From 026de8cd2514105e0a760ae3de41f5554390dbb8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Leon=20Schwarz=C3=A4ugl?=
 <leon.schwarzaeugl@imba.oeaw.ac.at>
Date: Sun, 20 Jul 2025 16:00:28 +0200
Subject: [PATCH 1/4] fix: WLAN1 pw not set

---
 SwarselSystems.org               | 2 +-
 modules/nixos/client/network.nix | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/SwarselSystems.org b/SwarselSystems.org
index 86d4d15..c43b236 100644
--- a/SwarselSystems.org
+++ b/SwarselSystems.org
@@ -4874,7 +4874,7 @@ Here I only enable =networkmanager= and a few default networks. The rest of the
                 wifi-security = {
                   auth-alg = "open";
                   key-mgmt = "wpa-psk";
-                  psk = "WLAN1_PW";
+                  psk = "$WLAN1_PW";
                 };
               };
 
diff --git a/modules/nixos/client/network.nix b/modules/nixos/client/network.nix
index 27809ab..8f7ffc3 100644
--- a/modules/nixos/client/network.nix
+++ b/modules/nixos/client/network.nix
@@ -118,7 +118,7 @@ in
                 wifi-security = {
                   auth-alg = "open";
                   key-mgmt = "wpa-psk";
-                  psk = "WLAN1_PW";
+                  psk = "$WLAN1_PW";
                 };
               };
 

From 797be8015fbd472a315a6c3099384920b9605dbb Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Leon=20Schwarz=C3=A4ugl?=
 <leon.schwarzaeugl@imba.oeaw.ac.at>
Date: Sun, 20 Jul 2025 16:00:51 +0200
Subject: [PATCH 2/4] fix: koillection images lost in ephemeral storage

---
 SwarselSystems.org                   | 5 +++++
 modules/nixos/server/koillection.nix | 5 +++++
 2 files changed, 10 insertions(+)

diff --git a/SwarselSystems.org b/SwarselSystems.org
index c43b236..2f36c8b 100644
--- a/SwarselSystems.org
+++ b/SwarselSystems.org
@@ -9065,6 +9065,7 @@ To get other URLs (token, etc.), use https://<kanidmDomain>/oauth2/openid/<clien
     serviceName = "koillection";
     servicePort = 2282;
     serviceDomain = config.repo.secrets.common.services.domains.${serviceName};
+    serviceDir = "/Vault/data/koillection";
 
     postgresUser = config.systemd.services.postgresql.serviceConfig.User; # postgres
     postgresPort = config.services.postgresql.settings.port; # 5432
@@ -9096,6 +9097,10 @@ To get other URLs (token, etc.), use https://<kanidmDomain>/oauth2/openid/<clien
             "${toString servicePort}:80"
           ];
 
+          volumes = [
+            "${serviceDir}/uploads:/uploads"
+          ];
+
           environment = {
             APP_DEBUG = "0";
             APP_ENV = "prod";
diff --git a/modules/nixos/server/koillection.nix b/modules/nixos/server/koillection.nix
index 8db5b0d..9793337 100644
--- a/modules/nixos/server/koillection.nix
+++ b/modules/nixos/server/koillection.nix
@@ -5,6 +5,7 @@ let
   serviceName = "koillection";
   servicePort = 2282;
   serviceDomain = config.repo.secrets.common.services.domains.${serviceName};
+  serviceDir = "/Vault/data/koillection";
 
   postgresUser = config.systemd.services.postgresql.serviceConfig.User; # postgres
   postgresPort = config.services.postgresql.settings.port; # 5432
@@ -36,6 +37,10 @@ in
           "${toString servicePort}:80"
         ];
 
+        volumes = [
+          "${serviceDir}/uploads:/uploads"
+        ];
+
         environment = {
           APP_DEBUG = "0";
           APP_ENV = "prod";

From 2e6e8ba7fea7eec66c24eb4cf42e87ae6f4b0ba1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Leon=20Schwarz=C3=A4ugl?=
 <leon.schwarzaeugl@imba.oeaw.ac.at>
Date: Sun, 20 Jul 2025 16:01:19 +0200
Subject: [PATCH 3/4] fix: koillection not serving big collections

---
 SwarselSystems.org                   | 5 +++++
 modules/nixos/server/koillection.nix | 5 +++++
 2 files changed, 10 insertions(+)

diff --git a/SwarselSystems.org b/SwarselSystems.org
index 2f36c8b..07eaa1c 100644
--- a/SwarselSystems.org
+++ b/SwarselSystems.org
@@ -9179,6 +9179,11 @@ To get other URLs (token, etc.), use https://<kanidmDomain>/oauth2/openid/<clien
             locations = {
               "/" = {
                 proxyPass = "http://${serviceName}";
+                extraConfig = ''
+                  proxy_buffer_size          128k;
+                  proxy_buffers              4 256k;
+                  proxy_busy_buffers_size    256k;
+                '';
               };
             };
           };
diff --git a/modules/nixos/server/koillection.nix b/modules/nixos/server/koillection.nix
index 9793337..3ebb23b 100644
--- a/modules/nixos/server/koillection.nix
+++ b/modules/nixos/server/koillection.nix
@@ -119,6 +119,11 @@ in
           locations = {
             "/" = {
               proxyPass = "http://${serviceName}";
+              extraConfig = ''
+                proxy_buffer_size          128k;
+                proxy_buffers              4 256k;
+                proxy_busy_buffers_size    256k;
+              '';
             };
           };
         };

From 8ceb7f9868924a8db7f502e7d19e45c8fe775126 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Leon=20Schwarz=C3=A4ugl?=
 <leon.schwarzaeugl@imba.oeaw.ac.at>
Date: Sun, 20 Jul 2025 16:01:36 +0200
Subject: [PATCH 4/4] chore: backup more dirs

---
 SwarselSystems.org              | 5 +++++
 modules/nixos/server/restic.nix | 5 +++++
 2 files changed, 10 insertions(+)

diff --git a/SwarselSystems.org b/SwarselSystems.org
index 07eaa1c..abf3b0f 100644
--- a/SwarselSystems.org
+++ b/SwarselSystems.org
@@ -7696,6 +7696,11 @@ This manages backups for my pictures and obsidian files.
               passwordFile = config.sops.secrets.resticpw.path;
               paths = [
                 "/Vault/data/paperless"
+                "/Vault/data/koillection"
+                "/Vault/data/postgresql"
+                "/Vault/data/firefly-iii"
+                "/Vault/data/radicale"
+                "/Vault/data/matrix-synapse"
                 "/Vault/Eternor/Paperless"
                 "/Vault/Eternor/Bilder"
                 "/Vault/Eternor/Immich"
diff --git a/modules/nixos/server/restic.nix b/modules/nixos/server/restic.nix
index eb492b1..f668104 100644
--- a/modules/nixos/server/restic.nix
+++ b/modules/nixos/server/restic.nix
@@ -31,6 +31,11 @@ in
             passwordFile = config.sops.secrets.resticpw.path;
             paths = [
               "/Vault/data/paperless"
+              "/Vault/data/koillection"
+              "/Vault/data/postgresql"
+              "/Vault/data/firefly-iii"
+              "/Vault/data/radicale"
+              "/Vault/data/matrix-synapse"
               "/Vault/Eternor/Paperless"
               "/Vault/Eternor/Bilder"
               "/Vault/Eternor/Immich"