Updated nix flake and ported over existing config

config/ai.nix

@@ -40,7 +40,7 @@
     host = "0.0.0.0";
     openFirewall = true;
     # Make sure this path is created and has the permissions of ollama:ollama.
-    models = "/mnt/storage/models";
+    modelsDir = "/mnt/storage/models";
     environmentVariables = {
         OLLAMA_CONTEXT_LENGTH = "8192";
     };

config/logging.nix

@@ -25,6 +25,9 @@
           http_port = 3000;
           domain = "grafana.randomctf.lan";
       };
+      # Legacy default secret key, kept so existing datasource secrets
+      # in the database remain decryptable.
+      settings.security.secret_key = "SW2YcwTIb9zpOOhoPsMm";
   };
 
   services.nginx = {

config/omen.nix

@@ -57,7 +57,7 @@
 
   # System Packages
   environment.systemPackages = with pkgs; [
-    pinentry-gtk2
+    pinentry-gnome3
     protonmail-bridge
     pass
 
@@ -78,7 +78,7 @@
     path = with pkgs; [
       pass
       gnupg
-      pinentry-gtk2
+      pinentry-gnome3
     ];
     serviceConfig = {
       Restart = "always";

config/shared.nix

@@ -56,7 +56,7 @@
   # Setup Pinentry
   programs.gnupg.agent = {
     enable = true;
-    pinentryPackage = pkgs.pinentry-gtk2;
+    pinentryPackage = pkgs.pinentry-gnome3;
     enableSSHSupport = true;
   };