style(photo01): remove lambda instance

machines/photo01/_configuration.nix

@@ -0,0 +1,94 @@
+# TODO: revamp to use the same framework as the other VMs
+{ pkgs, inputs, ... }:
+
+let
+  address = "129.199.146.101";
+in
+{
+  imports = [
+    ./hardware.nix
+
+    # NOTE: For now, only deploy the bare minimum
+    ./photoprism.nix
+    ./immich.nix
+  ];
+
+  # Bootloader.
+
+  networking = {
+    hostName = "photoprism";
+
+    firewall.allowedTCPPorts = [
+      22
+      80
+      443
+      8007
+    ];
+    firewall.allowedUDPPorts = [ ];
+
+    useNetworkd = true;
+  };
+
+  disko.devices = import ./disko.nix;
+
+  deployment.targetHost = address;
+
+  # Set your time zone.
+  time.timeZone = "Europe/Paris";
+
+  environment.systemPackages = with pkgs; [ neovim ];
+
+  users.users.root.openssh.authorizedKeys.keys = [
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDMBW7rTtfZL9wtrpCVgariKdpN60/VeAzXkh9w3MwbO julien@enigma"
+    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKrijwPlb7KQkYPLznMPVzPPT69cLzhEsJzZi9tmxzTh cst1@x270"
+  ];
+
+  security.acme.acceptTerms = true;
+  security.acme.defaults.email = "webmaster@nixos.org";
+
+  systemd.network = {
+    config.routeTables = {
+      he = 100;
+      mwan = 110;
+    };
+    networks = {
+      "10-ens18" = {
+        name = "ens18";
+
+        networkConfig = {
+          Description = "ENS uplink";
+          Address = [ "129.199.146.101/24" ];
+          Gateway = "129.199.146.254";
+          LLDP = true;
+        };
+      };
+    };
+  };
+
+  # TODO: switch to unixsockets if supported
+
+  nix = {
+    settings = {
+      trusted-users = [
+        "@wheel"
+        "root"
+        "nix-ssh"
+      ];
+      auto-optimise-store = true;
+    };
+    #package = pkgs.nixUnstable;
+    extraOptions =
+      let
+        empty_registry = builtins.toFile "empty-flake-registry.json" ''{"flakes":[],"version":2}'';
+      in
+      ''
+        experimental-features = nix-command flakes
+        flake-registry = ${empty_registry}
+        builders-use-substitutes = true
+      '';
+    registry.nixpkgs.flake = inputs.nixpkgs;
+    nixPath = [ "nixpkgs=${inputs.nixpkgs}" ];
+  };
+
+  system.stateVersion = "24.05";
+}

machines/photo01/_hardware-configuration.nix

@@ -0,0 +1,25 @@
+{ lib, modulesPath, ... }:
+
+{
+  imports = [ (modulesPath + "/profiles/qemu-guest.nix") ];
+
+  boot = {
+    loader.systemd-boot.enable = true;
+    initrd.kernelModules = [ ];
+    kernelModules = [ ];
+    extraModulePackages = [ ];
+    initrd.availableKernelModules = [
+      "ata_piix"
+      "uhci_hcd"
+      "virtio_pci"
+      "virtio_scsi"
+      "sd_mod"
+      "sr_mod"
+    ];
+
+  };
+
+  networking.useDHCP = lib.mkDefault false;
+
+  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
+}

machines/photo01/immich.nix

@@ -0,0 +1,15 @@
+{
+  services.immich = {
+    enable = true;
+    # default port: 3001
+    machine-learning.enable = true;
+    host = "localhost";
+  };
+
+  services.nginx.virtualHosts."immich.cgiga.fr" = {
+    enableACME = true;
+    forceSSL = true;
+    serverAliases = [ ];
+    locations."/".proxyPass = "http://localhost:2283/";
+  };
+}

machines/photo01/nginx.nix

@@ -0,0 +1,10 @@
+{
+  services.nginx = {
+    enable = true;
+    recommendedTlsSettings = true;
+    recommendedOptimisation = true;
+    recommendedGzipSettings = true;
+    recommendedProxySettings = true;
+    clientMaxBodySize = "500m";
+  };
+}

machines/photo01/openssh.nix

@@ -0,0 +1,8 @@
+{
+  services.openssh = {
+    enable = true;
+    settings = {
+      PasswordAuthentication = false;
+    };
+  };
+}

machines/photo01/photoprism.nix

@@ -0,0 +1,54 @@
+{ pkgs, ... }:
+
+{
+  services = {
+    photoprism = {
+      enable = true;
+      port = 2342;
+      settings = {
+        PHOTOPRISM_DEFAULT_LOCALE = "fr";
+        PHOTOPRISM_ADMIN_USERNAME = "admin";
+        PHOHOPRISM_SITE_URL = "https://photoprism.cgiga.fr";
+        PHOTOPRISM_SITE_CAPTION = "PhotoPrism";
+
+        # DB access config
+        PHOTOPRISM_DATABASE_DRIVER = "mysql";
+        PHOTOPRISM_DATABASE_NAME = "photoprism";
+        PHOTOPRISM_DATABASE_SERVER = "/run/mysqld/mysqld.sock";
+        PHOTOPRISM_DATABASE_USER = "photoprism";
+      };
+
+      originalsPath = "/data/photos";
+
+      address = "localhost";
+
+      #importPath = "/photoprism/imports";
+      passwordFile = "/passwords/photoprism";
+    };
+
+    mysql = {
+      enable = true;
+      dataDir = "/data/mysql";
+      package = pkgs.mariadb;
+      ensureDatabases = [ "photoprism" ];
+      ensureUsers = [
+        {
+          name = "photoprism";
+          ensurePermissions = {
+            "photoprism.*" = "ALL PRIVILEGES";
+          };
+        }
+      ];
+    };
+
+    services.nginx.virtualHosts."photoprism.cgiga.fr" = {
+      enableACME = true;
+      forceSSL = true;
+      serverAliases = [ ];
+      locations."/" = {
+        proxyPass = "http://localhost:${toString port}/";
+        proxyWebsockets = true;
+      };
+    };
+  };
+}

meta/nodes.nix

@@ -19,7 +19,6 @@
   - luj01 -> VM de Luj
 */
 {
-
   krz01 = {
     site = "pav01";
 
@@ -36,6 +35,15 @@
     stateVersion = "24.05";
     nixpkgs = "24.05";
   };
+  photo01 = {
+    site = "pav01";
+
+    # TODO 
+    hashedPassword = "$y$j9T$aFhOWa05W7VKeKt3Nc.nA1$uBOvG4wf7/yWjwOxO8NLf9ipCsAkS1.5cD2EJpLx57A";
+
+    stateVersion = "24.05";
+    nixpkgs = "24.05";
+  };
   router02 = {
     site = "pav01";