7 @@
     users = {
       selfhosted = {
         imports = [
-          # ../../Users/Selfhosted/home.nix
+          ../../Users/Selfhosted/home.nix
           {
             home.stateVersion = "26.05";
             _module.args.config' = config'.users.selfhosted;

Users/Selfhosted/home.nix

@@ -0,0 +1,50 @@
+{
+  programs.home-manager.enable = true;
+
+  programs.quadlets.quadlets = {
+    enable = true;
+    "minecraft.container" = {
+      Container = {
+        ContainerName = "minecraft";
+        Image = "docker.io/itzg/minecraft-server";
+        PublishPort = [
+          "12365:25565"
+        ];
+        Volume = [
+          "data:/data"
+        ];
+      };
+    };
+
+    "ollama.container" = {
+      Container = {
+        ContainerName = "ollama";
+        GroupAdd = "keep-groups";
+        Image = "docker.io/ollama/ollama:latest";
+        PublishPort = [
+          "11434:11434"
+        ];
+        Volume = [
+          ":/root/.ollama"
+        ];
+        AddDevice = [
+          "/dev/dri:/dev/dri"
+        ];
+      };
+    };
+
+    "ddns-updater.container" = {
+      Container = {
+        ContainerName = "ddns-updater";
+        Image = "docker.io/favonia/cloudflare-ddns:latest";
+        Network = "host";
+        User = "1000:1000";
+
+        ReadOnly = true;
+        SecurityLabelDisable = true;
+        NoNewPrivileges = true;
+        DropCapability = "all";
+      };
+    };
+  };
+}