feat: add change wallpaper shortcut to yazi

system/dev/dn-pre7780/default.nix

@@ -13,6 +13,7 @@ in
     inherit hostname username;
     domain = "net.dn";
     enableHomeManager = true;
+    nvidia.enable = true;
     hyprland = {
       enable = true;
       monitors = [

system/dev/dn-server/network/services.nix

@@ -384,7 +384,7 @@ in
         "test.local." = "127.0.0.1:5359";
       };
       forwardZonesRecurse = {
-        "." = "8.8.8.8";
+        "." = "168.95.1.1";
       };
       dnssecValidation = "off";
       dns.allowFrom = [
@@ -443,13 +443,19 @@ in
     ];
   };
 
+  systemConf.security = {
+    allowedDomains = [
+      "registry-1.docker.io"
+    ];
+  };
+
   virtualisation = {
     oci-containers = {
       backend = "docker";
       containers = {
         uptime-kuma = {
           extraOptions = [ "--network=host" ];
-          image = "louislam/uptime-kuma:1";
+          image = "louislam/uptime-kuma:2";
           volumes = [
             "/var/lib/uptime-kuma:/app/data"
             "${config.security.pki.caBundle}:/etc/ca.crt:ro"

system/dev/dn-server/services/default.nix

@@ -1,3 +1,4 @@
+{ config, ... }:
 {
   imports = [
     ./actual-budget.nix
@@ -7,5 +8,10 @@
     ./nextcloud.nix
     ./paperless-ngx.nix
     ./metrics.nix
+    # (import ../../../modules/opencloud.nix {
+    #   fqdn = "opencloud.net.dn";
+    #   envFile = config.sops.secrets."opencloud".path;
+    # })
+    (import ./ntfy.nix { fqdn = "ntfy.net.dn"; })
   ];
 }

system/dev/dn-server/services/metrics.nix

@@ -154,4 +154,39 @@ in
       };
     })
   ];
+
+  services.prometheus.alertmanager-ntfy = {
+    settings = {
+      http = {
+        addr = ":31006";
+      };
+      ntfy = {
+        baseurl = config.services.ntfy-sh.settings.base-url;
+        notification = {
+          topic = "alertmgr";
+          priority = ''
+            status == "firing" ? "urgent" : "default"
+          '';
+          tags = [
+            {
+              tag = "+1";
+              condition = ''status == "resolved"'';
+            }
+          ];
+          templates = {
+            title = ''
+              {{ if eq .Status "resolved" }}Resolved: {{ end }}{{ index .Annotations "summary" }}
+            '';
+            description = ''
+              {{ index .Annotations "description" }}
+            '';
+            headers.X-Click = ''
+              {{ .GeneratorURL }}
+            '';
+          };
+        };
+      };
+    };
+    enable = true;
+  };
 }

system/dev/dn-server/services/ntfy.nix

@@ -0,0 +1,35 @@
+{
+  fqdn ? null,
+}:
+{ config, ... }:
+let
+  port = 31004;
+  finalFqdn = if fqdn == null then config.networking.fqdn else fqdn;
+in
+{
+  systemConf.security.allowedDomains = [
+    "ntfy.sh"
+  ];
+
+  services.ntfy-sh = {
+    enable = true;
+    settings = {
+      listen-http = ":${toString port}";
+      base-url = "https://${finalFqdn}";
+      upstream-base-url = "https://ntfy.sh";
+      behind-proxy = true;
+      proxy-trusted-hosts = "127.0.0.1";
+    };
+  };
+
+  services.nginx.virtualHosts = {
+    "${finalFqdn}" = {
+      enableACME = true;
+      forceSSL = true;
+      locations."/" = {
+        proxyWebsockets = true;
+        proxyPass = "http://127.0.0.1:${toString port}";
+      };
+    };
+  };
+}

system/dev/dn-server/sops/sops-conf.nix

@@ -87,5 +87,10 @@ in
       owner = "crowdsec";
       mode = "0600";
     };
+    "opencloud" = mkIf config.services.opencloud.enable {
+      owner = config.services.opencloud.user;
+      group = config.services.opencloud.group;
+      mode = "0600";
+    };
   };
 }