mob next [ci-skip] [ci skip] [skip ci]

lastFile:machines/saturn/configuration.nix
update(inventory.json): Installed saturn
2026-05-26 13:46:36 +07:00 · 2026-05-26 10:41:13 +07:00 · 2026-05-26 10:31:37 +07:00 · 2026-05-26 10:30:33 +07:00 · 2026-05-26 10:29:29 +07:00 · 2026-05-26 10:28:23 +07:00
235 changed files with 4114 additions and 4302 deletions
@@ -1,3 +0,0 @@
-
-# 2026-06-05 17:00:31.237121
-+start_all()
@@ -72,11 +72,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1781517972,
-        "narHash": "sha256-G8bIXFqifs/y62GNPwg20Ksf71raYwzmyN99gf1tXak=",
+        "lastModified": 1772411144,
+        "narHash": "sha256-WhXudztwPNnKXaqGX4DOqNfHzHdBSiGCvKGHM20pscw=",
        "ref": "refs/heads/main",
-        "rev": "7fc62d0c25c7a97d7027a9c248e21c97c9b3acc1",
-        "revCount": 14604,
+        "rev": "92cc85bc24eb31ce5725e1e72753129810ce3fe9",
+        "revCount": 13201,
        "type": "git",
        "url": "https://git.clan.lol/clan/clan-core"
      },
@@ -101,11 +101,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1778718524,
-        "narHash": "sha256-pXLoI6Ax0EnUK6r34UM1vibVC7CfTu6j72R2692ZzPs=",
-        "rev": "12c552ad547d87254f33f33bddd1a2cdbeac754d",
+        "lastModified": 1772273147,
+        "narHash": "sha256-Wzhoc6ifjTDZi8aVRH3fuLJPdd4ouNTTwwVhgoMcMek=",
+        "rev": "d5de7a8d9e5726e678c94e62fe8ac3a809fee5da",
        "type": "tarball",
-        "url": "https://git.clan.lol/api/v1/repos/clan/data-mesher/archive/12c552ad547d87254f33f33bddd1a2cdbeac754d.tar.gz"
+        "url": "https://git.clan.lol/api/v1/repos/clan/data-mesher/archive/d5de7a8d9e5726e678c94e62fe8ac3a809fee5da.tar.gz"
      },
      "original": {
        "type": "tarball",
@@ -140,11 +140,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1781152676,
-        "narHash": "sha256-RxWs5ND31KzTG7wvMM+PMfUjyNpmIEr999lqNARaM5o=",
+        "lastModified": 1771881364,
+        "narHash": "sha256-A5uE/hMium5of/QGC6JwF5TGoDAfpNtW00T0s9u/PN8=",
        "owner": "nix-community",
        "repo": "disko",
-        "rev": "ff8702b4de27f72b4c78573dfb89ec74e36abdf1",
+        "rev": "a4cb7bf73f264d40560ba527f9280469f1f081c6",
        "type": "github"
      },
      "original": {
@@ -294,11 +294,11 @@
        "std": "std"
      },
      "locked": {
-        "lastModified": 1780907315,
-        "narHash": "sha256-MR859lKVKeItsC5wnd1oniBar2lBTA+FJ7Bx4xN1Wpk=",
+        "lastModified": 1779175997,
+        "narHash": "sha256-Ps/4s3jwaZdLVEpO+1cRs54VbPbgMeXJUqa4CWSPJSY=",
        "owner": "kurogeek",
        "repo": "frappix",
-        "rev": "9c2bc4152bce6d91305bcf0563a8a715860c405d",
+        "rev": "0f1b4bcfb8c3b976e808a57e491d10857a1a45ac",
        "type": "github"
      },
      "original": {
@@ -353,11 +353,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1781557312,
-        "narHash": "sha256-QOIRYSUFSq7L5mY3dZymaVhcnne3tPgoR9riB0WocjA=",
+        "lastModified": 1768068402,
+        "narHash": "sha256-bAXnnJZKJiF7Xr6eNW6+PhBf1lg2P1aFUO9+xgWkXfA=",
        "owner": "nix-community",
        "repo": "home-manager",
-        "rev": "c03e4752899e55705dfa63979abd885c582a5c48",
+        "rev": "8bc5473b6bc2b6e1529a9c4040411e1199c43b4c",
        "type": "github"
      },
      "original": {
@@ -484,11 +484,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1781242433,
-        "narHash": "sha256-bchLZZ3sRn740zyvD2icZSnNoTaanN0nw7l6fjVXO+E=",
+        "lastModified": 1772379624,
+        "narHash": "sha256-NG9LLTWlz4YiaTAiRGChbrzbVxBfX+Auq4Ab/SWmk4A=",
        "owner": "nix-darwin",
        "repo": "nix-darwin",
-        "rev": "aabb2037edfc0f210723b72cd5f528aab5dd3f0b",
+        "rev": "52d061516108769656a8bd9c6e811c677ec5b462",
        "type": "github"
      },
      "original": {
@@ -522,11 +522,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1746801636,
-        "narHash": "sha256-dlcKfIXp/eqFHzFm+DzseXAWWlpVwyk9cTvCKGtVKkw=",
+        "lastModified": 1714086354,
+        "narHash": "sha256-yKVQMxL9p7zCWUhnGhDzRVT8sDgHoI3V595lBK0C2YA=",
        "owner": "nix-community",
        "repo": "nixago",
-        "rev": "8cc33f973ab3a891d8a41391e73ef451a783960b",
+        "rev": "5133633e9fe6b144c8e00e3b212cdbd5a173b63d",
        "type": "github"
      },
      "original": {
@@ -552,11 +552,11 @@
    },
    "nixpkgs_2": {
      "locked": {
-        "lastModified": 1781359544,
-        "narHash": "sha256-iUuzKQcyXvopYDDzFpMK5eQKP3WIJExYny2kJtbgUcE=",
+        "lastModified": 1778458615,
+        "narHash": "sha256-cY07EsdhBJ8tFXPzDYevgqxRev9ZLxFonuq9wmq5kwg=",
        "owner": "nixos",
        "repo": "nixpkgs",
-        "rev": "9f11f828c213641c2369a9f1fa31fe31557e3156",
+        "rev": "c6e5ca3c836a5f4dd9af9f2c1fc1c38f0fac988a",
        "type": "github"
      },
      "original": {
@@ -673,11 +673,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1780547341,
-        "narHash": "sha256-Gq8KNx5A7hBB3uGJaj6eQfLDIz5YdLu92gqBcvHvoUo=",
+        "lastModified": 1772340640,
+        "narHash": "sha256-1nq7+Kt5IUBD8Hu3nptVPbMf+22rNJoHT0t9L1X+GKA=",
        "owner": "Mic92",
        "repo": "sops-nix",
-        "rev": "9ed65852b6257fbeae4355bc24ecfea307ca759a",
+        "rev": "dec4d8eac700dcd2fe3c020857d3ee220ec147f1",
        "type": "github"
      },
      "original": {
@@ -764,16 +764,15 @@
    },
    "systems": {
      "locked": {
-        "lastModified": 1774449309,
-        "narHash": "sha256-brhZ8DmuGtzkCYHJg4HEd602amKm89Y9ytsFZ5uWD1w=",
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
        "owner": "nix-systems",
        "repo": "default",
-        "rev": "c29398b59d2048c4ab79345812849c9bd15e9150",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
        "type": "github"
      },
      "original": {
        "owner": "nix-systems",
-        "ref": "future-26.11",
        "repo": "default",
        "type": "github"
      }
@@ -56,6 +56,7 @@
          ./shell.nix

          ./overlays
+          ./modules/nixos
          ./machines
          ./routers
          ./inventories
@@ -71,12 +72,18 @@
              inherit system;
              overlays = [
                inputs.self.overlays.packagesOverlay
+                inputs.self.overlays.frappixFrappeOverlay
+                inputs.self.overlays.frappixLibsOverlay
+                inputs.self.overlays.frappixPythonOverlay
+                inputs.self.overlays.frappixToolsOverlay
              ];
              config = { };
            };
            packages.think = pkgs.think-gtcm;
            packages.think-be = pkgs.think-backend-gtcm;
            packages.file-uploader = pkgs.gtcm-file-uploader;
+            packages.erpnext_thailand = pkgs.erpnext_thailand;
+            packages.thai_payroll = pkgs.thai_payroll;
          };
      }
    );
@@ -39,8 +39,6 @@
          "hadar"
          "procyon"
          "alasia"
-          "rigel"
-          "vega"
        ];
      };

@@ -104,13 +102,7 @@
            name = "zerotier";
            input = "clan-core";
          };
-          roles.controller.machines."vega" = {
-            settings.allowedIds = [
-              "dbe44c0287" # Alex-gateway
-              "b0e0b84fd3" # Alex
-              "2bd36db8cc" # kurogeek-thinkpad
-            ];
-          };
+          roles.controller.machines."vega" = { };
          roles.peer.tags.glom = { };
        };

@@ -119,13 +111,7 @@
            name = "zerotier";
            input = "clan-core";
          };
-          roles.controller.machines."rigel" = {
-            settings.allowedIds = [
-              "dbe44c0287" # Alex-gateway
-              "b0e0b84fd3" # Alex
-              "2bd36db8cc" # kurogeek-thinkpad
-            ];
-          };
+          roles.controller.machines."rigel" = { };
          roles.peer.tags.b4l = { };
        };

@@ -180,7 +166,6 @@
            input = "clan-core";
          };
          roles.default.tags."phonebox" = { };
-          roles.default.settings.extraYggdrasilIPs = [ "200:c806:c13b:b855:723f:473:55:7904" ];
          roles.default.settings.extraPeers = [
            "tls://ygg.jjolly.dev:3443"
            "tls://[2602:fc24:18:7a42::1]:993"
@@ -292,117 +277,6 @@
            dataDir = "/mnt/hdd/samba";
          };
        };
-
-        wordpress = {
-          module = {
-            name = "wordpress";
-            input = "self";
-          };
-          roles.server.machines."tangra".settings = {
-            tenants = [
-              "poyfestival.com"
-            ];
-            phpfpmOptions = ''
-              upload_max_filesize=64M
-              post_max_size=128M
-            '';
-            wpExtraConfig = ''
-              define('WP_MEMORY_LIMIT', '256M');
-              define('WP_DEBUG', false);
-              define('WP_DEBUG_DISPLAY', false);
-              define('WP_DEBUG_LOG', false);
-            '';
-          };
-        };
-
-        prometheus-monitoring = {
-          module = {
-            name = "prometheus";
-            input = "self";
-          };
-          roles.server.machines."rigel".settings = { };
-          roles.server.extraModules = [
-            (
-              { config, pkgs, ... }:
-              {
-                clan.core.vars.generators.prometheus = {
-                  files.matrix-alertmanager-token.secret = true;
-                  files.matrix-alertmanager-secret.secret = true;
-                  files.matrix-alertmanager-urlfile = {
-                    secret = true;
-                    owner = "alertmanager";
-                    group = "alertmanager";
-                  };
-                  script = ''
-                    echo "" > $out/matrix-alertmanager-token
-                    openssl rand -hex 32 > "$out"/matrix-alertmanager-secret
-
-                    echo "http://localhost:3000/alerts?secret=$(cat $out/matrix-alertmanager-secret)" > $out/matrix-alertmanager-urlfile
-                  '';
-                  runtimeInputs = [
-                    pkgs.openssl
-                  ];
-                };
-
-                services.matrix-alertmanager = {
-                  enable = true;
-                  tokenFile = config.clan.core.vars.generators.prometheus.files.matrix-alertmanager-token.path;
-                  secretFile = config.clan.core.vars.generators.prometheus.files.matrix-alertmanager-secret.path;
-                  homeserverUrl = "https://matrix-client.matrix.org";
-                  matrixUser = "@kuroiris:matrix.org";
-                  matrixRooms = [
-                    {
-                      receivers = [
-                        "matrix"
-                      ];
-                      roomId = "!rqIrWqPvsXqMgYpcNZ:matrix.org";
-                    }
-                  ];
-                };
-
-                services.prometheus = {
-
-                  alertmanager = {
-                    enable = true;
-                    configuration = {
-                      global = {
-                        resolve_timeout = "5m";
-                      };
-                      route = {
-                        receiver = "default";
-                        routes = [
-                          {
-                            receiver = "matrix";
-                          }
-                        ];
-                      };
-                      receivers = [
-                        { name = "default"; }
-                        {
-                          name = "matrix";
-                          webhook_configs = [
-                            {
-                              url_file = config.clan.core.vars.generators.prometheus.files.matrix-alertmanager-urlfile.path;
-                              send_resolved = true;
-                            }
-                          ];
-                        }
-                      ];
-                    };
-                  };
-
-                };
-              }
-            )
-          ];
-
-          roles.nodes.machines = {
-            vega.settings = {
-              exporters.smartctl = { };
-              exporters.zfs = { };
-            };
-          };
-        };
      };
    };
  };
@@ -48,8 +48,8 @@
    "bosona": {
      "installedAt": 1779098893
    },
-    "tangra": {
-      "installedAt": 1779958921
+    "saturn": {
+      "installedAt": 1779766873
    }
  }
 }
@@ -25,7 +25,10 @@
      {
        "index": 8,
        "attached_to": 0,
-        "class_list": ["pci", "bridge"],
+        "class_list": [
+          "pci",
+          "bridge"
+        ],
        "bus_type": {
          "hex": "0004",
          "name": "PCI",
@@ -73,7 +76,10 @@
      {
        "index": 9,
        "attached_to": 0,
-        "class_list": ["pci", "bridge"],
+        "class_list": [
+          "pci",
+          "bridge"
+        ],
        "bus_type": {
          "hex": "0004",
          "name": "PCI",
@@ -125,7 +131,10 @@
      {
        "index": 10,
        "attached_to": 0,
-        "class_list": ["pci", "bridge"],
+        "class_list": [
+          "pci",
+          "bridge"
+        ],
        "bus_type": {
          "hex": "0004",
          "name": "PCI",
@@ -173,7 +182,10 @@
      {
        "index": 11,
        "attached_to": 0,
-        "class_list": ["pci", "bridge"],
+        "class_list": [
+          "pci",
+          "bridge"
+        ],
        "bus_type": {
          "hex": "0004",
          "name": "PCI",
@@ -229,7 +241,10 @@
      {
        "index": 12,
        "attached_to": 0,
-        "class_list": ["pci", "bridge"],
+        "class_list": [
+          "pci",
+          "bridge"
+        ],
        "bus_type": {
          "hex": "0004",
          "name": "PCI",
@@ -282,14 +297,21 @@
        },
        "driver": "piix4_smbus",
        "driver_module": "i2c_piix4",
-        "drivers": ["piix4_smbus"],
-        "driver_modules": ["i2c_piix4"],
+        "drivers": [
+          "piix4_smbus"
+        ],
+        "driver_modules": [
+          "i2c_piix4"
+        ],
        "module_alias": "pci:v00008086d00007113sv00001AF4sd00001100bc06sc80i00"
      },
      {
        "index": 17,
        "attached_to": 0,
-        "class_list": ["pci", "bridge"],
+        "class_list": [
+          "pci",
+          "bridge"
+        ],
        "bus_type": {
          "hex": "0004",
          "name": "PCI",
@@ -339,7 +361,11 @@
      {
        "index": 22,
        "attached_to": 15,
-        "class_list": ["cdrom", "scsi", "block_device"],
+        "class_list": [
+          "cdrom",
+          "scsi",
+          "block_device"
+        ],
        "bus_type": {
          "hex": "0084",
          "name": "SCSI",
@@ -396,8 +422,14 @@
        "unix_device_name2": "/dev/sg1",
        "driver": "ata_piix",
        "driver_module": "ata_piix",
-        "drivers": ["ata_piix", "sr"],
-        "driver_modules": ["ata_piix", "sr_mod"]
+        "drivers": [
+          "ata_piix",
+          "sr"
+        ],
+        "driver_modules": [
+          "ata_piix",
+          "sr_mod"
+        ]
      }
    ],
    "cpu": [
@@ -464,7 +496,9 @@
          "spectre_v2_user",
          "its"
        ],
-        "power_management": [""],
+        "power_management": [
+          ""
+        ],
        "bogo": 4224,
        "cache": 16384,
        "page_size": 4096,
@@ -546,7 +580,9 @@
          "spectre_v2_user",
          "its"
        ],
-        "power_management": [""],
+        "power_management": [
+          ""
+        ],
        "bogo": 4224,
        "cache": 16384,
        "page_size": 4096,
@@ -570,7 +606,11 @@
      {
        "index": 23,
        "attached_to": 19,
-        "class_list": ["disk", "scsi", "block_device"],
+        "class_list": [
+          "disk",
+          "scsi",
+          "block_device"
+        ],
        "bus_type": {
          "hex": "0084",
          "name": "SCSI",
@@ -634,15 +674,24 @@
        ],
        "driver": "virtio_scsi",
        "driver_module": "virtio_scsi",
-        "drivers": ["sd", "virtio_scsi"],
-        "driver_modules": ["sd_mod", "virtio_scsi"]
+        "drivers": [
+          "sd",
+          "virtio_scsi"
+        ],
+        "driver_modules": [
+          "sd_mod",
+          "virtio_scsi"
+        ]
      }
    ],
    "graphics_card": [
      {
        "index": 16,
        "attached_to": 0,
-        "class_list": ["graphics_card", "pci"],
+        "class_list": [
+          "graphics_card",
+          "pci"
+        ],
        "bus_type": {
          "hex": "0004",
          "name": "PCI",
@@ -699,8 +748,12 @@
        },
        "driver": "bochs-drm",
        "driver_module": "bochs",
-        "drivers": ["bochs-drm"],
-        "driver_modules": ["bochs"],
+        "drivers": [
+          "bochs-drm"
+        ],
+        "driver_modules": [
+          "bochs"
+        ],
        "module_alias": "pci:v00001234d00001111sv00001AF4sd00001100bc03sc00i00"
      }
    ],
@@ -708,7 +761,10 @@
      {
        "index": 24,
        "attached_to": 7,
-        "class_list": ["usb", "hub"],
+        "class_list": [
+          "usb",
+          "hub"
+        ],
        "bus_type": {
          "hex": "0086",
          "name": "USB",
@@ -781,8 +837,12 @@
        "hotplug": "usb",
        "driver": "hub",
        "driver_module": "usbcore",
-        "drivers": ["hub"],
-        "driver_modules": ["usbcore"],
+        "drivers": [
+          "hub"
+        ],
+        "driver_modules": [
+          "usbcore"
+        ],
        "module_alias": "usb:v1D6Bp0001d0618dc09dsc00dp00ic09isc00ip00in00"
      }
    ],
@@ -790,7 +850,9 @@
      {
        "index": 5,
        "attached_to": 0,
-        "class_list": ["memory"],
+        "class_list": [
+          "memory"
+        ],
        "base_class": {
          "hex": "0101",
          "name": "Internally Used Class",
@@ -814,7 +876,9 @@
      {
        "index": 21,
        "attached_to": 16,
-        "class_list": ["monitor"],
+        "class_list": [
+          "monitor"
+        ],
        "base_class": {
          "hex": "0100",
          "name": "Monitor",
@@ -960,7 +1024,10 @@
      {
        "index": 25,
        "attached_to": 24,
-        "class_list": ["mouse", "usb"],
+        "class_list": [
+          "mouse",
+          "usb"
+        ],
        "bus_type": {
          "hex": "0086",
          "name": "USB",
@@ -996,7 +1063,9 @@
        "model": "QEMU USB Tablet",
        "sysfs_id": "/devices/pci0000:00/0000:00:01.2/usb1/1-1/1-1:1.0",
        "sysfs_bus_id": "1-1:1.0",
-        "unix_device_names": ["/dev/input/mice"],
+        "unix_device_names": [
+          "/dev/input/mice"
+        ],
        "unix_device_name2": "/dev/input/mouse0",
        "resources": [
          {
@@ -1037,11 +1106,18 @@
        "hotplug": "usb",
        "driver": "usbhid",
        "driver_module": "usbhid",
-        "drivers": ["usbhid"],
-        "driver_modules": ["usbhid"],
+        "drivers": [
+          "usbhid"
+        ],
+        "driver_modules": [
+          "usbhid"
+        ],
        "driver_info": {
          "type": "mouse",
-          "db_entry_0": ["explorerps/2", "exps2"],
+          "db_entry_0": [
+            "explorerps/2",
+            "exps2"
+          ],
          "xf86": "explorerps/2",
          "gpm": "exps2",
          "buttons": -1,
@@ -1054,7 +1130,9 @@
      {
        "index": 18,
        "attached_to": 13,
-        "class_list": ["network_controller"],
+        "class_list": [
+          "network_controller"
+        ],
        "bus_type": {
          "hex": "008f",
          "name": "Virtio",
@@ -1079,7 +1157,9 @@
        "model": "Virtio Ethernet Card 0",
        "sysfs_id": "/devices/pci0000:00/0000:00:12.0/virtio1",
        "sysfs_bus_id": "virtio1",
-        "unix_device_names": ["ens18"],
+        "unix_device_names": [
+          "ens18"
+        ],
        "resources": [
          {
            "type": "hwaddr",
@@ -1092,8 +1172,12 @@
        ],
        "driver": "virtio_net",
        "driver_module": "virtio_net",
-        "drivers": ["virtio_net"],
-        "driver_modules": ["virtio_net"],
+        "drivers": [
+          "virtio_net"
+        ],
+        "driver_modules": [
+          "virtio_net"
+        ],
        "module_alias": "virtio:d00000001v00001AF4"
      }
    ],
@@ -1101,7 +1185,9 @@
      {
        "index": 26,
        "attached_to": 18,
-        "class_list": ["network_interface"],
+        "class_list": [
+          "network_interface"
+        ],
        "base_class": {
          "hex": "0107",
          "name": "Network Interface",
@@ -1115,7 +1201,9 @@
        "model": "Ethernet network interface",
        "sysfs_id": "/class/net/ens18",
        "sysfs_device_link": "/devices/pci0000:00/0000:00:12.0/virtio1",
-        "unix_device_names": ["ens18"],
+        "unix_device_names": [
+          "ens18"
+        ],
        "resources": [
          {
            "type": "hwaddr",
@@ -1128,13 +1216,19 @@
        ],
        "driver": "virtio_net",
        "driver_module": "virtio_net",
-        "drivers": ["virtio_net"],
-        "driver_modules": ["virtio_net"]
+        "drivers": [
+          "virtio_net"
+        ],
+        "driver_modules": [
+          "virtio_net"
+        ]
      },
      {
        "index": 27,
        "attached_to": 0,
-        "class_list": ["network_interface"],
+        "class_list": [
+          "network_interface"
+        ],
        "base_class": {
          "hex": "0107",
          "name": "Network Interface",
@@ -1147,14 +1241,19 @@
        },
        "model": "Loopback network interface",
        "sysfs_id": "/class/net/lo",
-        "unix_device_names": ["lo"]
+        "unix_device_names": [
+          "lo"
+        ]
      }
    ],
    "pci": [
      {
        "index": 13,
        "attached_to": 0,
-        "class_list": ["pci", "unknown"],
+        "class_list": [
+          "pci",
+          "unknown"
+        ],
        "bus_type": {
          "hex": "0004",
          "name": "PCI",
@@ -1211,14 +1310,21 @@
        },
        "driver": "virtio-pci",
        "driver_module": "virtio_pci",
-        "drivers": ["virtio-pci"],
-        "driver_modules": ["virtio_pci"],
+        "drivers": [
+          "virtio-pci"
+        ],
+        "driver_modules": [
+          "virtio_pci"
+        ],
        "module_alias": "pci:v00001AF4d00001000sv00001AF4sd00000001bc02sc00i00"
      },
      {
        "index": 14,
        "attached_to": 0,
-        "class_list": ["pci", "unknown"],
+        "class_list": [
+          "pci",
+          "unknown"
+        ],
        "bus_type": {
          "hex": "0004",
          "name": "PCI",
@@ -1274,8 +1380,12 @@
        },
        "driver": "virtio-pci",
        "driver_module": "virtio_pci",
-        "drivers": ["virtio-pci"],
-        "driver_modules": ["virtio_pci"],
+        "drivers": [
+          "virtio-pci"
+        ],
+        "driver_modules": [
+          "virtio_pci"
+        ],
        "module_alias": "pci:v00001AF4d00001002sv00001AF4sd00000005bc00scFFi00"
      }
    ],
@@ -1283,7 +1393,10 @@
      {
        "index": 6,
        "attached_to": 17,
-        "class_list": ["storage_controller", "pci"],
+        "class_list": [
+          "storage_controller",
+          "pci"
+        ],
        "bus_type": {
          "hex": "0004",
          "name": "PCI",
@@ -1340,14 +1453,21 @@
        },
        "driver": "virtio-pci",
        "driver_module": "virtio_pci",
-        "drivers": ["virtio-pci"],
-        "driver_modules": ["virtio_pci"],
+        "drivers": [
+          "virtio-pci"
+        ],
+        "driver_modules": [
+          "virtio_pci"
+        ],
        "module_alias": "pci:v00001AF4d00001004sv00001AF4sd00000008bc01sc00i00"
      },
      {
        "index": 15,
        "attached_to": 0,
-        "class_list": ["storage_controller", "pci"],
+        "class_list": [
+          "storage_controller",
+          "pci"
+        ],
        "bus_type": {
          "hex": "0004",
          "name": "PCI",
@@ -1437,8 +1557,12 @@
        },
        "driver": "ata_piix",
        "driver_module": "ata_piix",
-        "drivers": ["ata_piix"],
-        "driver_modules": ["ata_piix"],
+        "drivers": [
+          "ata_piix"
+        ],
+        "driver_modules": [
+          "ata_piix"
+        ],
        "module_alias": "pci:v00008086d00007010sv00001AF4sd00001100bc01sc01i80"
      }
    ],
@@ -1449,7 +1573,9 @@
      {
        "index": 19,
        "attached_to": 6,
-        "class_list": ["unknown"],
+        "class_list": [
+          "unknown"
+        ],
        "base_class": {
          "hex": "0000",
          "name": "Unclassified device",
@@ -1467,14 +1593,20 @@
        "sysfs_bus_id": "virtio2",
        "driver": "virtio_scsi",
        "driver_module": "virtio_scsi",
-        "drivers": ["virtio_scsi"],
-        "driver_modules": ["virtio_scsi"],
+        "drivers": [
+          "virtio_scsi"
+        ],
+        "driver_modules": [
+          "virtio_scsi"
+        ],
        "module_alias": "virtio:d00000008v00001AF4"
      },
      {
        "index": 20,
        "attached_to": 14,
-        "class_list": ["unknown"],
+        "class_list": [
+          "unknown"
+        ],
        "base_class": {
          "hex": "0000",
          "name": "Unclassified device",
@@ -1492,8 +1624,12 @@
        "sysfs_bus_id": "virtio0",
        "driver": "virtio_balloon",
        "driver_module": "virtio_balloon",
-        "drivers": ["virtio_balloon"],
-        "driver_modules": ["virtio_balloon"],
+        "drivers": [
+          "virtio_balloon"
+        ],
+        "driver_modules": [
+          "virtio_balloon"
+        ],
        "module_alias": "virtio:d00000005v00001AF4"
      }
    ],
@@ -1501,7 +1637,10 @@
      {
        "index": 7,
        "attached_to": 0,
-        "class_list": ["usb_controller", "pci"],
+        "class_list": [
+          "usb_controller",
+          "pci"
+        ],
        "bus_type": {
          "hex": "0004",
          "name": "PCI",
@@ -1568,15 +1707,25 @@
        },
        "driver": "uhci_hcd",
        "driver_module": "uhci_hcd",
-        "drivers": ["uhci_hcd"],
-        "driver_modules": ["uhci_hcd"],
+        "drivers": [
+          "uhci_hcd"
+        ],
+        "driver_modules": [
+          "uhci_hcd"
+        ],
        "driver_info": {
          "type": "module",
-          "db_entry_0": ["uhci-hcd"],
+          "db_entry_0": [
+            "uhci-hcd"
+          ],
          "active": true,
          "modprobe": true,
-          "names": ["uhci-hcd"],
-          "module_args": [""],
+          "names": [
+            "uhci-hcd"
+          ],
+          "module_args": [
+            ""
+          ],
          "conf": ""
        },
        "module_alias": "pci:v00008086d00007020sv00001AF4sd00001100bc0Csc03i00"
@@ -1689,7 +1838,9 @@
          "name": "RAM",
          "value": 7
        },
-        "memory_type_details": ["Other"],
+        "memory_type_details": [
+          "Other"
+        ],
        "speed": 0
      }
    ],
@@ -13,6 +13,7 @@ in

  imports = [ inputs.frappix.nixosModules.x86_64-linux.frappix ];
  nixpkgs.overlays = [
+    inputs.self.overlays.packagesOverlay
    inputs.self.overlays.frappixFrappeOverlay
    inputs.self.overlays.frappixLibsOverlay
    inputs.self.overlays.frappixPythonOverlay
@@ -9,6 +9,13 @@ let
 in
 {
  clan.core.settings.machine.description = "VM machine that host Inventree system for Poy";
+  imports = [
+    inputs.self.nixosModules.inventree
+  ];
+
+  nixpkgs.overlays = [
+    inputs.self.overlays.packagesOverlay
+  ];

  nixpkgs.hostPlatform = {
    system = "x86_64-linux";
@@ -75,12 +82,19 @@ in

  services.inventree = {
    enable = true;
-    inherit domain;
+    hostName = "${domain}";
+    config.site_url = "https://${config.services.inventree.hostName}";
    secretKeyFile = config.clan.core.vars.generators.inventree.files.secret-key.path;
-    adminPasswordFile = config.clan.core.vars.generators.inventree.files.admin-password.path;
-    settings.INVENTREE_SITE_URL = "https://${domain}";
+    config.oidc_private_key_file = config.clan.core.vars.generators.inventree.files.oidc-key.path;
+    config.adminPasswordFile = config.clan.core.vars.generators.inventree.files.admin-password.path;
  };

+  # services.nginx.virtualHosts."${domain}" = {
+  #   forceSSL = true;
+  #   sslCertificate = config.clan.core.vars.generators.nginx.files.sslCert.path;
+  #   sslCertificateKey = config.clan.core.vars.generators.nginx.files.sslKey.path;
+  # };
+
  system.stateVersion = "25.11";
  clan.core.sops.defaultGroups = [ "admins" ];
 }
@@ -10,6 +10,7 @@
  };
  system.stateVersion = "25.11";
  clan.core.sops.defaultGroups = [ "admins" ];
+  clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";

  networking.interfaces.enx00e04c106368.useDHCP = true; # recovery

@@ -9,6 +9,13 @@ let
 in
 {
  clan.core.settings.machine.description = "VM machine that host Inventree system for Glom";
+  imports = [
+    inputs.self.nixosModules.inventree
+  ];
+
+  nixpkgs.overlays = [
+    inputs.self.overlays.packagesOverlay
+  ];

  nixpkgs.hostPlatform = {
    system = "x86_64-linux";
@@ -75,12 +82,19 @@ in

  services.inventree = {
    enable = true;
-    inherit domain;
+    hostName = "${domain}";
+    config.site_url = "https://${config.services.inventree.hostName}";
    secretKeyFile = config.clan.core.vars.generators.inventree.files.secret-key.path;
-    adminPasswordFile = config.clan.core.vars.generators.inventree.files.admin-password.path;
-    settings.INVENTREE_SITE_URL = "https://${domain}";
+    config.oidc_private_key_file = config.clan.core.vars.generators.inventree.files.oidc-key.path;
+    config.adminPasswordFile = config.clan.core.vars.generators.inventree.files.admin-password.path;
  };

+  # services.nginx.virtualHosts."${domain}" = {
+  #   forceSSL = true;
+  #   sslCertificate = config.clan.core.vars.generators.nginx.files.sslCert.path;
+  #   sslCertificateKey = config.clan.core.vars.generators.nginx.files.sslKey.path;
+  # };
+
  system.stateVersion = "25.11";
  clan.core.sops.defaultGroups = [ "admins" ];
 }
@@ -9,6 +9,7 @@
  clan.core.settings.machine.description = "A Hetzner VPS machine own by Alex.";

  clan.core.sops.defaultGroups = [ "admins" ];
+  clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";

  clan.core.vars.generators.acme = {
    share = true;
@@ -1,8 +1,18 @@
-{ config, pkgs, ... }:
+{ config, ... }:
 {
+  imports = [
+    (import ../../lib/auto-accept-zerotier-members.nix {
+      memberIds = [
+        "dbe44c0287" # Alex-gateway
+        "b0e0b84fd3" # Alex
+        "2bd36db8cc" # kurogeek-thinkpad
+      ];
+    })
+  ];
+
  system.stateVersion = "25.11";
  clan.core.sops.defaultGroups = [ "admins" ];
+  clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";

  clan.core.settings.machine.description = "Zima board computer for testing in B4L";
-
 }
@@ -0,0 +1,107 @@
+{
+  inputs,
+  pkgs,
+  config,
+  ...
+}:
+let
+  sitename = "test.newedge.house";
+in
+{
+  clan.core.settings.machine.description = "VM machine for test things";
+
+  imports = [ inputs.frappix.nixosModules.x86_64-linux.frappix ];
+  nixpkgs.overlays = [
+    inputs.self.overlays.packagesOverlay
+    inputs.self.overlays.frappixFrappeOverlay
+    inputs.self.overlays.frappixLibsOverlay
+    inputs.self.overlays.frappixPythonOverlay
+    inputs.self.overlays.frappixToolsOverlay
+  ];
+
+  clan.core.vars.generators.frappix = {
+    files = {
+      sslCertificate.secret = false;
+      sslCertificateKey = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+      adminPassword.secret = true;
+    };
+    runtimeInputs = with pkgs; [
+      openssl
+      xkcdpass
+    ];
+    script = ''
+      openssl req -x509 -newkey rsa:4096 -keyout $out/sslCertificateKey -out $out/sslCertificate -sha256 -days 3650 -nodes -subj "/C=TH/ST=ChiangMai/L=ChiangMai/O=localhost/CN=localhost" 
+      xkcdpass --numwords 4 --delimiter - --count 1 | tr -d "\n" > "$out"/adminPassword
+    '';
+  };
+
+  services.frappe = {
+    enable = true;
+    project = "glomerp";
+    gunicorn_workers = 2;
+    adminPassword = config.clan.core.vars.generators.frappix.files.adminPassword.path;
+    apps = [
+      pkgs.frappix.erpnext
+      pkgs.frappix.hrms
+      pkgs.erpnext_thailand
+      pkgs.thai_payroll
+    ];
+    sites = {
+      "${sitename}" = {
+        domains = [ sitename ];
+        apps = [
+          "frappe"
+          "erpnext"
+          "hrms"
+          "erpnext_thailand"
+          "thai_payroll"
+        ];
+      };
+    };
+  };
+  services.nginx.virtualHosts."${sitename}" = {
+    sslCertificate = config.clan.core.vars.generators.frappix.files.sslCertificate.path;
+    sslCertificateKey = config.clan.core.vars.generators.frappix.files.sslCertificateKey.path;
+  };
+
+  nixpkgs.hostPlatform = {
+    system = "x86_64-linux";
+  };
+
+  clan.core.vars.generators.nginx = {
+    files = {
+      sslCert = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+      sslKey = {
+        owner = "nginx";
+        group = "nginx";
+        secret = true;
+      };
+    };
+
+    runtimeInputs = [
+      pkgs.openssl
+    ];
+    script = ''
+      openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
+        -keyout $out/sslKey \
+        -out $out/sslCert \
+        -subj "/CN=localhost"
+    '';
+  };
+
+  networking.firewall.allowedTCPPorts = [
+    80
+    443
+  ];
+
+  system.stateVersion = "25.11";
+  clan.core.sops.defaultGroups = [ "admins" ];
+}
@@ -1,7 +1,6 @@
-{ ... }:
 let
  hashDisk = disk: "os-${builtins.substring 0 5 (builtins.hashString "sha256" disk)}";
-  os = "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_119349241";
+  os = "/dev/disk/by-id/scsi-0QEMU_QEMU_HARDDISK_drive-scsi0";
 in
 {

@@ -1,32 +0,0 @@
-{
-  system.stateVersion = "25.11";
-  nixpkgs.hostPlatform = {
-    system = "x86_64-linux";
-  };
-
-  clan.core.settings.name = "tangra";
-  clan.core.settings.machine.description =
-    "A Hetzner VPS machine own by Alex. This is a machine for poyfestival.com";
-
-  clan.core.sops.defaultGroups = [ "admins" ];
-
-  clan.core.vars.generators.acme = {
-    share = true;
-    files.email.secret = false;
-
-    prompts.email = {
-      type = "line";
-      description = "Email for ACME registeration";
-    };
-
-    script = ''
-      cat $prompts/email > $out/email
-    '';
-  };
-
-  users.users.nginx.extraGroups = [ "acme" ];
-
-  security.acme.acceptTerms = true;
-
-  imports = [ ];
-}
@@ -10,9 +10,17 @@

    (inputs.import-tree ./services)

+    (import ../../lib/auto-accept-zerotier-members.nix {
+      memberIds = [
+        "dbe44c0287" # Alex-gateway
+        "b0e0b84fd3" # Alex
+        "2bd36db8cc" # kurogeek-thinkpad
+      ];
+    })
  ];

  clan.core.sops.defaultGroups = [ "admins" ];
+  clan.core.networking.targetHost = "root@[${config.clan.core.vars.generators.zerotier.files.zerotier-ip.value}]";

  clan.core.settings.machine.description = "Glom NAS";

@@ -173,7 +173,6 @@
                base_domain = settings.base_domain;
                override_local_dns = true;
                nameservers.global = settings.nameservers;
-                magic_dns = false;
              };
            };

@@ -66,6 +66,8 @@
                "AutofillAddressEnabled" = false;
                "AutofillCreditCardEnabled" = false;
                "TranslateEnabled" = false;
+                "DnsOverHttpsMode" = "secure";
+                "DnsOverHttpsTemplates" = "https://dns.adguard-dns.com/dns-query";
              };
            };

@@ -79,32 +81,14 @@
                inputs,
                ...
              }:
-              let
-                dictionaries =
-                  with pkgs;
-                  (hunspellWithDicts (
-                    with hunspellDicts;
-                    [
-                      en-us-large
-                      th-th
-                    ]
-                  ));
-              in
              {
                imports = [ inputs.plasma-manager.homeModules.plasma-manager ];

-                systemd.user.sessionVariables = {
-                  DICPATH = "${dictionaries}/share/hunspell";
-                };
-
                home = {
                  homeDirectory = lib.mkForce "/home/${username}";
                  stateVersion = osConfig.system.stateVersion;
-
                  packages = with pkgs; [
-                    libreoffice-qt6
-                    dictionaries
-
+                    libreoffice-fresh
                    element-desktop
                    signal-desktop
                    brave
@@ -5,4 +5,5 @@

  services.displayManager.sddm.enable = lib.mkForce false;
  services.displayManager.gdm.enable = true;
+  services.displayManager.gdm.wayland = true;
 }
@@ -1,204 +0,0 @@
-{ clanLib, ... }:
-{
-  _class = "clan.service";
-  manifest.name = "prometheus";
-  manifest.description = "The Prometheus monitoring system and time series database.";
-  manifest.readme = builtins.readFile ./README.md;
-  manifest.categories = [ "System" ];
-
-  roles.server = {
-    description = "Prometheus server that scraps all data from nodes";
-
-    interface =
-      { lib, ... }:
-      {
-        options = {
-          scrape_interval = lib.mkOption {
-            type = with lib.types; nullOr str;
-            default = "1m";
-            description = "How often to scrape targets. Default is 1 minutes";
-          };
-          extra_rules = lib.mkOption {
-            type = with lib.types; listOf attrs;
-            default = [ ];
-            description = "Additional rules for Prometheus";
-          };
-          default_receiver = lib.mkOption {
-            type = with lib.types; attrs;
-            default = {
-              name = "default";
-            };
-            description = "Definition of a default receiver, default is doing nothing";
-          };
-        };
-      };
-
-    perInstance =
-      {
-        settings,
-        roles,
-        ...
-      }:
-      {
-        nixosModule =
-          {
-            config,
-            lib,
-            ...
-          }:
-          let
-            getYggdrasilIP =
-              machineName:
-              if config.clan.core.vars.generators.yggdrasil.files.address ? value then
-                clanLib.getPublicValue {
-                  flake = config.clan.core.settings.directory;
-                  machine = machineName;
-                  generator = "yggdrasil";
-                  file = "address";
-                  default = null;
-                }
-              else
-                throw "clanService/yggdrasil is required";
-          in
-          {
-            networking.firewall.allowedTCPPorts = [
-              9090
-            ];
-            services.prometheus = {
-              enable = true;
-
-              globalConfig = {
-                scrape_interval = settings.scrape_interval;
-              };
-
-              alertmanagers = [
-                {
-                  scheme = "http";
-                  path_prefix = "/";
-                  static_configs = [ { targets = [ "localhost:9093" ]; } ];
-                }
-              ];
-
-              alertmanager = {
-                enable = true;
-                configuration = {
-                  global = {
-                    resolve_timeout = "5m";
-                  };
-                  route = {
-                    receiver = "default";
-                  };
-                  receivers = [
-                    { name = "default"; }
-                  ];
-                };
-              };
-
-              scrapeConfigs = lib.mapAttrsToList (machineName: machineVal: {
-                tls_config.insecure_skip_verify = true;
-                job_name = "${machineName}";
-                static_configs = lib.mapAttrsToList (
-                  exporterName: exporterVal:
-                  let
-                    targetPort =
-                      if exporterVal ? port then
-                        exporterVal.port
-                      else
-                        config.services.prometheus.exporters."${exporterName}".port;
-                    targetHost = getYggdrasilIP machineName;
-                  in
-                  {
-                    targets = [ "[${targetHost}]:${lib.toString targetPort}" ];
-                  }
-                ) machineVal.settings.exporters;
-              }) roles.nodes.machines;
-
-              rules = [
-                (builtins.toJSON {
-                  groups = [
-                    {
-                      name = "default";
-                      rules = [
-                        {
-                          alert = "NodesDown";
-                          expr = "count by (job) (up == 0) > 0";
-                          for = "1m";
-                          labels = {
-                            severity = "critical";
-                          };
-                          annotations.summary = "Node {{ $labels.job }} has been down for more than 1 minutes.";
-                        }
-                        {
-                          alert = "SmartCtlErrors";
-                          expr = "smartctl_device_error_log_count > 0";
-                          for = "5m";
-                          labels = {
-                            severity = "critical";
-                          };
-                          annotations.summary = ''
-                            Errors occur on {{ $labels.job }}
-                            Disk {{ $labels.device }} {{ $value }}
-                          '';
-                        }
-                        {
-                          alert = "ZFSPoolsHealth";
-                          expr = "zfs_pool_health > 0";
-                          for = "5m";
-                          labels = {
-                            severity = "critical";
-                          };
-                          annotations.summary = ''
-                            Unhealthy Pool at {{ $labels.job }}
-                            Pool {{ $labels.pool }} value {{ $value }}
-                          '';
-                        }
-                      ]
-                      ++ settings.extraRules;
-                    }
-                  ];
-                })
-              ];
-
-            };
-
-          };
-      };
-  };
-
-  roles.nodes = {
-    description = "A node will expose metrics for server to harvest";
-
-    interface =
-      { lib, ... }:
-      {
-        options = {
-          exporters = lib.mkOption {
-            type = lib.types.attrsOf (lib.types.submodule { });
-            default = { };
-            description = "Mirror of services.prometheus.exporters";
-          };
-        };
-      };
-
-    perInstance =
-      { settings, ... }:
-      let
-        enabledExporters = builtins.mapAttrs (
-          name: value:
-          value
-          // {
-            enable = true;
-            openFirewall = true;
-          }
-        ) settings.exporters;
-      in
-      {
-        nixosModule =
-          { ... }:
-          {
-            services.prometheus.exporters = enabledExporters;
-          };
-      };
-  };
-
-}
@@ -1,19 +0,0 @@
-{ self, inputs, ... }:
-let
-  module = ./default.nix;
-in
-{
-  clan.modules = {
-    prometheus = module;
-  };
-  perSystem =
-    { ... }:
-    {
-      clan.nixosTests.service-prometheus = {
-        imports = [ ./tests/vm/default.nix ];
-        _module.args = { inherit self inputs; };
-
-        clan.modules."@clan/prometheus" = module;
-      };
-    };
-}
@@ -1,74 +0,0 @@
-{
-  self,
-  hostPkgs,
-  config,
-  lib,
-  ...
-}:
-{
-  name = "service-prometheus";
-  result.update-vars =
-    let
-      relativeDir = lib.removePrefix "${self}/" (toString config.clan.directory);
-    in
-    hostPkgs.writeShellScriptBin "update-vars" ''
-      set -x
-      export PRJ_ROOT=$(git rev-parse --show-toplevel)
-      ${
-        self.inputs.clan-core.packages.${hostPkgs.system}.clan-cli
-      }/bin/clan-generate-test-vars $PRJ_ROOT/${relativeDir} ${config.name}
-    '';
-
-  clan = {
-    test.useContainers = false;
-    directory = ./.;
-    inventory = {
-      machines.server = { };
-      machines.nodeA = { };
-
-      instances = {
-        yggdrasil = {
-          module.name = "yggdrasil";
-          roles.default.machines.server = { };
-          roles.default.machines.nodeA = { };
-        };
-
-        prometheus = {
-          module.name = "@clan/prometheus";
-          module.input = "self";
-          roles.nodes.machines."nodeA".settings = {
-            exporters.smartctl = { };
-          };
-          roles.server.machines."server".settings = { };
-        };
-      };
-    };
-  };
-
-  nodes = {
-    server = { };
-    nodeA = { };
-  };
-
-  testScript =
-    { nodes, ... }:
-    ''
-      start_all()
-
-      server.wait_for_unit("prometheus.service")
-
-      nodeA.wait_for_unit("prometheus-smartctl-exporter.service")
-      nodeA.wait_for_open_port(9633)
-
-      nodeA.succeed("systemctl status prometheus-smartctl-exporter.service")
-      nodeA.succeed("curl http://localhost:9633/metrics")
-
-
-      server_ip = server.succeed("ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}'").strip()
-      nodeA_ip = nodeA.succeed("ip -4 addr show eth1 | grep -oP '(?<=inet\s)\d+(\.\d+){3}'").strip()
-
-      server.succeed(f"ping -c 3 {nodeA_ip}")
-      server.succeed(f"curl -v http://{nodeA_ip}:9633/metrics")
-
-    '';
-}
@@ -1,6 +0,0 @@
-[
-  {
-    "publickey": "age1kxsp8pa8am6k333nxs4akjqkhht8gspznmlqz4pxn35h5dj4uv5qj6q6fl",
-    "type": "age"
-  }
-]
@@ -1,6 +0,0 @@
-[
-  {
-    "publickey": "age1dkrf438z3337d2qnc7ugkggua99xkh55wuf9zgun35fjrxdpnf5qkg4z6j",
-    "type": "age"
-  }
-]
@@ -1,14 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:Z8I3ecNV2N2jed1sPBU+tI5r5qB2nVTO7aNyMxvp0ztujn8kXjw+thSvLGtRygL2V9rSmPJalHQf1IYUriXgCmYtfg5InPDCAqk=,iv:O4rSyg2G6PJWHURZ/BTBKmn1AVekbNBdg5137sOPL/U=,tag:4/CLfO50laZ8ljWkr6o4qA==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTSWxnekYvREdZMTBMVlRq\nRmtCemFYZDhLYU93azc5czdoTVUydFFUL1JzCmo4ZHlrNi8yeW15N2JxTytWeCtk\nbjRwWUVlazUwTlMwc1RZVU8xYlVlckEKLS0tIFVPeU5KMVFwdExFT0wzeXZka2Jo\nSmxEM2RPTWdoZXJxK0dpemUzVkNzdGcKfXdiSeAcNwEZi7kh9c89ss5K+dYG0lhq\nFsf2I0A1csxqqnYJqXPmwlVGMzuWDrWRU0uc+hQLndP3TbadVux64w==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg"
-			}
-		],
-		"lastmodified": "2026-06-11T07:43:55Z",
-		"mac": "ENC[AES256_GCM,data:OCPR2tkbN72MdaczO47UNCJBb1KjABHQH9q7dtVEwoAhKg4QWFtsDaMwBTVE9qe48nlaWQbxT1mM7uztm6RXLkc5y2c3danPUYFj/FK/ffqpaxv3oReyxWqMoGayT23kFbB0TWEx1K8Jp3gOkwCPg+ZRClvhV1dXrfnwIwZHrBY=,iv:3puPIWFIxRF1KtrmyG54LqCc7Zg4/AOMD65QjYdN970=,tag:RoIVltMKw7WUvgW6sNk6mA==,type:str]",
-		"version": "3.13.0"
-	}
-}
@@ -1 +0,0 @@
-../../../users/admin
@@ -1,14 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:Nuq6ege3HJOxpRgA6fnxdD2Wj+KCw+3PaJCxmZirJl3mkRVLnZgUUhr+gOVEup9Ifjl1ZnP+PqV7b9pPR/WQg0LARYtxIC1QGJ8=,iv:v9p9lsefP5V9McAJCzS7v9sl8XHr9/hAL41XwFbwMOA=,tag:ETK+CFFJAAzGTpowQNAZMQ==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSArN0NEWFZoZWlyeUtZc3hi\ndnVNcHl4eVVHckRLeFhPYUt4a3BwMElFMVZZCklkU1NEWVVmSGw1NmJmWWkrVHFH\nVTN5U0x3NXdiQUJCc095TElzMWZCMXMKLS0tIHRXQkJNREFYUFFvMXM1Sk53VW5z\naTRjMXozZXZiNU8zSkF5d2hhdklBY1EKWwsPi6YiHKFfAyqWH2u75hw47gzcQOz/\n95Im0FgadhqGDCeZhTDfEAc4b1VWQULInsjeRapzf5OJOwekbz6guA==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg"
-			}
-		],
-		"lastmodified": "2026-06-11T07:45:26Z",
-		"mac": "ENC[AES256_GCM,data:mTKFSBFnUzu3rldQCHPZHoyzDdwPzBWPIAhemC1XyG5PiQ/OczStjYaLzZQGCpPvOjBb5Ntqrc+dnaOedZgKlOdaPjZs1U2ZDWadoeWQ2TAKWYA6+kN7PXomsxtHhntiaujMy3502eh06VyiutpVuCdzK2cfEwuno8nyIcHgtXk=,iv:/5DRvFVDQA+yd8m/+Cyxb+aIsfwoaFcV6KRQ/7ISHnU=,tag:z31P6CL0NNRlQThqwapVNA==,type:str]",
-		"version": "3.13.0"
-	}
-}
@@ -1 +0,0 @@
-../../../users/admin
@@ -1,4 +0,0 @@
-{
-  "publickey": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg",
-  "type": "age"
-}
@@ -1 +0,0 @@
-26.05
@@ -1 +0,0 @@
-204:b10b:6057:4bbe:2b44:fc58:c6fd:90ad
@@ -1 +0,0 @@
-../../../../../../sops/machines/nodeA
@@ -1,18 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:JkuciSmL5nmSjcYn22W7iHKzuRxWMJ5dixYllm0aSM7DsyAp9mQzIYJJmalepp7sEhSJ5As3vQW6ZpOQ3G8ZheG06++1GlM8lvVV2FKmYvKHQpI+V7WyUJl7dpfu+5A6BzWES0GbC1g8l/a8sb/+jjEoqUTAj/4=,iv:tehdHsdm2uSRAAzImHhwBSnSBF6lzjLzF9HIPnoi9s0=,tag:dWnQhAiJeCkcssjko+dUpw==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBOVmRSR2xDNmdPYW5MNUVH\nYWVpaTc0TjdOZFBTSEJDL1Z3VG9vVHkrZUFjCklUMUU1bnVmZFJYbzVPd09oZm1U\nNHY0R1hNQnBBc2V4Y2RWQ1ZZRjdOK0kKLS0tIEJkSWFaTDJzMDNJR3QwQzRVdld4\ndDA5ZmZSeTYyVUE5Y1Z1T1l5QmpHRTQKSaN+MIazA8RXhRSyFSkDTyXEp43COpbf\nXOzAhTXja+ut/akUuKadDS4xycZ+ZXAreVmdsF4SWvwZkmPeew+hKQ==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1kxsp8pa8am6k333nxs4akjqkhht8gspznmlqz4pxn35h5dj4uv5qj6q6fl"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMNmZkTHlaRWl1V3UvcGxk\nR0hhL1lNekNzb0REaEc4bitBZkcwYmRDb2hjCnloQTZUL3ZneWZQZk9NTEc1bGNB\nY3ljdFRMMUhLeDdyblhVY3lSOFBXc1UKLS0tIEJUc1ZpQmtuNlRUUEVmajY5TGdP\ncSs2RkZXcnJYRlEvcEtYSWxIWmkrVEkKgQnfxuZuxl1OpZDUPVuqseSN89WnBGFw\nx2PI3cqN67R2tV/FEjOZo+GFgxW93SYdMvxzg2aG2q/7xOQxfj9sjg==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg"
-			}
-		],
-		"lastmodified": "2026-06-11T07:44:25Z",
-		"mac": "ENC[AES256_GCM,data:gRk1t7xFxXSTUcZQw0DCH3QtRnQJF4Mc4kZeeckhuQdc/VATj+cq+ugicrcGJWbbXzAscQLG6g72+Qiane5nFfzmjNoO6JMe181wm7pY/5St+2MjXZEzwAaYjn6ZAm+U7aiUVcp8RBjFIL9HCvBF8qFl7rqqTvYHnTOU0V6TIIo=,iv:eUvZFDKl8PX5QaQPmwJXaokawQMNP0TGOklTAMgB/sg=,tag:3cHICox8bKWkPKMUgvLuXA==,type:str]",
-		"version": "3.13.0"
-	}
-}
@@ -1 +0,0 @@
-../../../../../../sops/users/admin
@@ -1 +0,0 @@
-0a77a4fd45a20ea5d81d39c8137a97dd4988c692ce4263959559b8c3f966c1de
@@ -1 +0,0 @@
-26.05
@@ -1 +0,0 @@
-202:8a70:e215:f822:c67a:f191:b04a:a8f
@@ -1 +0,0 @@
-../../../../../../sops/machines/server
@@ -1,18 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:JcxiDqZDX3J3ooSeN0pQ28uvI86mtHUf2BEcOQdFIDhJZODGCc+BhZvBQmu2mabV8Jf4skrTWqD+60c1fkRcsM+MMXfoyNsrRyQ2K39mG4kl8jJKVKDs+BqXa+CvZ96kesOMgi9vdc3YUKo5cCLY4bQ9VwymqH8=,iv:W3z8Pbyo2IMzkxI4k14FlirLa28qgZ3rnTAWuusiw/0=,tag:EQc8mo/UvACbt8hQv3zPEw==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBkRDNOSU81alN2THNQQ3ZW\nbHVjMmxaYWpzak1NZHplNTVzZzQvMHg4azAwCkExb0VLYlZUd2JjVGNlcXUyR0p1\nWHk5cXpOeGZ0VFRFTGllQWpxRlBTRk0KLS0tIDhKeUc4RHQvb0o0ZXFXZUNCanVY\nYm04TVBoWjlLT0tFOHRnLzd3RHV2ZzAKVpLtENDySGC6UDgAwhDb+7KJiHXOZF6n\nIaeIQWQqiB+45h72NE3yh02boPK8pl6IoJFcK3e4zSO7/G8jGUp0MQ==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1dkrf438z3337d2qnc7ugkggua99xkh55wuf9zgun35fjrxdpnf5qkg4z6j"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBGSUZXVzJwVHdwZGtxOVRu\nN1hMZkltdVM0cnNRL2tSNENkSGV2VzFIU1VBCmRZWlJTODNPMVRjVWY1V1VZcFln\nTDE3N0xsMXdMWityRUNUYWlQOXBMMTgKLS0tIGViTzBrQk5wQXBYQitIb1ZPUitC\nLysyUER0UjFlZm95c3ZGK3hEMEtrNUEKABpoKBUnvzQKSrgsdnU+uyDyED0Tlr7D\nnSsf12c84cvdt0OeCWwf2WvBANZL26XTcFq1fBYOFTJqNLs1ZfO2kg==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg"
-			}
-		],
-		"lastmodified": "2026-06-11T07:45:55Z",
-		"mac": "ENC[AES256_GCM,data:jjhkZB9NdpvV2R0k9yS/AcUqeMr1RLv1UZwGCemlKSwhBfs8E5NxTXLhtmJeQ+hltOTYpz51BIporVtlaH6ElVnh7khOrG3Lb5cLBrL41QM59y3Tbfu6TjNOE3NyMiWuxZnwuqUGWQjsjrIIhE0ftKnpSpkGHMie+BC3iNSB1tY=,iv:onOVK9eJxWOaIjChQD54tz8lY+r/jpp6AArsBIuoRUM=,tag:2Oas1C5D2kZOe4iiD5huyw==,type:str]",
-		"version": "3.13.0"
-	}
-}
@@ -1 +0,0 @@
-../../../../../../sops/users/admin
@@ -1 +0,0 @@
-2eb1e3bd40fba730a1cdc9f6beae1848e4b965e37f18a61593327964108fe6a8
@@ -1,168 +0,0 @@
-{ ... }:
-{
-  _class = "clan.service";
-  manifest.name = "wordpress";
-  manifest.description = "wordpress with multi-tenant support and state of plugins and themes are allowed";
-  manifest.readme = "wordpress with multi-tenant support and state of plugins and themes are allowed";
-  manifest.categories = [ "System" ];
-
-  roles.server = {
-    description = "A default server role";
-    interface =
-      { lib, ... }:
-      {
-        options = {
-          tenants = lib.mkOption {
-            type = with lib.types; listOf str;
-            default = [ "localhost" ];
-            description = "List of tenants website to host on the instance";
-            example = [ "example.com" ];
-          };
-          phpfpmOptions = lib.mkOption {
-            type = with lib.types; lines;
-            default = "";
-            description = "options appended to the PHP configuration file";
-          };
-          wpExtraConfig = lib.mkOption {
-            type = with lib.types; lines;
-            default = "";
-            description = "Any additional text to be appended to the wp-config.php";
-          };
-        };
-      };
-
-    perInstance =
-      { settings, ... }:
-      {
-        nixosModule =
-          {
-            pkgs,
-            lib,
-            config,
-            ...
-          }:
-          let
-            user = "wordpress";
-
-            mkSafeDBName = domain: "wp_${builtins.replaceStrings [ "." ] [ "_" ] domain}";
-
-            mkWordpressSite = domain: {
-              database = {
-                name = mkSafeDBName domain;
-                user = user;
-              };
-              package = wp-pkg domain;
-              extraConfig = ''
-                define('FS_METHOD', 'direct');
-              ''
-              + settings.wpExtraConfig;
-              themes = { };
-            };
-
-            stateDir = hostName: "/var/lib/wordpress/${hostName}";
-
-            wp-pkg =
-              hostName:
-              let
-                upStreamSrc = pkgs.wordpress;
-              in
-              pkgs.stdenv.mkDerivation {
-                pname = "wordpress-custom";
-                version = upStreamSrc.version;
-                src = upStreamSrc;
-
-                installPhase = ''
-                  mkdir -p $out
-                  cp -r * $out/
-
-                  rm -rf $out/share/wordpress/wp-content/plugins
-                  rm -rf $out/share/wordpress/wp-content/themes
-
-                  # symlink uploads directory
-                  ln -s "${stateDir hostName}"/wp-content/themes $out/share/wordpress/wp-content/themes
-                  ln -s "${stateDir hostName}"/wp-content/plugins $out/share/wordpress/wp-content/plugins
-                  ln -s "${stateDir hostName}"/wp-content/upgrade $out/share/wordpress/wp-content/upgrade
-
-                '';
-              };
-            webserver = config.services.${config.services.wordpress.webserver};
-          in
-          {
-            services.wordpress.webserver = "nginx";
-
-            services.wordpress.sites = builtins.listToAttrs (
-              map (tenant: {
-                name = tenant;
-                value = mkWordpressSite tenant;
-
-              }) settings.tenants
-            );
-
-            systemd.tmpfiles.rules = lib.flatten (
-              map (tenant: [
-                "d '${stateDir tenant}/wp-content' 0750 ${user} ${webserver.group} - -"
-                "d '${stateDir tenant}/wp-content/themes' 0750 ${user} ${webserver.group} - -"
-                "Z '${stateDir tenant}/wp-content/themes' 0750 ${user} ${webserver.group} - -"
-                "d '${stateDir tenant}/wp-content/plugins' 0750 ${user} ${webserver.group} - -"
-                "Z '${stateDir tenant}/wp-content/plugins' 0750 ${user} ${webserver.group} - -"
-                "d '${stateDir tenant}/wp-content/upgrade' 0750 ${user} ${webserver.group} - -"
-                "Z '${stateDir tenant}/wp-content/upgrade' 0750 ${user} ${webserver.group} - -"
-              ]) settings.tenants
-            );
-
-            networking.firewall.allowedTCPPorts = [
-              80
-              443
-            ];
-
-            services.phpfpm.pools = builtins.listToAttrs (
-              map (
-                tenant: lib.nameValuePair "wordpress-${tenant}" { phpOptions = settings.phpfpmOptions; }
-              ) settings.tenants
-            );
-
-            security.acme.acceptTerms = true;
-
-            users.users.nginx.extraGroups = [ "acme" ];
-
-            security.acme.certs = lib.listToAttrs (
-              map (
-                tenant:
-                (lib.nameValuePair tenant {
-                  email = config.clan.core.vars.generators.acme.files.email.value;
-                  webroot = "/var/lib/acme/acme-challenge/${tenant}";
-                })
-              ) settings.tenants
-            );
-
-            services.nginx.clientMaxBodySize = "128m";
-
-            services.nginx.virtualHosts = lib.listToAttrs (
-              map (
-                tenant:
-                (lib.nameValuePair tenant {
-                  forceSSL = true;
-                  useACMEHost = tenant;
-                  acmeRoot = config.security.acme.certs.${tenant}.webroot;
-                })
-              ) settings.tenants
-            );
-
-            clan.core.vars.generators.acme = {
-              share = true;
-              files.email.secret = false;
-
-              prompts.email = {
-                type = "line";
-                description = "Email for ACME registeration";
-              };
-
-              script = ''
-                cat $prompts/email > $out/email
-              '';
-            };
-
-          };
-      };
-  };
-}
@@ -1,19 +0,0 @@
-{ self, inputs, ... }:
-let
-  module = ./default.nix;
-in
-{
-  clan.modules = {
-    wordpress = module;
-  };
-  perSystem =
-    { ... }:
-    {
-      clan.nixosTests.service-wordpress = {
-        imports = [ ./tests/vm/default.nix ];
-        _module.args = { inherit self inputs; };
-
-        clan.modules."@clan/wordpress" = module;
-      };
-    };
-}
@@ -1,59 +0,0 @@
-{
-  self,
-  config,
-  lib,
-  hostPkgs,
-  ...
-}:
-{
-  name = "service-wordpress";
-  result.update-vars =
-    let
-      relativeDir = lib.removePrefix "${self}/" (toString config.clan.directory);
-    in
-    hostPkgs.writeShellScriptBin "update-vars" ''
-      set -x
-      export PRJ_ROOT=$(git rev-parse --show-toplevel)
-      ${
-        self.inputs.clan-core.packages.${hostPkgs.system}.clan-cli
-      }/bin/clan-generate-test-vars $PRJ_ROOT/${relativeDir} ${config.name}
-    '';
-
-  clan = {
-    test.useContainers = false;
-    directory = ./.;
-    inventory = {
-      machines.server = { };
-
-      instances = {
-        wordpress-test = {
-          module.name = "@clan/wordpress";
-          module.input = "self";
-          roles.server.machines."server".settings = {
-            tenants = [
-              "localhost"
-              "site2.localhost"
-            ];
-          };
-        };
-      };
-    };
-  };
-
-  nodes = {
-    server = { };
-  };
-
-  testScript = ''
-    start_all()
-
-    server.wait_for_unit("phpfpm-wordpress-localhost.service")
-    server.wait_for_unit("phpfpm-wordpress-site2.localhost.service")
-
-    server.succeed("systemctl status phpfpm-wordpress-localhost.service")
-    server.succeed("systemctl status phpfpm-wordpress-site2.localhost.service")
-    server.wait_for_open_port(80)
-    server.succeed("curl -H \"Host: localhost\" http://127.0.0.1:80 ")
-    server.succeed("curl -H \"Host: site2.localhost\" http://127.0.0.1:80 ")
-  '';
-}
@@ -1,4 +0,0 @@
-{
-  "publickey": "age1qm0p4vf9jvcnn43s6l4prk8zn6cx0ep9gzvevxecv729xz540v8qa742eg",
-  "type": "age"
-}
@@ -1 +0,0 @@
-26.11
@@ -1 +0,0 @@
-fake_line_value
@@ -0,0 +1,5 @@
+{
+  flake.nixosModules = {
+    inventree = import ../nixos/inventree;
+  };
+}
@@ -0,0 +1,334 @@
+{
+  lib,
+  config,
+  pkgs,
+  ...
+}:
+let
+  inherit (lib)
+    mkEnableOption
+    mkOption
+    types
+    mkIf
+    ;
+
+  configFormat = pkgs.formats.json { };
+  cfg = config.services.inventree;
+  pkg = cfg.package;
+  configFile = "${cfg.dataDir}/config.json";
+
+  env = {
+    INVENTREE_CONFIG_FILE = configFile;
+    INVENTREE_SECRET_KEY_FILE = cfg.secretKeyFile;
+    INVENTREE_AUTO_UPDATE = "1";
+    INVENTREE_PLUGINS_ENABLED = "1";
+    INVENTREE_PLUGIN_NOINSTALL = "0";
+    INVENTREE_STATIC_ROOT = cfg.config.static_root;
+    INVENTREE_MEDIA_ROOT = cfg.config.media_root;
+    INVENTREE_BACKUP_DIR = cfg.config.backup_dir;
+    INVENTREE_OIDC_PRIVATE_KEY_FILE = cfg.config.oidc_private_key_file;
+    INVENTREE_DB_ENGINE = cfg.config.database.ENGINE;
+    INVENTREE_DB_NAME = cfg.config.database.NAME;
+    INVENTREE_DB_HOST = cfg.config.database.HOST;
+    INVENTREE_DB_USER = "inventree";
+    INVENTREE_ADMIN_USER = cfg.config.adminUser;
+    INVENTREE_ADMIN_PASSWORD_FILE = cfg.config.adminPasswordFile;
+    INVENTREE_USE_X_FORWARDED_HOST = "1";
+    INVENTREE_CORS_ORIGIN_ALLOW_ALL = "1";
+    INVENTREE_FRONTEND_SETTINGS = ''{"mobile_mode":"allow-always"}'';
+
+    INVENTREE_SITE_URL = cfg.config.site_url;
+
+    PYTHONPATH = pkg.pythonPath;
+  };
+
+  inventree-invoke = pkgs.writeShellApplication {
+    name = "inventree-invoke";
+    text = ''
+      export INVENTREE_CONFIG_FILE=${configFile}
+      export INVENTREE_SECRET_KEY_FILE=${cfg.secretKeyFile}
+      export PYTHONPATH=${pkg.pythonPath}
+
+      exec -a "$0" ${pkgs.python3Packages.invoke}/bin/invoke -r ${cfg.package}/opt/inventree "$@"
+    '';
+  };
+in
+{
+  options.services.inventree = {
+    enable = mkEnableOption "InvenTree parts manager";
+
+    package = lib.mkOption {
+      type = types.package;
+      default = pkgs.inventree;
+      description = ''
+        InvenTree package to use
+      '';
+    };
+
+    hostName = mkOption {
+      type = types.str;
+      description = "FQDN for the InvenTree instance.";
+    };
+
+    dataDir = mkOption {
+      type = types.path;
+      default = "/var/lib/inventree";
+      example = "/var/lib/inventree";
+      description = ''
+        The default path for all inventree data.
+      '';
+    };
+
+    secretKeyFile = mkOption {
+      type = types.path;
+      default = "${cfg.dataDir}/secret_key.txt";
+      description = ''
+        Path to a file containing the secret key
+      '';
+    };
+
+    config = mkOption {
+      type = types.submodule ({
+        freeformType = configFormat.type;
+        options = {
+          adminUser = mkOption {
+            type = types.str;
+            default = "admin";
+          };
+          adminPasswordFile = mkOption {
+            type = types.path;
+            description = "Path to password file for user `admin`";
+          };
+          site_url = mkOption {
+            type = types.str;
+            default = "https://${cfg.hostName}";
+          };
+          static_root = mkOption {
+            type = types.path;
+            default = "${cfg.dataDir}/static";
+            description = ''
+              Static file storage
+            '';
+          };
+          media_root = mkOption {
+            type = types.path;
+            default = "${cfg.dataDir}/media_root";
+            description = "Media root directory";
+          };
+          backup_dir = mkOption {
+            type = types.path;
+            default = "${cfg.dataDir}/backups";
+            description = "Backup directory";
+          };
+          oidc_private_key_file = mkOption {
+            type = types.path;
+            default = "${cfg.dataDir}/oidc.key";
+          };
+        };
+      });
+      default = { };
+      description = ''
+        Config options, see https://docs.inventree.org/en/stable/start/config/
+        for details
+      '';
+    };
+
+    serverStartTimeout = mkOption {
+      type = types.str;
+      default = "10min";
+      description = ''
+        TimeoutStartSec for the server systemd service.
+        See https://www.freedesktop.org/software/systemd/man/latest/systemd.service.html#TimeoutStartSec=
+        for more details
+      '';
+    };
+
+    serverStopTimeout = mkOption {
+      type = types.str;
+      default = "5min";
+      description = ''
+        TimeoutStopSec for the server systemd service.
+        See https://www.freedesktop.org/software/systemd/man/latest/systemd.service.html#TimeoutStopSec=
+        for more details
+      '';
+    };
+
+  };
+
+  config = mkIf cfg.enable {
+    environment.systemPackages = [ inventree-invoke ];
+
+    systemd.tmpfiles.rules = (
+      map (dir: "d ${dir} 0755 inventree inventree") [
+        "${cfg.dataDir}"
+        "${cfg.dataDir}/static"
+        "${cfg.dataDir}/media_root"
+        "${cfg.dataDir}/backups"
+      ]
+    );
+
+    services.inventree.config = {
+      plugins_enabled = false;
+      plugin_file = "${cfg.dataDir}/plugins.txt";
+      plugin_dir = "${cfg.dataDir}/plugins";
+      database = {
+        ENGINE = "postgresql";
+        NAME = "inventree";
+        HOST = "/run/postgresql";
+      };
+    };
+
+    services.postgresql = {
+      enable = true;
+      ensureDatabases = [ "inventree" ];
+      ensureUsers = [
+        {
+          name = "inventree";
+          ensureDBOwnership = true;
+        }
+      ];
+    };
+
+    users.users.inventree = {
+      group = "inventree";
+      isSystemUser = true;
+      description = "InvenTree daemon user";
+    };
+
+    users.groups.inventree = { };
+
+    services.nginx.enable = true;
+
+    services.nginx.virtualHosts.${cfg.hostName} = {
+      locations =
+        let
+          unixPath = config.systemd.sockets.inventree-gunicorn.socketConfig.ListenStream;
+        in
+        {
+          "/" = {
+            extraConfig = ''
+              client_max_body_size 100M;
+              proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            '';
+            proxyPass = "http://unix:${unixPath}";
+          };
+          "/static/" = {
+            alias = "${cfg.config.static_root}/";
+            extraConfig = ''
+              expires 30d;
+            '';
+          };
+          "/media/" = {
+            alias = "${cfg.config.media_root}/";
+            extraConfig = ''
+              auth_request /auth;
+            '';
+          };
+          "/auth" = {
+            extraConfig = ''
+              internal;
+            '';
+            proxyPass = "http://unix:${unixPath}:/auth/";
+          };
+        };
+    };
+
+    systemd.targets.inventree = {
+      description = "Target for all InvenTree services";
+      wantedBy = [ "multi-user.target" ];
+      wants = [ "network-online.target" ];
+      after = [ "network-online.target" ];
+    };
+
+    systemd.services.inventree-config = {
+      description = "Inventree config generation";
+      wantedBy = [ "inventree.target" ];
+      partOf = [ "inventree.target" ];
+      before = [
+        "inventree-static.service"
+        "inventree-gunicorn.service"
+        "inventree-qcluster.service"
+      ];
+      serviceConfig = {
+        # User = "root";
+        # Group = "root";
+        User = "inventree";
+        Group = "inventree";
+        Type = "oneshot";
+        RemainAfterExit = true;
+        PrivateTmp = true;
+      };
+      environment = env;
+      script = ''
+        set -euo pipefail
+
+        umask u=rwx,g=,o=
+
+        # chown inventree:inventree ${configFile}
+
+        ${pkg}/opt/inventree/src/backend/InvenTree/manage.py migrate
+      '';
+    };
+
+    systemd.services.inventree-static = {
+      description = "InvenTree static migration";
+      wantedBy = [ "inventree.target" ];
+      partOf = [ "inventree.target" ];
+      before = [ "inventree-gunicorn.service" ];
+      environment = env;
+      serviceConfig = {
+        User = "inventree";
+        Group = "inventree";
+        StateDirectory = "inventree";
+        #RuntimeDirectory = "inventree";
+        PrivateTmp = true;
+        ExecStart = ''
+          ${pkg}/opt/inventree/src/backend/InvenTree/manage.py collectstatic  --no-input
+        '';
+      };
+    };
+
+    systemd.services.inventree-gunicorn = {
+      description = "InvenTree Gunicorn server";
+      requiredBy = [ "inventree.target" ];
+      partOf = [ "inventree.target" ];
+      #wantedBy = [ "inventree.target" ];
+      environment = env;
+      serviceConfig = {
+        User = "inventree";
+        Group = "inventree";
+        StateDirectory = "inventree";
+        #RuntimeDirectory = "inventree";
+        PrivateTmp = true;
+        ExecStart = ''
+          ${pkg.gunicorn}/bin/gunicorn InvenTree.wsgi \
+            --pythonpath ${pkg}/opt/inventree/src/backend/InvenTree
+        '';
+      };
+    };
+
+    systemd.sockets.inventree-gunicorn = {
+      wantedBy = [ "sockets.target" ];
+      partOf = [ "inventree.target" ];
+      socketConfig.ListenStream = "/run/inventree/gunicorn.socket";
+    };
+
+    systemd.services.inventree-qcluster = {
+      description = "InvenTree qcluster server";
+      requiredBy = [ "inventree.target" ];
+      wantedBy = [ "inventree.target" ];
+      partOf = [ "inventree.target" ];
+      environment = env;
+      serviceConfig = {
+        User = "inventree";
+        Group = "inventree";
+        StateDirectory = "inventree";
+        #RuntimeDirectory = "inventree";
+        PrivateTmp = true;
+        ExecStart = ''
+          ${pkg}/opt/inventree/src/backend/InvenTree/manage.py qcluster
+        '';
+      };
+    };
+  };
+}
@@ -173,10 +173,10 @@ in
      serviceConfig = {
        User = cfg.user;
        WorkingDirectory = "${file-uploader}";
-        ExecStart = "${lib.getExe pkgs.nodejs} ${file-uploader}/src/be/index.js";
+        ExecStart = "${lib.getExe pkgs.nodejs_20} ${file-uploader}/src/be/index.js";
        Restart = "on-failure";
      };
-      path = [ pkgs.nodejs ];
+      path = [ pkgs.nodejs_20 ];
    };

    environment.systemPackages = [
@@ -0,0 +1,37 @@
+{
+  buildPythonPackage,
+  pythonRelaxDepsHook,
+  flit-core,
+  fetchFromGitHub,
+  mkAssets,
+  pandas,
+}:
+buildPythonPackage (finalAttrs: {
+
+  pname = "erpnext_thailand";
+  version = "1.0.2";
+  format = "pyproject";
+
+  src =
+    let
+      erpnext_thailand_src = fetchFromGitHub {
+        owner = "ecosoft-frappe";
+        repo = "erpnext_thailand";
+        rev = "69ebd41b6e616a96677f79f57019a4bcd310b638";
+        hash = "sha256-72acMrJQKEQKp/u3gcUSBZ6mYbAKCD240j2zMARwUEc=";
+      };
+    in
+    mkAssets {
+      src = erpnext_thailand_src;
+      inherit (finalAttrs) pname version;
+      yarnHash = "";
+    };
+
+  dependencies = [ pandas ];
+
+  nativeBuildInputs = [
+    pythonRelaxDepsHook
+    flit-core
+  ];
+
+})
@@ -0,0 +1,37 @@
+{
+  buildPythonPackage,
+  pythonRelaxDepsHook,
+  flit-core,
+  fetchFromGitHub,
+  mkAssets,
+  pandas,
+}:
+buildPythonPackage (finalAttrs: {
+
+  pname = "thai_payroll";
+  version = "0.0.1";
+  format = "pyproject";
+
+  src =
+    let
+      erpnext_thailand_src = fetchFromGitHub {
+        owner = "ecosoft-frappe";
+        repo = "thai_payroll";
+        rev = "c3ceefb0fc6f29ed05c1086bb6dfb4eeaf59f779";
+        hash = "sha256-tYJU6EmIqa8hZ1eNaOVvJUjg8S+ANqZVAqWnnjY/2oY=";
+      };
+    in
+    mkAssets {
+      src = erpnext_thailand_src;
+      inherit (finalAttrs) pname version;
+      yarnHash = "";
+    };
+
+  dependencies = [ pandas ];
+
+  nativeBuildInputs = [
+    pythonRelaxDepsHook
+    flit-core
+  ];
+
+})
@@ -17,7 +17,7 @@ buildNpmPackage {
  version = "1.0.0";

  nativeBuildInputs = with pkgs; [
-    nodejs
+    nodejs_20
    breakpointHook
  ];

@@ -0,0 +1,161 @@
+{
+  stdenvNoCC,
+  python3,
+  fetchFromGitHub,
+  fetchYarnDeps,
+  yarnConfigHook,
+  nodejs,
+}:
+let
+  version = "1.1.0";
+
+  src = fetchFromGitHub {
+    owner = "inventree";
+    repo = "InvenTree";
+    tag = "${version}";
+    hash = "sha256-GAATo5zkkNCes9fCQsYUsZ9auhgYEUnevN4obWj3ZRA=";
+  };
+
+  frontend = stdenvNoCC.mkDerivation {
+    name = "inventree-frontend";
+    inherit version src;
+
+    yarnOfflineCache = fetchYarnDeps {
+      yarnLock = "${src}/src/frontend/yarn.lock";
+      hash = "sha256-Ijbkx+INZgsvMhkzo8h/FUY75W3UHnKAdUjQRD8kJZw=";
+    };
+
+    nativeBuildInputs = [
+      yarnConfigHook
+      nodejs
+    ];
+
+    patchPhase = ''
+      runHook prePatch
+      cd src/frontend
+      runHook postPatch
+    '';
+
+    buildPhase = ''
+      echo "Running lingui"
+      ./node_modules/.bin/lingui compile --typescript
+      echo building lib
+      ./node_modules/.bin/tsc --p ./tsconfig.lib.json
+      ./node_modules/.bin/vite --config vite.lib.config.ts build
+      echo "Running tsc"
+      ./node_modules/.bin/tsc
+      echo "Running vite"
+      ./node_modules/.bin/vite build --emptyOutDir --outDir $out
+    '';
+  };
+
+in
+python3.pkgs.buildPythonApplication rec {
+  pname = "InvenTree";
+  inherit version src;
+
+  format = "other";
+
+  dependencies =
+    with python3.pkgs;
+    [
+      coreapi
+      cryptography
+      distutils
+      dj-rest-auth
+      django
+      django-allauth
+      django-allauth.optional-dependencies.openid
+      django-allauth.optional-dependencies.mfa
+      django-allauth.optional-dependencies.socialaccount
+      django-cleanup
+      django-cors-headers
+      django-dbbackup
+      django-error-report-2
+      django-filter
+      django-flags
+      django-formtools
+      django-ical
+      django-js-asset
+      django-maintenance-mode
+      django-markdownify
+      django-money
+      django-mptt
+      django-mailbox
+      django-anymail
+      django-redis
+      django-oauth-toolkit
+      django-otp
+      django-q-sentry
+      django-q2
+      django-redis
+      django-sesame
+      django-sql-utils
+      django-structlog
+      django-stdimage
+      django-taggit
+      django-user-sessions
+      django-weasyprint
+      djangorestframework
+      djangorestframework-simplejwt
+      djangorestframework-simplejwt.optional-dependencies.crypto
+      django-xforwardedfor-middleware
+      django-storages
+      drf-spectacular
+      dulwich
+      feedparser
+      gunicorn
+      pdf2image
+      pillow
+      pint
+      pip-licenses
+      pypdf
+      python-barcode
+      python-barcode.optional-dependencies.images
+      python-dotenv
+      pyyaml
+      qrcode
+      qrcode.optional-dependencies.pil
+      rapidfuzz
+      sentry-sdk
+      tablib
+      tablib.optional-dependencies.xls
+      tablib.optional-dependencies.xlsx
+      tablib.optional-dependencies.yaml
+      weasyprint
+      whitenoise
+
+      psycopg2
+      fido2
+
+      opentelemetry-api
+      opentelemetry-sdk
+      opentelemetry-exporter-otlp
+      opentelemetry-instrumentation-django
+      opentelemetry-instrumentation-requests
+      opentelemetry-instrumentation-redis
+      opentelemetry-instrumentation-sqlite3
+      opentelemetry-instrumentation-system-metrics
+      opentelemetry-instrumentation-wsgi
+    ]
+    ++ django-anymail.optional-dependencies.amazon-ses;
+
+  installPhase = ''
+    substituteInPlace src/backend/InvenTree/InvenTree/settings.py --replace-fail "django_slowtests.testrunner.DiscoverSlowestTestsRunner" "django.test.runner.DiscoverRunner"
+
+    mkdir -p $out/opt/inventree
+    cp -r . $out/opt/inventree
+
+    echo "Installing frontend"
+
+    mkdir -p $out/opt/inventree/src/backend/InvenTree/web/static/web
+    cp -r ${frontend}/* $out/opt/inventree/src/backend/InvenTree/web/static/web/
+    cp -r ${frontend}/.* $out/opt/inventree/src/backend/InvenTree/web/static/web/
+  '';
+
+  passthru = {
+    pythonPath = python3.pkgs.makePythonPath dependencies;
+    gunicorn = python3.pkgs.gunicorn;
+    inherit frontend;
+  };
+}
@@ -2,4 +2,30 @@ final: prev: {
  think-gtcm = final.callPackage ./think-gtcm.nix { };
  think-backend-gtcm = final.callPackage ./think-backend-gtcm.nix { php = final.php83; };
  gtcm-file-uploader = final.callPackage ./gtcm-file-uploader.nix { };
+
+  pythonPackagesExtensions = prev.pythonPackagesExtensions ++ [
+    (py-final: py-prev: {
+      django-dbbackup = py-final.callPackage ./python/django-dbbackup { };
+      django-error-report-2 = py-final.callPackage ./python/django-error-report-2 { };
+      django-flags = py-final.callPackage ./python/django-flags { };
+      django-ical = py-final.callPackage ./python/django-ical { };
+      django-markdownify = py-final.callPackage ./python/django-markdownify { };
+      django-money = py-final.callPackage ./python/django-money { };
+      django-q-sentry = py-final.callPackage ./python/django-q-sentry { };
+      django-recurrence = py-final.callPackage ./python/django-recurrence { };
+      django-slowtests = py-final.callPackage ./python/django-slowtests { };
+      django-structlog = py-final.callPackage ./python/django-structlog { };
+      django-stdimage = py-final.callPackage ./python/django-stdimage { };
+      django-user-sessions = py-final.callPackage ./python/django-user-sessions { };
+      django-weasyprint = py-final.callPackage ./python/django-weasyprint { };
+      django-xforwardedfor-middleware = py-final.callPackage ./python/django-xforwardedfor-middleware { };
+      pip-licenses = py-final.callPackage ./python/pip-licenses { };
+      py-moneyed = py-final.callPackage ./python/py-moneyed { };
+      pytest-pycodestyle = py-final.callPackage ./python/pytest-codestyle { };
+      sentry-sdk = py-final.callPackage ./python/sentry-sdk { };
+    })
+  ];
+  inventree = final.callPackage ./inventree { python3 = final.python312; };
+  erpnext_thailand = final.python3.pkgs.callPackage ./frappe/erpnext_thailand/default.nix { };
+  thai_payroll = final.python3.pkgs.callPackage ./frappe/thai_payroll/default.nix { };
 }
@@ -0,0 +1,42 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  wheel,
+  django,
+  pytz,
+}:
+
+buildPythonPackage rec {
+  pname = "django-dbbackup";
+  version = "4.2.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "jazzband";
+    repo = "django-dbbackup";
+    rev = version;
+    hash = "sha256-GD+f9mbImGPQ6MOUK3ftHqiGv7TT39jNQsFvd0dnnWU=";
+  };
+
+  build-system = [
+    setuptools
+    wheel
+  ];
+
+  dependencies = [
+    django
+    pytz
+  ];
+
+  pythonImportsCheck = [ "dbbackup" ];
+
+  meta = {
+    description = "Management commands to help backup and restore your project database and media files";
+    homepage = "https://github.com/jazzband/django-dbbackup";
+    license = lib.licenses.bsd3;
+    maintainers = with lib.maintainers; [ ];
+    mainProgram = "django-dbbackup";
+  };
+}
@@ -0,0 +1,37 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  wheel,
+  django,
+}:
+
+buildPythonPackage rec {
+  pname = "django-error-report-2";
+  version = "0.4.2";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "matmair";
+    repo = "django-error-report-2";
+    rev = version;
+    hash = "sha256-ZCaslqgruJxM8345/jSlZGruM+27H9hvwL0wtPkUzc0=";
+  };
+
+  build-system = [
+    setuptools
+    wheel
+  ];
+
+  dependencies = [ django ];
+
+  pythonImportsCheck = [ "error_report" ];
+
+  meta = {
+    description = "Log/View Django server errors";
+    homepage = "https://github.com/matmair/django-error-report-2";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
@@ -0,0 +1,37 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  wheel,
+  django,
+}:
+
+buildPythonPackage rec {
+  pname = "django-flags";
+  version = "5.0.13";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "cfpb";
+    repo = "django-flags";
+    rev = version;
+    hash = "sha256-WPMfFYoP6WaVzZmVtqAz4LlY761aCRyPhd5npc8bOOI=";
+  };
+
+  build-system = [
+    setuptools
+    wheel
+  ];
+
+  dependencies = [ django ];
+
+  pythonImportsCheck = [ "flags" ];
+
+  meta = {
+    description = "Feature flags for Django projects";
+    homepage = "https://github.com/cfpb/django-flags";
+    license = lib.licenses.cc0;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
@@ -0,0 +1,46 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  setuptools-scm,
+  wheel,
+  django,
+  django-recurrence,
+  icalendar,
+}:
+
+buildPythonPackage rec {
+  pname = "django-ical";
+  version = "1.9.2";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "jazzband";
+    repo = "django-ical";
+    rev = version;
+    hash = "sha256-DUe0loayGcUS7MTyLn+g0KBxbIY7VsaoQNHGSMbMI3U=";
+  };
+
+  build-system = [
+    setuptools
+    setuptools-scm
+    wheel
+  ];
+
+  dependencies = [
+    django
+    django-recurrence
+    icalendar
+  ];
+
+  pythonImportsCheck = [ "django_ical" ];
+
+  meta = {
+    description = "ICal feeds for Django based on Django's syndication feed framework";
+    homepage = "https://github.com/jazzband/django-ical";
+    changelog = "https://github.com/jazzband/django-ical/blob/${src.rev}/CHANGES.rst";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
@@ -0,0 +1,39 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  bleach,
+  django,
+  markdown,
+}:
+
+buildPythonPackage rec {
+  pname = "django-markdownify";
+  version = "0.9.5";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "erwinmatijsen";
+    repo = "django-markdownify";
+    rev = version;
+    hash = "sha256-KYU8p8NRD4EIS/KhOk9nvmXCf0RWEc+IFZ57YtsDSWE=";
+  };
+
+  build-system = [ setuptools ];
+
+  dependencies = [
+    bleach
+    django
+    markdown
+  ];
+
+  pythonImportsCheck = [ "markdownify" ];
+
+  meta = {
+    description = "Markdown template filter for Django";
+    homepage = "https://github.com/erwinmatijsen/django-markdownify";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
@@ -0,0 +1,41 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  wheel,
+  django,
+  py-moneyed,
+}:
+
+buildPythonPackage rec {
+  pname = "django-money";
+  version = "3.2";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "django-money";
+    repo = "django-money";
+    rev = version;
+    hash = "sha256-eL26NsreUqtMJ26TmvmB53EJI4Sjs7qjFDnnt4N0vdI=";
+  };
+
+  build-system = [
+    setuptools
+    wheel
+  ];
+
+  dependencies = [
+    django
+    py-moneyed
+  ];
+
+  pythonImportsCheck = [ "djmoney" ];
+
+  meta = {
+    description = "Money fields for Django forms and models";
+    homepage = "https://github.com/django-money/django-money";
+    license = lib.licenses.bsd3;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
@@ -0,0 +1,37 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  poetry-core,
+  setuptools,
+  sentry-sdk,
+}:
+
+buildPythonPackage rec {
+  pname = "django-q-sentry";
+  version = "0.1.6";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "danielwelch";
+    repo = "django-q-sentry";
+    rev = "d3a43a90c82734244d5ebf3295652223053f1354";
+    hash = "sha256-3C7A+X18c7p19HWD/uPRtAMf29VjmrfXXh2z5PPOREY=";
+  };
+
+  build-system = [
+    poetry-core
+    setuptools
+  ];
+
+  dependencies = [ sentry-sdk ];
+
+  pythonImportsCheck = [ "django_q_sentry" ];
+
+  meta = {
+    description = "Bringing Sentry error tracking to Django Q";
+    homepage = "https://github.com/danielwelch/django-q-sentry";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
@@ -0,0 +1,56 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  pdm-backend,
+  django,
+  flake8,
+  pytest,
+  pytest-cov,
+  pytest-django,
+  pytest-sugar,
+  python-dateutil,
+  sphinx,
+  sphinx-rtd-theme,
+  tox,
+}:
+
+buildPythonPackage rec {
+  pname = "django-recurrence";
+  version = "1.12.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "jazzband";
+    repo = "django-recurrence";
+    rev = version;
+    hash = "sha256-Q33zyMa1wI13RNLxynGAJHlagahpnFHCmZbHp0aPC/w=";
+  };
+
+  build-system = [ pdm-backend ];
+
+  dependencies = [
+    django
+    flake8
+    pytest
+    pytest-cov
+    pytest-django
+    pytest-sugar
+    python-dateutil
+    sphinx
+    sphinx-rtd-theme
+    tox
+  ];
+
+  pythonRelaxDeps = true;
+
+  pythonImportsCheck = [ "recurrence" ];
+
+  meta = {
+    description = "Utility for working with recurring dates in Django";
+    homepage = "https://github.com/django-recurrence/django-recurrence";
+    changelog = "https://github.com/django-recurrence/django-recurrence/blob/${src.rev}/CHANGES.rst";
+    license = lib.licenses.bsd3;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
@@ -0,0 +1,38 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  wheel,
+  django,
+}:
+
+buildPythonPackage rec {
+  pname = "django-slowtests";
+  version = "1.1.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "realpython";
+    repo = "django-slow-tests";
+    rev = version;
+    hash = "sha256-gW9AZiMpXJp1m2X1cbm6GdZ9cH+TFqjNLQJFmsvGjB0=";
+  };
+
+  build-system = [
+    setuptools
+    wheel
+  ];
+
+  dependencies = [ django ];
+
+  pythonImportsCheck = [ "django_slowtests" ];
+
+  meta = {
+    description = "Locate your slowest tests";
+    homepage = "https://github.com/realpython/django-slow-tests";
+    changelog = "https://github.com/realpython/django-slow-tests/blob/${src.rev}/CHANGELOG.rst";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
@@ -0,0 +1,51 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  setuptools-scm,
+  wheel,
+  django,
+  pillow,
+  gettext,
+}:
+
+buildPythonPackage rec {
+  pname = "django-stdimage";
+  version = "6.0.2";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "codingjoe";
+    repo = "django-stdimage";
+    rev = version;
+    hash = "sha256-uwVU3Huc5fitAweShJjcMW//GBeIpJcxqKKLGo/EdIs=";
+  };
+
+  build-system = [
+    setuptools
+    setuptools-scm
+    wheel
+  ];
+
+  dependencies = [
+    django
+    pillow
+  ];
+
+  nativeBuildInputs = [ gettext ];
+
+  preBuild = ''
+    echo "bla bla"
+    echo $PATH
+  '';
+
+  pythonImportsCheck = [ "stdimage" ];
+
+  meta = {
+    description = "";
+    homepage = "https://github.com/codingjoe/django-stdimage";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
@@ -0,0 +1,48 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  asgiref,
+  django,
+  django-ipware,
+  structlog,
+  celery,
+  django-extensions,
+}:
+
+buildPythonPackage rec {
+  pname = "django-structlog";
+  version = "9.1.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "jrobichaud";
+    repo = "django-structlog";
+    rev = version;
+    hash = "sha256-SEigOdlXZtfLAgRgGkv/eDNDAiiHd7YthRJ/H6e1v5U=";
+  };
+
+  build-system = [ setuptools ];
+
+  dependencies = [
+    asgiref
+    django
+    django-ipware
+    structlog
+  ];
+
+  optional-dependencies = {
+    celery = [ celery ];
+    commands = [ django-extensions ];
+  };
+
+  pythonImportsCheck = [ "django_structlog" ];
+
+  meta = {
+    description = "";
+    homepage = "https://github.com/jrobichaud/django-structlog";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
@@ -0,0 +1,39 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  setuptools-scm,
+  wheel,
+  django,
+}:
+
+buildPythonPackage rec {
+  pname = "django-user-sessions";
+  version = "2.0.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "jazzband";
+    repo = "django-user-sessions";
+    rev = version;
+    hash = "sha256-Wexy6G2pZ8LTnqtJkBZIePV7qhQW8gu/mKiQfZtgf/o=";
+  };
+
+  build-system = [
+    setuptools
+    setuptools-scm
+    wheel
+  ];
+
+  dependencies = [ django ];
+
+  pythonImportsCheck = [ "user_sessions" ];
+
+  meta = {
+    description = "Extend Django sessions with a foreign key back to the user, allowing enumerating all user's sessions";
+    homepage = "http://github.com/jazzband/django-user-sessions";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
@@ -0,0 +1,38 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  django,
+  weasyprint,
+}:
+
+buildPythonPackage rec {
+  pname = "django-weasyprint";
+  version = "2.4.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "fdemmer";
+    repo = "django-weasyprint";
+    rev = "v${version}";
+    hash = "sha256-eSh1p+5MyYb6GIEgSdlFxPzVCenlkwSCTkTzgKjezIg=";
+  };
+
+  build-system = [ setuptools ];
+
+  dependencies = [
+    django
+    weasyprint
+  ];
+
+  pythonImportsCheck = [ "django_weasyprint" ];
+
+  meta = {
+    description = "A Django class-based view generating PDF resposes using WeasyPrint";
+    homepage = "https://github.com/fdemmer/django-weasyprint";
+    changelog = "https://github.com/fdemmer/django-weasyprint/blob/${src.rev}/CHANGELOG.md";
+    license = lib.licenses.asl20;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
@@ -0,0 +1,37 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  wheel,
+  django,
+}:
+
+buildPythonPackage rec {
+  pname = "django-xforwardedfor-middleware";
+  version = "2.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "allo-";
+    repo = "django-xforwardedfor-middleware";
+    rev = "v${version}";
+    hash = "sha256-dDXSb17kXOSeIgY6wid1QFHhUjrapasWgCEb/El51eA=";
+  };
+
+  build-system = [
+    setuptools
+    wheel
+  ];
+
+  dependencies = [ django ];
+
+  pythonImportsCheck = [ "x_forwarded_for" ];
+
+  meta = {
+    description = "Use the X-Forwarded-For header to get the real ip of a request";
+    homepage = "https://github.com/allo-/django-xforwardedfor-middleware";
+    license = lib.licenses.publicDomain;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
@@ -0,0 +1,74 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  setuptools-scm,
+  wheel,
+  prettytable,
+  tomli,
+  autopep8,
+  black,
+  docutils,
+  isort,
+  mypy,
+  pip-tools,
+  pypandoc,
+  pytest-cov,
+  pytest-pycodestyle,
+  pytestrunner,
+  tomli-w,
+  twine,
+}:
+
+buildPythonPackage rec {
+  pname = "pip-licenses";
+  version = "5.0.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "raimon49";
+    repo = "pip-licenses";
+    rev = "v-${version}";
+    hash = "sha256-6xw6BCuXSzNcwkpHaEFC5UPpubPUwhx/pg6vZq2er7A=";
+  };
+
+  build-system = [
+    setuptools
+    setuptools-scm
+    wheel
+  ];
+
+  dependencies = [
+    prettytable
+    tomli
+  ];
+
+  optional-dependencies = {
+    dev = [
+      autopep8
+      black
+      docutils
+      isort
+      mypy
+      pip-tools
+      pypandoc
+      pytest-cov
+      pytest-pycodestyle
+      pytestrunner
+      tomli-w
+      twine
+      wheel
+    ];
+  };
+
+  pythonImportsCheck = [ "piplicenses" ];
+
+  meta = {
+    description = "Dump the license list of packages installed with pip";
+    homepage = "https://github.com/raimon49/pip-licenses";
+    changelog = "https://github.com/raimon49/pip-licenses/blob/${src.rev}/CHANGELOG.md";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
@@ -0,0 +1,42 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  wheel,
+  babel,
+  typing-extensions,
+}:
+
+buildPythonPackage rec {
+  pname = "py-moneyed";
+  version = "3.0";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "py-moneyed";
+    repo = "py-moneyed";
+    rev = "v${version}";
+    hash = "sha256-k0ZbLwog6TYxKDLZV7eH1Br8buMPfpOkgp+pMN/qdB8=";
+  };
+
+  build-system = [
+    setuptools
+    wheel
+  ];
+
+  dependencies = [
+    babel
+    typing-extensions
+  ];
+
+  pythonImportsCheck = [ "moneyed" ];
+
+  meta = {
+    description = "Provides Currency and Money classes for use in your Python code";
+    homepage = "http://github.com/py-moneyed/py-moneyed";
+    changelog = "https://github.com/py-moneyed/py-moneyed/blob/${src.rev}/CHANGES.rst";
+    license = lib.licenses.bsd3;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
@@ -0,0 +1,43 @@
+{
+  lib,
+  buildPythonPackage,
+  fetchFromGitHub,
+  setuptools,
+  wheel,
+  certifi,
+  urllib3,
+}:
+
+buildPythonPackage rec {
+  pname = "sentry-sdk";
+  version = "2.26.1";
+  pyproject = true;
+
+  src = fetchFromGitHub {
+    owner = "getsentry";
+    repo = "sentry-python";
+    rev = version;
+    hash = "sha256-Wl8yq2X9GuPcqaS93hkKXs2cDzz282Xceaai4NjbVZY=";
+    fetchSubmodules = true;
+  };
+
+  build-system = [
+    setuptools
+    wheel
+  ];
+
+  dependencies = [
+    certifi
+    urllib3
+  ];
+
+  pythonImportsCheck = [ "sentry_sdk" ];
+
+  meta = {
+    description = "The official Python SDK for Sentry.io";
+    homepage = "https://github.com/getsentry/sentry-python";
+    changelog = "https://github.com/getsentry/sentry-python/blob/${src.rev}/CHANGELOG.md";
+    license = lib.licenses.mit;
+    maintainers = with lib.maintainers; [ ];
+  };
+}
@@ -0,0 +1,6 @@
+[
+  {
+    "publickey": "age1rwjdv7w6c3pcjx3wctk9xekclml8zwtj39m4hfhsprrx5x2lqphq6tuham",
+    "type": "age"
+  }
+]
@@ -1,6 +0,0 @@
-[
-  {
-    "publickey": "age14pdszyzzu9lwzhxs7xz7k94knvgensay9qr4p6j9z8qnqnvqup8qpvk6ra",
-    "type": "age"
-  }
-]
@@ -0,0 +1,46 @@
+{
+	"data": "ENC[AES256_GCM,data:gsyH0BD1k8zqui8vSRCMROcBpoIccV6BivkPABMG/CySKbFBFBUJ5++rQ0TIYs6G3B2kaDf5X3eYGVL7en0xexrmX0azSEq18qw=,iv:n3fbfFW4zXsuk/Kj41B5gD6P4SNxpgv4xOGmNV3Cvuw=,tag:bOg16Mf+XLdCn5e0Ez4BEQ==,type:str]",
+	"sops": {
+		"age": [
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBWNlJzTlNqNkJIK1g2WTcv\nY2t2dzZOQXNodzRoSmxJZHFkdy9LR3I5eGlNCklFeFg4ZThXQkw4aGsvUGlsRVdY\nYVlDbVUxRHF6RGhVZTB6aktIdU5VeVUKLS0tIEZuNjJXTGVjMDlmc1dNdys2OW9Q\nL3JxaXUwMTIrSTFJSUppVGZBT3JXTEkKDLSRXTbGD4EOfS7VpFmYV1x9RCb+0O+o\nuViSHBKCgArHIgie+EHsgtX85TUXbhDqVGpfF72+/++Bry/Kz16Mlw==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBITVRGaDJVVEszQ05VbE05\nL1hqT0ljVit4azErN0gyNVIxZkxNVjBpTWp3CmNPbmJHVzVjb1d0VFpXNUhieElJ\nWEZYQjRQT0JCUTd6Z0hScnc1TUQwMHcKLS0tIC82aTNRTFRJemlsaktCdWg4eHVP\nZEtmTTRUWEJSQjhJZk9yeE1kZThUOTgKnO8Xl0s/ACOCrY3MG2Rh4Bi0K3lArKCs\nDmS5Q9fP1IfYrrA745JLBM5WwgALco51I9WEI72J/7SY+4RJ6eMp3A==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEZaVG56djhE\nN2dBbnpoM0hkZlIxdmoxdDhrOTVyWkliaVdsSnBOOEQwUmMgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpYSjdEYUxqTzgwbnAzRlptRDFzdEVx\nV0ZpQWZocDFucVhQSyt5UnJpVjRjCi0tLSBQWER1Q1RzSzlDaHJldS9Dd0owdVVM\nMlpUZTNKYXdXTk1QMEE5YW1OUE1rCr5MMqhC+1c4he+RiJnl2OIOQOmiQvzZiLDD\nl41rVavmfF2Y1r7iDpr5EyX+wTg3MKBhImKF5JUP8xVyMvl8Y+E=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIExBejlnT01O\nblNOZEpDckdqWlJ4NWR0aVNWNzgrVXdSanU1L0RKdFRBWDggQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpSYjVNdnBvMFNhQzZZZ1hRRnhRTTZY\nbFBjbllyTmppS1hhL04vS1ZwcWlVCi0tLSB6Q3ovWGNnY1YwakxOcFlKU1ZhOTRK\ncFg5eWlPSkkwdlZXMCtIUlRocE1JChVA7BG/70m6M2pzM/BJtPlYVx/xNBOKGdaV\no9P5aju2PyZ12EIt7+tiNWTHvKRgT7yL0PnmyqZU2TOOC/g2JUU=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIFlGeHNJRlNV\nRTBJbTE1QUZKZ0hpbzhYWXZsbUlGbGcwSGZCNVk5QisvaUEgQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpuWEF6RTZkc2I2bEJVa2lEV3BOTURr\nV0NxL29aNVViMUprbVh6ZDZPTnJ3Ci0tLSBmU3V4TWxFV0dEc3Y4cFhsbG1ZM0R1\neUxOWHJOWWNSNU9EbGlqc1dHaS9BCmGIHjtt507spJhXy7WGyNQedPOcYv0CviWN\ne4WlBoZnd0gn8+Mt1OPkwLzlr8AwAjj6Xsw2YR5/fE/81rO5LiY=\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRdEZqQ1FlMTlGdktIMW9U\nMTUwMHV4b2xNbkJ0dHF4N2JYREFsQ3dPaXhjCkRuZTZsWjJFQncybFJsVXp0WWJl\nLzV1SGE2d2d2Q1hteCtxbGJaTXJOZkEKLS0tIEN5ZzZlaVdnajhDL0g4a2lvRVFL\ndkpFN0xpRTFtRkk4YjhtaUFGY2Q5M3MKs1mPSVRRFm9ZP2tBf3cS5LZuDXplNTdB\nf8M4vQR+eKDLwwwGF//Zb1TzUp383EsXPZCzL/gheB3RykNAUbSZNA==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBjNGI5WTZxMmNkSWFFRjNG\nMnFZKyt4ZlBZT2VvNkZ3RFdnSlhDZWZjckM0Ck0xY1BDK1gyRXNwQzFkcW10Z1lP\nYzB4Tld5VWpkTGRBYklIZTZla0JZUzQKLS0tIEpFQWFBWlFpdlhVS2p1QXB0T25a\nancrTWFiV2JJaFp2OHV0RmJsNjh6aXcKnp4Nbw7C7XmpjuF1qxXAat2OtXbVd3ph\nlR1Q6hH6hvq++2m2L3FYHxqLC7S8XiXlxVlJstZFnHZOG4kU2HUZLQ==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzOTBRUHFEclpVZ3MwbjUz\nMkVrZG4yZ2FKTG4rb2tTU3N5UitxbTlyVzFVCi9JYTh2UXRJK0FENEozRS9VR3pJ\nNy80UUgvbDNrYmRQRmE0T3cyK3FpOUUKLS0tIFZQb1ZYM1ZYY0hBTy9pTFZzWk93\nbUlGSDNjKzZYOGNxakhKajJ6RjdtV0UKQ7xGhrPy1GOvePazcxNUskV1uLRXEN3N\n7DBzUqhpo2Me5nOIgcYT/YrT8drxWc4shNfpz7XxzciK+/goNvczig==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
+			},
+			{
+				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0MWlGNG0wcjZhb3lJNXlV\nNU1uZVhNUzlBRGtGMWhjc1Zhc1BhclVGM3hFCk9FNkcxaXl1TEZ5dy9qRXNHbWVK\nQ3o1ckJCVG96UUJaNDMxNitFT0U1TnMKLS0tIGhaZ3NXL3M3WGd5M05sVHNyYlBh\nTUNuakMvM1JXbmNIUnJHRjVMb2NucjAKRF5fVTCr5Jix/JDd9D5wehZmPC1UJ+3W\nhKVhFgyhildxofU6+BHmQCBfJ/O8uBMC2Kxk6Ba439y5gWs5ULz0lg==\n-----END AGE ENCRYPTED FILE-----\n",
+				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
+			}
+		],
+		"lastmodified": "2026-05-26T03:25:37Z",
+		"mac": "ENC[AES256_GCM,data:S7nhnTGyvMxex5jG/bXxhQQJwJl3KRa8KaOVTH5CxH9cl7JI2z7WvekstJvCZdpaUxoNzBYIogXWtbXPziTbm8zVqMGL35c94KWjJ1pLxih0hncSIi8rs/9X0dGVl9fWGsDoQI8fgu8rjtHLpl+mxM3Mv/JPHC0cH6wiG12cR7I=,iv:ILymhUa+nrWQvyKvxOZ5kmpE57X2eG68wcLHF18DQJU=,tag:Z7MBh3Yzd5rPbRqGJlHQ4Q==,type:str]",
+		"version": "3.13.0"
+	}
+}
@@ -1,46 +0,0 @@
-{
-	"data": "ENC[AES256_GCM,data:H6zKr5xrPfHM7L1PAA3yHY2T9K6/IPfPshUncIldSW/9mMFMbLz0d4E+hp5IZCm50fLl5PHFOjIK5h390knrH3fz0zzmCgE3kn4=,iv:5XiZsewvqB8Z5v+0IDrdHl2YjrpwX9BVOg63U5ME6Zc=,tag:L1S/TgS3Rq8Pp5EC1VITgQ==,type:str]",
-	"sops": {
-		"age": [
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBYZ1NobkZOY3V3bm5JNHdx\nZjhTbXkzVXNvUkE4UnNJRjFhc1dGc1loMndJCnBkWkZxM0Y2TDZORFVxek8zZWdG\nQ1h3Qy9pZmpWSzdmcE5RZlRaY3hBNWcKLS0tIG0wK01ya2pnT0NrMWdTRnp2WTI4\neFA3Ujk3N3VaNVpOQzNiSDVpNThGdWMKii698kqkazUHyoFmRogEAOuTwcjeQS/c\nhU2Hm4AAzb41G6KqH2LKxDhF3j4TZaKennSkC2bH5ruTbMHxNup7CQ==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age134vt63pjqpd0m7702fyn8vhdlzyj2deqc2q78sp9uw9052kxsgwq6d25ez"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5R1lURmRWOTVyTU00SktX\nb1RaYWtpZHRleDdObC90VWhMemp0MDBBRmtVCi9iQ0dpaGFPQm9sUURwS2JGL1gr\nYmEzdHp4S0VNaHpVMFBwUmxweGE4RGsKLS0tIHFhUDh5QjFaVktzRloxMkhQVmk4\nbXNTczhoVmpZY28rRjZqbXBOYjNXcDgKGxmMonIfC9kgzIrkL3SQkiAPSPloZIDM\nT1+f4ydepFm0hPYn+/Bv/tdKkgpErRIT5xU+EE/Rt2WrxiyJzRSZyQ==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age17d4qt0n9edq57tgcqyk8eu5mrendl59yt6z2y3a4vkq7el8krqtq6lq28g"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIEZZa044T252\nUXdGMVhTRzBxVGd1U1c4WktXeDRwQnRaNndOWUZKNUJ6eXcgQVEgd0l6SlBCVW1v\neDl5N0lHYmVrajZzVzVTYjd4WVdNVjZoZVlkUEtmVXlMdyBIdmtoczF0dmhxL1py\nS1hsc0ErckdoVVB0bE02RGdCNW5raERXT1ZJMTkzNjRGNHd2T3ZSTVYrKzZlbEll\nVTZKc2JVN1B2SzRuNkpaekhwSWJQaFZVQQpTMlZOeklYYUxVNERvQktxM29DMkVE\nd3NIRUpDcUpicVhnVEtKaXM1RU1nCi0tLSBFelMyYTVxaU40K0FKMXUzbGdvWUxH\nMUFyQkxNT0N5RE0zdHRxR2RkanZvCvyZswq45eIaE2IKLtx1Z2ayjAKthvmc9uQ/\nO5lIEaC44kgxrLXPJqk93fY2q1d0FaJMdBPRmQ5n5Y+T6yaqF0Y=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqpf43tgcfjm048lsqskvq34w2t4uvrm5qy6m2eg6zjj82ctca8wctgpczxvj0q4y6337uhvsxdh5j86k9h9ymautpvv2759ucwnef75ez7pa7fpkddklp40mxk2tedsp74359g0kefn5rsq0x0yss6cu4yd0h06up0rp08t6yc4l0hfa9y8jn5fkx6nk0hjhz06ykwv0fyxe7z42q683jy0"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIGVKUWM4dXY2\nNW5QK1VmN1I2dDhINnNDUXpMUmFsbDZXazlyZEI4WC9JVHMgQVEgZlFBRFNyWkNS\nRDJQaUJ3WWowTEcwaTk0Z0tiRHpQNmhkMTJZUlZHbHlEMCBtMzE5bzVQb1JmZkpy\nY0orbEs2RzBSVXA3UmZYZkRRanNnc2pHSnJjK1pLVmZOWGR4d0IwZjh1YXlkakRx\nTm5EMXR3ZjNHWGl0Ty8rcHpQbkcxRTZmZwpwSTN4TEdXQzJ6Q3pQLzA0VFV3YThy\nc0xQM2FKT2RkckNqRXFNRzZVU29rCi0tLSBOUEhTTWpmcy9TelE0YWZuM2RGdER1\nRi9EQXkrd2krUGNyc3drNXJsSnE4Cmyrlx1n0/TGV3ebUYYe/7zB0tpmAGyaTLER\nUshbqgbybtLAfiEyq9ZAolHhVmkQ1GCJbOaIzZUneOi5NYem1+k=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqprw0vfpc8wzsu78quc777kmee54ln6nnsjrnrhl7nr33eh4kvkksqp05qqxj4kgfzrmrugrsvg7skx6ghh3q9xc0x0agthtkvy25d9eq7eklta5wf7s30hexkuyl5546rdz9ffa5tawlp5yweqkgccntw0ny540n2am3cqw3luhxkfmrp63kwr6mwplhr9u26wll48x0n3k5f60c7hg9a3"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IGZpZG8yLWhtYWMgQUFJIHNJSVlBQXAw\nQWdDUVRuNUdhdkxORXFGc050Y3pKVWRuTlVTbURROS9wMTggQVEgZUh4S2o1R2RE\nV0svbnErTmxodXE2bUxJK3lla2lvajB3OXVwZHJtcHU5dyBKU3I4WFJnK3BOQXl0\nZDh5NTB5ZFlteFJIM2FVTVp5cmNyRXZqL1V0c0l6L0tSb0c5ZU9jbmRXMTIwb2c1\nQjZsREgzWUxaOXBUd2pQK2NncDZuUmZkZwpWNGllcTZtdmVoY2lTSHhOMkNtam9w\nb2dmOWlGdWsvcWZXN2pRMUJEcGZvCi0tLSBPTFA3OVdPK2hLd0pIZVJkbW50WkIw\nSmtPZXFkcTNoazVnTXYrR0NxVnA0Cu++kUfu1nrTWaa+p4KaRUpVa16L9xXkubQS\ntiRwmxYBhXgZn+jLPvDWqkBwNbbezD8QoY5bJsOaCoFvPoAB3sI=\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1fido2-hmac1qqpyewum3q8dfcumfgec8nn958aec9f4q9aqy0k06kw5kq27d6fdqdgp0p7y4ru3n5xk90u747xevxa2af3v37e85j9g3axrmw5hdwdfh0wz22hut5vrafxsx26a7vh8fjwkymz3ramfgvvu4detztu075kmpr8l9ydqda0rnjwatdwmfgswg849p37astvld98s3nleeq575azlwc2hhpuh"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB0Ry9uaE04UzNLc2Mxbmgy\nRDFNNEtnTVh3U2xoZ08wVmxPSUV1cXpSTERZCjlEL1R0UWUyd0FiN1FtbnRuYnpV\nUUVoT0JzUDUwTzNvWVNic0hvaTFCZzQKLS0tIDF2UVp5WTJFRUxZN1B5SU5Uc3h6\neTBiMFo4ZnBSMFJBSHE4ejMwMFp5SzQKzaGWhdQJ70djvkOv0CMCyzBpWtgoyNog\nfXlSb1nEnx0S4n7BbQeUMcbNZR0Gz8BzfovJIokGeN2VI/CNc9NijA==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1hlzrpqqgndcthq5m5yj9egfgyet2fzrxwa6ynjzwx2r22uy6m3hqr3rd06"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5UGJSY0VEa01BVitIeTdu\ndGFXajF4WU5GUTFTT0hrL1B5RWtSTG9JSXp3Ck5SMFZFUDV1ZXNhNGRIenNFQU9N\ndlR1OVMyNnA0eC9RaVN5K0hGdVRXbjgKLS0tIDBsdFpnZGF2cWN3MEptN0M1TWhS\nUFdDbHVEWDhzYmUwRlRYWVMza0kreWMKpwl8k1XM+6czx+zWG5A2dTy6BIb6AxTw\nr04mzDlMG4M8KZAQ9n/ZhVJgAEIdyMckahQThpLDKPTY2PJvJF5/FQ==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1sg0rvgyetdcqw7j2x983fh69kdkvqsngpe5x36e5920qa7fze3cqhj4wgx"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBMZnQ0NjRQUExUVmpUekl3\nMk9HS2VDOU5FS0drZGZocTZNc3VRZmpEMnlJCmJ4S1cvY3RoRHErcUpxYUdaZmJn\nYlAwQ3c4VGV0MGkxT2NVMjJ2eUNEYncKLS0tIDNTVDRNN0NZaWJiMDk2WTR2aWov\nSzRsQm9wcWx3R2ZmZnZ4bnlmNmhtR0EK7KHcKUBvAEFB/65Pv/55POguBOOMw+t+\nFwlvTxPo5Ec94XAc/lqvOz/RfYF73Os4qiGzkZ8WXft7FHl9kkqfBg==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1swlyyk2rzvevqawyeekv75nx2dz34zpe3xqhkqme26gcgeavy4dqrfpcd8"
-			},
-			{
-				"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBIOFpnZWltdWIrRU1LblNt\nQ21xRE92a1FXQThkVkI4bk9WWFB6dzhkeFJVCnVjK2cxdUlyS2xYTTFKVm5mc3Fv\ndHVHQXBVRzJqQTBDMUxTVFkvczNnMlUKLS0tIEU1ZlFvcmFtdDJKcDJHYnRiMnZv\naHlCOEJKNmh3bHFhcHFMM2lhRC9GcDgK1vvGk+P2/DriuNi9pdwgsr99GAvZdPAp\nDWBG6cH9pSbLGu2+rsrOGPdQ+kgp7pz/XNEDFMMzL3Nh5LNk6+r3uQ==\n-----END AGE ENCRYPTED FILE-----\n",
-				"recipient": "age1vphy2sr6uw4ptsua3gh9khrm2cqyt65t46tusmt44z98qa7q6ymq6prrdl"
-			}
-		],
-		"lastmodified": "2026-05-28T06:47:03Z",
-		"mac": "ENC[AES256_GCM,data:XZLMRmecN1YpFNph8UgUzztJaKN71udV8bBsiTc+eyRD0BOdFBbCQ13sVf7YzGXthlyTG6jWSJRRWSQ0G+0B88GGIMzGDnxXafbQdd0swF6Ff41KftKvKtxAsUg3nMErUo+oQ7JM4RzOFsowi5qmdM/ANZokCc6c4xzVR6DZTAo=,iv:gwuk9sbxuWdKUyRE/rUcQ1WnoqKFfZFvCDwxxPQpQL8=,tag:Qqcmc354g7DuU4q0SSEiFw==,type:str]",
-		"version": "3.13.0"
-	}
-}
@@ -0,0 +1 @@
+../../../../../../sops/machines/alasia
@@ -0,0 +1 @@
+../../../../../../sops/machines/bosona
@@ -0,0 +1 @@
+../../../../../../sops/machines/canopus
@@ -0,0 +1 @@
+../../../../../../sops/machines/deneb
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
kurogeek	2ca158ebf8	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/saturn/configuration.nix	2026-05-26 13:46:36 +07:00
kurogeek	85f75812fc	update(inventory.json): Installed saturn	2026-05-26 10:41:13 +07:00
kurogeek	78822deb2d	Update vars via generator openssh-cert (machine: saturn)	2026-05-26 10:31:37 +07:00
kurogeek	73ffd2057e	Update vars via generator user-password-root (machine: saturn)	2026-05-26 10:30:33 +07:00
kurogeek	ff653cdd86	Update vars via generator tor_tor (machine: saturn)	2026-05-26 10:29:29 +07:00
kurogeek	62c1a63208	Update vars via generator state-version (machine: saturn)	2026-05-26 10:28:23 +07:00
kurogeek	fedf0be4d4	Update vars via generator openssh (machine: saturn)	2026-05-26 10:28:11 +07:00
kurogeek	e57f73bcfe	Update vars via generator nginx (machine: saturn)	2026-05-26 10:27:33 +07:00
kurogeek	0fffc56ca7	Update vars via generator frappix (machine: saturn)	2026-05-26 10:26:29 +07:00
kurogeek	9381f54f66	Add machine saturn to secrets	2026-05-26 10:25:37 +07:00
kurogeek	c765ea319b	Update secret saturn-age.key	2026-05-26 10:25:37 +07:00
kurogeek	2318eb48ed	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/saturn/configuration.nix	2026-05-26 10:21:53 +07:00
kurogeek	c2c9428805	mob next [ci-skip] [ci skip] [skip ci] lastFile:machines/canopus/configuration.nix	2026-05-25 17:05:09 +07:00
kurogeek	54d5290d0a	mob next [ci-skip] [ci skip] [skip ci] lastFile:flake.nix	2026-05-25 16:35:19 +07:00
				`@@ -1 +0,0 @@`
				`0a77a4fd45a20ea5d81d39c8137a97dd4988c692ce4263959559b8c3f966c1de`
				`@@ -1 +0,0 @@`
				`2eb1e3bd40fba730a1cdc9f6beae1848e4b965e37f18a61593327964108fe6a8`