feat: add grimm dwb scroller

configs/ssh.nix

@@ -7,8 +7,16 @@
   inherit (import <niveum/lib>) sshPort kieran;
   externalNetwork = import <niveum/lib/external-network.nix>;
   sshIdentity = name: "${config.users.users.me.home}/.ssh/${name}";
+  ssh-passphease = lib.strings.fileContents <system-secrets/ssh/passphrase>;
 in {
-  services.xserver.displayManager.sessionCommands = "${pkgs.openssh}/bin/ssh-add";
+  services.xserver.displayManager.sessionCommands = toString (pkgs.writeScript "ssh-add" ''
+    #!${pkgs.expect}/bin/expect -f
+    spawn ${pkgs.openssh}/bin/ssh-add
+    expect "Enter passphrase for *:"
+    send "${ssh-passphrase}\n";
+    expect "Identity added: *"
+    interact
+  '');
 
   programs.ssh.startAgent = true;
 

flake.lock

@@ -126,11 +126,11 @@
     },
     "nixos-unstable": {
       "locked": {
-        "lastModified": 1661450036,
-        "narHash": "sha256-0/9UyJLtfWqF4uvOrjFIzk8ue1YYUHa6JIhV0mALkH0=",
+        "lastModified": 1660305968,
+        "narHash": "sha256-r0X1pZCSEA6mzt5OuTA7nHuLmvnbkwgpFAh1iLIx4GU=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "f3d0897be466aa09a37f6bf59e62c360c3f9a6cc",
+        "rev": "c4a0efdd5a728e20791b8d8d2f26f90ac228ee8d",
         "type": "github"
       },
       "original": {
@@ -195,11 +195,11 @@
     "scripts": {
       "flake": false,
       "locked": {
-        "lastModified": 1660677220,
-        "narHash": "sha256-cCmyI4CigWbeQ0wEiE9HSI2Hmd3Wi5P7jhdHX6bJkXU=",
+        "lastModified": 1662493500,
+        "narHash": "sha256-EdAEKDQ6z7oinqQ28ELE3+taJ106DgmhNJt/rpqHJic=",
         "owner": "kmein",
         "repo": "scripts",
-        "rev": "688e141047e831a7e5f58dd24e00de51a3cb2345",
+        "rev": "51c641ac3c1100d80313696663db70c2eb3698dc",
         "type": "github"
       },
       "original": {

systems/makanek/configuration.nix

@@ -17,6 +17,7 @@ in {
     ./monitoring
     ./moodle-dl-borsfaye.nix
     ./names.nix
+    ./grimm.nix
     ./nextcloud.nix
     ./radio-news.nix
     ./radio.nix

systems/makanek/grimm.nix

@@ -0,0 +1,30 @@
+{pkgs, ...}: let
+  port = 9610;
+  web-socket-sink-src = "${<scripts>}/grimm-scroller";
+  web-socket-sink = pkgs.callPackage web-socket-sink-src {};
+  lemmata = "${web-socket-sink-src}/dwb-compact.json";
+in {
+  systemd.services.grimm-ws = {
+    wantedBy = ["multi-user.target"];
+    script = "${web-socket-sink}/bin/web-socket-sink --host 0.0.0.0 --port ${toString port} < ${lemmata}";
+    serviceConfig = {
+      Restart = "always";
+      DynamicUser = true;
+    };
+  };
+
+  services.nginx.virtualHosts."grimm.kmein.de" = {
+    enableACME = false;
+    forceSSL = false;
+    locations = {
+      "/".root = pkgs.linkFarm "grimm" [
+        {
+          name = "index.html";
+          path = "${web-socket-sink-src}/wclient.html";
+        }
+      ];
+    };
+  };
+
+  networking.firewall.allowedTCPPorts = [port];
+}