feat: add grimm dwb scroller

Flake lock file updates:

• Updated input 'home-manager':
    'github:nix-community/home-manager/0160a0cef076294127f8cc0750019410ab94370d' (2022-08-22)
  → 'github:nix-community/home-manager/d89bdff445eadff03fe414e9c30486bc8166b72b' (2022-08-27)
• Updated input 'nixos-stable':
    'github:NixOS/nixpkgs/52527082ea267fe486f0648582d57c85486b2031' (2022-08-22)
  → 'github:NixOS/nixpkgs/f11e12ac6af528c1ba12426ce83cee26f21ceafd' (2022-08-26)
• Updated input 'nixos-unstable':
    'github:NixOS/nixpkgs/c4a0efdd5a728e20791b8d8d2f26f90ac228ee8d' (2022-08-12)
  → 'github:NixOS/nixpkgs/f3d0897be466aa09a37f6bf59e62c360c3f9a6cc' (2022-08-25)

configs/default.nix

@@ -30,6 +30,12 @@ in {
             tocharian-font = pkgs.callPackage <niveum/packages/tocharian-font.nix> {};
             iolanguage = pkgs.callPackage <niveum/packages/iolanguage.nix> {};
             ix = pkgs.callPackage <niveum/packages/ix.nix> {};
+            rofi-pass = pkgs.rofi-pass.overrideAttrs (final: previous: {
+              patches = [
+                # password store androi
+                <niveum/packages/rofi-pass.patch>
+              ];
+            });
           };
         };
         overlays = [

configs/ssh.nix

@@ -7,8 +7,16 @@
   inherit (import <niveum/lib>) sshPort kieran;
   externalNetwork = import <niveum/lib/external-network.nix>;
   sshIdentity = name: "${config.users.users.me.home}/.ssh/${name}";
+  ssh-passphease = lib.strings.fileContents <system-secrets/ssh/passphrase>;
 in {
-  services.xserver.displayManager.sessionCommands = "${pkgs.openssh}/bin/ssh-add";
+  services.xserver.displayManager.sessionCommands = toString (pkgs.writeScript "ssh-add" ''
+    #!${pkgs.expect}/bin/expect -f
+    spawn ${pkgs.openssh}/bin/ssh-add
+    expect "Enter passphrase for *:"
+    send "${ssh-passphrase}\n";
+    expect "Identity added: *"
+    interact
+  '');
 
   programs.ssh.startAgent = true;
 

flake.lock

@@ -23,11 +23,11 @@
         "utils": "utils"
       },
       "locked": {
-        "lastModified": 1661201353,
-        "narHash": "sha256-hee34c72DNz1Otj86b2NEc4s1JQ+qnIb1XyWuUD4v6o=",
+        "lastModified": 1661573386,
+        "narHash": "sha256-pBEg8iY00Af/SAtU2dlmOAv+2x7kScaGlFRDjNoVJO8=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "0160a0cef076294127f8cc0750019410ab94370d",
+        "rev": "d89bdff445eadff03fe414e9c30486bc8166b72b",
         "type": "github"
       },
       "original": {
@@ -110,11 +110,11 @@
     },
     "nixos-stable": {
       "locked": {
-        "lastModified": 1661187878,
-        "narHash": "sha256-/wCqoQB1BsaVi4nb8Iz0PreeBNMTim0p78NLtyWejFE=",
+        "lastModified": 1661520432,
+        "narHash": "sha256-9z+WDeXiu3hobvSsL0SbHDx4s+kFmm8eussySuX4zCM=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "52527082ea267fe486f0648582d57c85486b2031",
+        "rev": "f11e12ac6af528c1ba12426ce83cee26f21ceafd",
         "type": "github"
       },
       "original": {
@@ -195,11 +195,11 @@
     "scripts": {
       "flake": false,
       "locked": {
-        "lastModified": 1660677220,
-        "narHash": "sha256-cCmyI4CigWbeQ0wEiE9HSI2Hmd3Wi5P7jhdHX6bJkXU=",
+        "lastModified": 1662493500,
+        "narHash": "sha256-EdAEKDQ6z7oinqQ28ELE3+taJ106DgmhNJt/rpqHJic=",
         "owner": "kmein",
         "repo": "scripts",
-        "rev": "688e141047e831a7e5f58dd24e00de51a3cb2345",
+        "rev": "51c641ac3c1100d80313696663db70c2eb3698dc",
         "type": "github"
       },
       "original": {

packages/rofi-pass.patch

@@ -0,0 +1,12 @@
+diff --git a/rofi-pass b/rofi-pass
+index 48928db..13682a5 100755
+--- a/rofi-pass
++++ b/rofi-pass
+@@ -15,7 +15,7 @@ _image_viewer () {
+
+ # We expect to find these fields in pass(1)'s output
+ URL_field='url'
+-USERNAME_field='user'
++USERNAME_field='login'
+ AUTOTYPE_field='autotype'
+ OTPmethod_field='otp_method'

packages/scripts/default.nix

@@ -433,7 +433,7 @@ in
     scanned = pkgs.writers.writeDashBin "scanned" ''
       [ $# -eq 1 -a -f "$1" -a -r "$1" ] || exit 1
 
-      ${pkgs.imagemagick}/bin/convert -density 150 "$1" -colorspace gray -linear-stretch 3.5%x10% -blur 0x0.5 -attenuate 0.25 +noise Gaussian "scanned-$1"
+      ${pkgs.imagemagick}/bin/convert -density 150 "$1" -rotate 0.5 -attenuate 0.25 +noise Multiplicative -colorspace Gray "scanned-$1"
     '';
 
     nix-index-update = pkgs.writers.writeDashBin "nix-index-update" ''

systems/makanek/configuration.nix

@@ -17,6 +17,7 @@ in {
     ./monitoring
     ./moodle-dl-borsfaye.nix
     ./names.nix
+    ./grimm.nix
     ./nextcloud.nix
     ./radio-news.nix
     ./radio.nix

systems/makanek/grimm.nix

@@ -0,0 +1,30 @@
+{pkgs, ...}: let
+  port = 9610;
+  web-socket-sink-src = "${<scripts>}/grimm-scroller";
+  web-socket-sink = pkgs.callPackage web-socket-sink-src {};
+  lemmata = "${web-socket-sink-src}/dwb-compact.json";
+in {
+  systemd.services.grimm-ws = {
+    wantedBy = ["multi-user.target"];
+    script = "${web-socket-sink}/bin/web-socket-sink --host 0.0.0.0 --port ${toString port} < ${lemmata}";
+    serviceConfig = {
+      Restart = "always";
+      DynamicUser = true;
+    };
+  };
+
+  services.nginx.virtualHosts."grimm.kmein.de" = {
+    enableACME = false;
+    forceSSL = false;
+    locations = {
+      "/".root = pkgs.linkFarm "grimm" [
+        {
+          name = "index.html";
+          path = "${web-socket-sink-src}/wclient.html";
+        }
+      ];
+    };
+  };
+
+  networking.firewall.allowedTCPPorts = [port];
+}

systems/makanek/urlwatch.nix

@@ -114,6 +114,10 @@
       url = "https://www.deutschlandfunk.de/meine-nacht-schlaeft-nicht-pflanze-mich-nicht-in-dein-herz.700.de.html?dram:article_id=486475";
       filter = [{element-by-class = "dlf-articledetail";} "html2text" "strip"];
     }
+    {
+      name = "Ist der Congress schon abgesagt?";
+      url = "https://ist-der-congress-schon-abgesagt.de/";
+    }
     {
       name = "fxght.or.flxght";
       url = "https://api.tellonym.me/profiles/name/fxght.or.flxght?limit=20";