From dbde2a40f20b4ca835f8bdba90187384f6e0f1f0 Mon Sep 17 00:00:00 2001
From: Zuckerberg <zuckerberg@neet.dev>
Date: Tue, 5 Aug 2025 19:42:29 -0700
Subject: [PATCH] Add linkwarden

---
 flake.lock                         |  13 +++++++++++++
 flake.nix                          |   5 +++++
 machines/storage/s0/default.nix    |  14 ++++++++++++++
 machines/storage/s0/properties.nix |   1 +
 secrets/linkwarden-environment.age | Bin 0 -> 903 bytes
 secrets/secrets.nix                |   1 +
 6 files changed, 34 insertions(+)
 create mode 100644 secrets/linkwarden-environment.age

diff --git a/flake.lock b/flake.lock
index 49ffa6c..6365ce8 100644
--- a/flake.lock
+++ b/flake.lock
@@ -271,6 +271,18 @@
         "type": "github"
       }
     },
+    "nixpkgs-linkwarden": {
+      "flake": false,
+      "locked": {
+        "narHash": "sha256-wW3F+iRM/ATWkyq8+Romal8oFmsM/p98V96d5G0tasA=",
+        "type": "file",
+        "url": "https://github.com/NixOS/nixpkgs/pull/347353.diff"
+      },
+      "original": {
+        "type": "file",
+        "url": "https://github.com/NixOS/nixpkgs/pull/347353.diff"
+      }
+    },
     "root": {
       "inputs": {
         "agenix": "agenix",
@@ -282,6 +294,7 @@
         "nix-index-database": "nix-index-database",
         "nixos-hardware": "nixos-hardware",
         "nixpkgs": "nixpkgs",
+        "nixpkgs-linkwarden": "nixpkgs-linkwarden",
         "simple-nixos-mailserver": "simple-nixos-mailserver",
         "systems": "systems"
       }
diff --git a/flake.nix b/flake.nix
index 8c11ffe..6e6f6cb 100644
--- a/flake.nix
+++ b/flake.nix
@@ -2,6 +2,10 @@
   inputs = {
     # nixpkgs
     nixpkgs.url = "github:NixOS/nixpkgs/release-25.05";
+    nixpkgs-linkwarden = {
+      url = "https://github.com/NixOS/nixpkgs/pull/347353.diff";
+      flake = false;
+    };
 
     # Common Utils Among flake inputs
     systems.url = "github:nix-systems/default";
@@ -124,6 +128,7 @@
                   # I tried to use an overlay but my attempts to override the rust package did not work out
                   # despite me following guides and examples specific to rust packages.
                   ./patches/librespot-pin.patch
+                  inputs.nixpkgs-linkwarden
                 ];
               };
               patchedNixpkgs = nixpkgs.lib.fix (self: (import "${patchedNixpkgsSrc}/flake.nix").outputs { self = nixpkgs; });
diff --git a/machines/storage/s0/default.nix b/machines/storage/s0/default.nix
index 6245a21..519b3dd 100644
--- a/machines/storage/s0/default.nix
+++ b/machines/storage/s0/default.nix
@@ -251,6 +251,7 @@
         (mkVirtualHost "sandman.s0.neet.dev" "http://192.168.9.14:3000") # es
         (mkVirtualHost "todo.s0.neet.dev" "http://localhost:${toString config.services.vikunja.port}")
         (mkVirtualHost "budget.s0.neet.dev" "http://localhost:${toString config.services.actual.settings.port}") # actual budget
+        (mkVirtualHost "linkwarden.s0.neet.dev" "http://localhost:${toString config.services.linkwarden.port}")
       ];
 
     tailscaleAuth = {
@@ -314,5 +315,18 @@
 
   services.actual.enable = true;
 
+  services.linkwarden = {
+    enable = true;
+    enableRegistration = true;
+    port = 41709;
+    environment.NEXTAUTH_URL = "https://linkwarden.s0.neet.dev/api/v1/auth";
+    environmentFile = "/run/agenix/linkwarden-environment";
+  };
+  age.secrets.linkwarden-environment.file = ../../../secrets/linkwarden-environment.age;
+  services.meilisearch = {
+    enable = true;
+    package = pkgs.meilisearch;
+  };
+
   boot.binfmt.emulatedSystems = [ "aarch64-linux" "armv7l-linux" ];
 }
diff --git a/machines/storage/s0/properties.nix b/machines/storage/s0/properties.nix
index c177035..f58f391 100644
--- a/machines/storage/s0/properties.nix
+++ b/machines/storage/s0/properties.nix
@@ -15,6 +15,7 @@
     "frigate"
     "zigbee"
     "media-server"
+    "linkwarden"
   ];
 
   hostKey = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAwiXcUFtAvZCayhu4+AIcF+Ktrdgv9ee/mXSIhJbp4q";
diff --git a/secrets/linkwarden-environment.age b/secrets/linkwarden-environment.age
new file mode 100644
index 0000000000000000000000000000000000000000..a01e7f309d0e3003b49134f24f71961fc0defa13
GIT binary patch
literal 903
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCU72q-YjD_3wgaP%uM
z4-CyV^>lP8&kGAGiFEQ!$qqHi&daq-4hoAZFOTxc3N@{)GT=(iHw$;PO!D+I33u`_
zbj!93De+3p%QSMYa5i_%4|WX=Gbu7CEly1_NJqD=+&Hh)B3(f{(!4M+Gtt|}zoOVN
zKcX_Mz^|a9vdS_nuQEJ5G%P0|%q<`|y}T$TD4Q!NIViLuD9NSFGAN)hDax=i%q`p5
z!z|E0!_OnBz}d{uC)>OzC_OOTF&o{s)Uv{|v~-064}Sx%NEgFO?EvSf4AZ0ne|?`s
zzdT3JvIq}1m*QMgPuIw*^uVNu5JxUA{S<E}qe8FHiVB~sf})V@RCh1WAfM#qtg>XU
zWIqe@u*@urh$M?j<4`VLU0nqWM<<Wckl>;u&xk}vW7GWdY;RLTkKl};z_iS~ps-4F
z-&7Z`WWx#%%Sf(wrPt?)&A8|mc<#pY+-wK8KrgM<GNu>xG7fqre8<l9Sea|_u?9zp
zy#H^Tr=tE*f780RuewsN$DY3)Yju6Y(p|>WQpJq6&U@R|*c*4o^P_S2d@=2-v4wjp
zk2jV*-x_y5aDs8b>I+;y>iE^;&12u4IqLWCvFFp*yCYcKG))hL_rym`<+FR#*39?$
z2jc@HHog;Eil*<%eN*;q@rlXD-&t)iSLvNmBb-<;**|K(*W0v7euZWaIWID_$shf4
z?Wl~E+tVWjMcvo`28K!Y1pZ3fn$~Z0@`t^yztdK>IHe!GNg0>ymd`w0T&l^<)ci&u
z=f|Co_dg#KmfLs3oby+Ua!uUrR1UR63H9eziM+V_<y|j>{m)bb<7@w1m%rp}fB9#c
z>+%afXMdf3-RhNs>51uFwyVDV6p+?@-5b2H-E_)y%_Hm^_FqpZ)3&HNm?D_!Ds<|<
zi<<Vn)4`mxJH(DRZr^{vF1W_-wlMo9$C|pzkSDB6|IX?kivQd=GjdOFap-e((dzlz
z_r2@q=vW=V`)i|>xYeH>(?8yi)5}cE49{mUb*=s-C%<^&@~Qe~R&X7Y$-iaAr{a8N
zk2}}Z_KBh#{Jkkt3vD?6yjwe6zBbxYU88MA_pe{3wg%C`0y%D9|8+j*`sX;iX7Wz+
Yn4QZ!pK`~~E=l<x)wX%ThA<Nq0K^b@y#N3J

literal 0
HcmV?d00001

diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index bdbc2b9..3071fd2 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -38,6 +38,7 @@ with roles;
   # services
   "searx.age".publicKeys = nobody;
   "wolframalpha.age".publicKeys = dailybot;
+  "linkwarden-environment.age".publicKeys = linkwarden;
 
   # hostapd
   "hostapd-pw-experimental-tower.age".publicKeys = nobody;