Add nix-fast-build

Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>

hosts/common/configs/system/nix/default.nix

@@ -43,7 +43,6 @@
       ];
       download-buffer-size = 524288000;
       substituters = lib.mkBefore [ "https://nix.karaolidis.com/main" ];
-      trusted-substituters = config.nix.settings.substituters;
       trusted-public-keys = lib.mkBefore [ "main:nJVRBnv73MDkwuV5sgm52m4E2ImOhWHvY12qzjPegAk=" ];
       netrc-file = config.sops.templates.nix-netrc.path;
     };

hosts/common/configs/user/console/home-manager/default.nix

@@ -26,7 +26,6 @@
           experimental-features
           download-buffer-size
           substituters
-          trusted-substituters
           trusted-public-keys
           netrc-file
           ;

hosts/common/configs/user/console/nix/default.nix

@@ -4,7 +4,10 @@
   environment.persistence."/persist/cache"."${home}/.cache/nix" = { };
 
   home-manager.users.${user} = {
-    home.packages = with pkgs; [ nurl ];
+    home.packages = with pkgs; [
+      nix-fast-build
+      nurl
+    ];
 
     programs.zsh.shellAliases = {
       nrs = "sudo nixos-rebuild switch --flake .#$(hostname) --show-trace";

hosts/jupiter/users/storm/configs/console/podman/attic/default.nix

@@ -83,10 +83,19 @@ in
               networks.attic.ref
               networks.traefik.ref
             ];
-            volumes = [
-              "/mnt/storage/private/storm/containers/storage/volumes/attic/_data:/var/lib/attic"
-              "${hmConfig.sops.templates.attic-server.path}:/etc/attic/server.toml"
-            ];
+            volumes =
+              let
+                postStart = pkgs.writeTextFile {
+                  name = "post-start.sh";
+                  executable = true;
+                  text = builtins.readFile ./post-start.sh;
+                };
+              in
+              [
+                "/mnt/storage/private/storm/containers/storage/volumes/attic/_data:/var/lib/attic"
+                "${hmConfig.sops.templates.attic-server.path}:/etc/attic/server.toml:ro"
+                "${postStart}:/etc/attic/post-start.sh:ro"
+              ];
             environmentFiles = [ hmConfig.sops.templates.attic-env.path ];
             exec = [
               "--config"

hosts/jupiter/users/storm/configs/console/podman/attic/post-start.sh

@@ -5,8 +5,10 @@ attic login main https://nix.karaolidis.com/ "$ATTIC_TOKEN"
 CACHE_NAME="main"
 
 while true; do
+  set +o errexit
   out=$(attic cache info "$CACHE_NAME" 2>&1)
   status=$?
+  set -o errexit
 
   if [ $status -eq 0 ]; then
     break

hosts/jupiter/users/storm/configs/console/podman/media/jellyseerr/default.nix

@@ -118,12 +118,6 @@ in
                   client_secret = hmConfig.sops.placeholder."jellyseerr/authelia/digest";
                   redirect_uris = [ "https://request.karaolidis.com/login?provider=authelia&callback=true" ];
                   authorization_policy = "jellyseerr";
-                  scopes = [
-                    "openid"
-                    "email"
-                    "profile"
-                    "groups"
-                  ];
                   token_endpoint_auth_method = "client_secret_post";
                 }
               ];

hosts/jupiter/users/storm/configs/console/podman/traefik/default.nix

@@ -81,6 +81,7 @@ in
               "--entrypoints.https.http.tls.domains[1].sans=*.krlds.com"
               "--entryPoints.https.http3"
               "--entrypoints.https.http.middlewares=compress@docker,security-headers@docker"
+              "--entrypoints.https.transport.respondingTimeouts.readTimeout=0s"
 
               "--certificatesresolvers.letsencrypt.acme.dnschallenge=true"
               "--certificatesresolvers.letsencrypt.acme.dnschallenge.provider=cloudflare"