diff --git a/SwarselSystems.org b/SwarselSystems.org index 41cc73f..7bff01f 100644 --- a/SwarselSystems.org +++ b/SwarselSystems.org @@ -7528,39 +7528,58 @@ Here we just define some aliases for rebuilding the system, and we allow some in }; }; - services.paperless = { - enable = true; - mediaDir = "/Vault/Eternor/Paperless"; - dataDir = "/Vault/data/paperless"; - user = "paperless"; - port = 28981; - passwordFile = config.sops.secrets.paperless_admin.path; - address = "127.0.0.1"; - settings = { - PAPERLESS_OCR_LANGUAGE = "deu+eng"; - PAPERLESS_URL = "https://scan.swarsel.win"; - PAPERLESS_OCR_USER_ARGS = builtins.toJSON { - optimize = 1; - invalidate_digital_signatures = true; - pdfa_image_compression = "lossless"; - }; - PAPERLESS_APPS = "allauth.socialaccount.providers.openid_connect"; - PAPERLESS_SOCIALACCOUNT_PROVIDERS = builtins.toJSON { - openid_connect = { - OAUTH_PKCE_ENABLED = "True"; - APPS = [ - rec { - provider_id = "kanidm"; - name = "Kanidm"; - client_id = "paperless"; - # secret will be added dynamically - #secret = ""; - settings.server_url = "https://sso.swarsel.win/oauth2/openid/${client_id}/.well-known/openid-configuration"; - } - ]; + services = { + paperless = { + enable = true; + mediaDir = "/Vault/Eternor/Paperless"; + dataDir = "/Vault/data/paperless"; + user = "paperless"; + port = 28981; + passwordFile = config.sops.secrets.paperless_admin.path; + address = "127.0.0.1"; + settings = { + PAPERLESS_OCR_LANGUAGE = "deu+eng"; + PAPERLESS_URL = "https://scan.swarsel.win"; + PAPERLESS_OCR_USER_ARGS = builtins.toJSON { + optimize = 1; + invalidate_digital_signatures = true; + pdfa_image_compression = "lossless"; + }; + PAPERLESS_TIKA_ENABLED = "true"; + PAPERLESS_TIKA_ENDPOINT = "http://localhost:9998"; + PAPERLESS_TIKA_GOTENBERG_ENDPOINT = "http://localhost:3001"; + PAPERLESS_APPS = "allauth.socialaccount.providers.openid_connect"; + PAPERLESS_SOCIALACCOUNT_PROVIDERS = builtins.toJSON { + openid_connect = { + OAUTH_PKCE_ENABLED = "True"; + APPS = [ + rec { + provider_id = "kanidm"; + name = "Kanidm"; + client_id = "paperless"; + # secret will be added dynamically + #secret = ""; + settings.server_url = "https://sso.swarsel.win/oauth2/openid/${client_id}/.well-known/openid-configuration"; + } + ]; + }; }; }; }; + + tika = { + enable = true; + port = 9998; + openFirewall = false; + listenAddress = "127.0.0.1"; + enableOcr = true; + }; + + gotenberg = { + enable = true; + port = 3001; + bindIP = "127.0.0.1"; + }; }; # Add secret to PAPERLESS_SOCIALACCOUNT_PROVIDERS diff --git a/index.html b/index.html index e2b647c..c5866e6 100644 --- a/index.html +++ b/index.html @@ -3,7 +3,7 @@ "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
- +-This file has 64040 words spanning 16886 lines and was last revised on 2025-06-09 17:08:15 +0200. +This file has 64081 words spanning 16905 lines and was last revised on 2025-06-09 17:22:28 +0200.
@@ -764,7 +764,7 @@ This section defines my Emacs configuration. For a while, I considered to use ry
-My emacs is built using the emacs-overlay nix flake, which builds a bleeding edge emacs on wayland (pgtk) with utilities like treesitter support. By executing the below source block, the current build setting can be updated at any time, and you can see my most up-to-date build options (last updated: 2025-06-09 17:08:15 +0200) +My emacs is built using the emacs-overlay nix flake, which builds a bleeding edge emacs on wayland (pgtk) with utilities like treesitter support. By executing the below source block, the current build setting can be updated at any time, and you can see my most up-to-date build options (last updated: 2025-06-09 17:22:28 +0200)
@@ -2881,8 +2881,8 @@ This is just a demo host. It applies all the configuration found in the common p I also set theWLR_RENDERER_ALLOW_SOFTWARE=1 to allow this configuration to run in a virtualized environment. I also enable qemuGuest for a smoother experience when testing on QEMU.
-{ self, inputs, config, pkgs, lib, primaryUser, ... }:
@@ -2961,8 +2961,8 @@ in
_: @@ -2972,8 +2972,8 @@ in
_:
@@ -4754,8 +4754,8 @@ appimageTools.wrapType2 {
This programs simply runs ssh-keygen on the last host that I tried to ssh into. I need this frequently when working with cloud-init usually. @@ -4912,8 +4912,8 @@ in
{ lib, config, ... }:
@@ -4980,8 +4980,8 @@ in
{ lib, config, ... }:
@@ -5045,8 +5045,8 @@ in
{ lib, config, ... }:
@@ -5078,8 +5078,8 @@ in
{ lib, config, ... }:
@@ -5100,8 +5100,8 @@ in
{ lib, config, ... }:
@@ -5122,8 +5122,8 @@ in
{ lib, config, ... }:
@@ -5144,8 +5144,8 @@ in
{ lib, config, ... }:
@@ -5166,8 +5166,8 @@ in
{ lib, config, ... }:
@@ -5188,8 +5188,8 @@ in
{ lib, config, ... }:
@@ -5210,8 +5210,8 @@ in
{ lib, config, ... }:
@@ -5264,8 +5264,8 @@ in
{ lib, config, ... }:
@@ -5322,8 +5322,8 @@ in
{ lib, config, ... }:
@@ -5380,8 +5380,8 @@ in
{ lib, config, ... }:
@@ -5433,8 +5433,8 @@ in
{ lib, config, ... }:
@@ -5454,8 +5454,8 @@ in
{ lib, config, ... }:
@@ -5475,8 +5475,8 @@ in
{ lib, config, ... }:
@@ -5497,8 +5497,8 @@ in
{ lib, config, ... }:
@@ -5516,8 +5516,8 @@ in
{ lib, config, ... }:
@@ -7050,8 +7050,8 @@ Most of the time I am using power-saver, however, it is good to be
{ lib, pkgs, config, ... }:
@@ -8819,39 +8819,58 @@ in
};
};
- services.paperless = {
- enable = true;
- mediaDir = "/Vault/Eternor/Paperless";
- dataDir = "/Vault/data/paperless";
- user = "paperless";
- port = 28981;
- passwordFile = config.sops.secrets.paperless_admin.path;
- address = "127.0.0.1";
- settings = {
- PAPERLESS_OCR_LANGUAGE = "deu+eng";
- PAPERLESS_URL = "https://scan.swarsel.win";
- PAPERLESS_OCR_USER_ARGS = builtins.toJSON {
- optimize = 1;
- invalidate_digital_signatures = true;
- pdfa_image_compression = "lossless";
- };
- PAPERLESS_APPS = "allauth.socialaccount.providers.openid_connect";
- PAPERLESS_SOCIALACCOUNT_PROVIDERS = builtins.toJSON {
- openid_connect = {
- OAUTH_PKCE_ENABLED = "True";
- APPS = [
- rec {
- provider_id = "kanidm";
- name = "Kanidm";
- client_id = "paperless";
- # secret will be added dynamically
- #secret = "";
- settings.server_url = "https://sso.swarsel.win/oauth2/openid/${client_id}/.well-known/openid-configuration";
- }
- ];
+ services = {
+ paperless = {
+ enable = true;
+ mediaDir = "/Vault/Eternor/Paperless";
+ dataDir = "/Vault/data/paperless";
+ user = "paperless";
+ port = 28981;
+ passwordFile = config.sops.secrets.paperless_admin.path;
+ address = "127.0.0.1";
+ settings = {
+ PAPERLESS_OCR_LANGUAGE = "deu+eng";
+ PAPERLESS_URL = "https://scan.swarsel.win";
+ PAPERLESS_OCR_USER_ARGS = builtins.toJSON {
+ optimize = 1;
+ invalidate_digital_signatures = true;
+ pdfa_image_compression = "lossless";
+ };
+ PAPERLESS_TIKA_ENABLED = "true";
+ PAPERLESS_TIKA_ENDPOINT = "http://localhost:9998";
+ PAPERLESS_TIKA_GOTENBERG_ENDPOINT = "http://localhost:3001";
+ PAPERLESS_APPS = "allauth.socialaccount.providers.openid_connect";
+ PAPERLESS_SOCIALACCOUNT_PROVIDERS = builtins.toJSON {
+ openid_connect = {
+ OAUTH_PKCE_ENABLED = "True";
+ APPS = [
+ rec {
+ provider_id = "kanidm";
+ name = "Kanidm";
+ client_id = "paperless";
+ # secret will be added dynamically
+ #secret = "";
+ settings.server_url = "https://sso.swarsel.win/oauth2/openid/${client_id}/.well-known/openid-configuration";
+ }
+ ];
+ };
};
};
};
+
+ tika = {
+ enable = true;
+ port = 9998;
+ openFirewall = false;
+ listenAddress = "127.0.0.1";
+ enableOcr = true;
+ };
+
+ gotenberg = {
+ enable = true;
+ port = 3001;
+ bindIP = "127.0.0.1";
+ };
};
# Add secret to PAPERLESS_SOCIALACCOUNT_PROVIDERS
@@ -9759,8 +9778,8 @@ in
{ self, lib, pkgs, config, ... }:
@@ -10149,8 +10168,8 @@ This smashes Atmosphere 1.3.2 on the switch, which is what I am currenty using.
This holds configuration that is specific to framework laptops. @@ -10188,8 +10207,8 @@ This holds configuration that is specific to framework laptops.
{ lib, config, ... }:
@@ -10205,8 +10224,8 @@ This holds configuration that is specific to framework laptops.
{ lib, config, ... }:
@@ -10228,8 +10247,8 @@ This holds configuration that is specific to framework laptops.
{ lib, config, ... }:
@@ -10260,8 +10279,8 @@ This holds configuration that is specific to framework laptops.
{ lib, config, ... }:
@@ -13209,8 +13228,8 @@ The `extraConfig` section here CANNOT be reindented. This has something to do wi
{ lib, config, ... }:
@@ -14459,8 +14478,8 @@ in
This holds configuration that is specific to framework laptops. @@ -18300,8 +18319,8 @@ autocmd DocStart vc-impimba-1.m.imp.ac.at/ui/webconsole mode ignore
@@ -18798,7 +18817,7 @@ sync USER HOST: