feat: atuin

systems/zaatar/atuin.nix

@@ -0,0 +1,49 @@
+{config, ...}: let
+  inherit (import <niveum/lib>) tmpfilesConfig;
+  unstable = import <nixos-unstable> {inherit (config.nixpkgs) config;};
+in {
+  services.postgresql = {
+    enable = true;
+    dataDir = "/var/state/postgresql/${config.services.postgresql.package.psqlSchema}";
+    ensureDatabases = ["atuin"];
+    ensureUsers = [
+      {
+        name = "atuin";
+        ensurePermissions."DATABASE atuin" = "ALL PRIVILEGES";
+      }
+    ];
+  };
+
+  systemd.tmpfiles.rules = [
+    (tmpfilesConfig {
+      type = "d";
+      path = "/var/state/postgresql";
+      mode = "0700";
+      user = "postgres";
+      group = "postgres";
+    })
+  ];
+
+  users.groups.atuin = {};
+  users.users.atuin = {
+    isSystemUser = true;
+    group = "atuin";
+    home = "/run/atuin";
+    createHome = true;
+  };
+
+  systemd.services.atuin = {
+    wantedBy = ["multi-user.target"];
+    environment = {
+      ATUIN_HOST = "0.0.0.0";
+      ATUIN_PORT = "8888";
+      ATUIN_OPEN_REGISTRATION = "true";
+      ATUIN_DB_URI = "postgres:///atuin";
+    };
+    serviceConfig = {
+      User = "atuin";
+      ExecStart = "${unstable.atuin}/bin/atuin server start";
+    };
+  };
+  networking.firewall.allowedTCPPorts = [8888];
+}

systems/zaatar/configuration.nix

@@ -7,6 +7,7 @@
   inherit (import <niveum/lib>) retiolumAddresses restic;
 in {
   imports = [
+    ./atuin.nix
     ./backup.nix
     ./gaslight.nix
     ./hardware-configuration.nix