;; Indicate which modules to import to access the variables
;; used in this configuration.
(use-modules (gnu))
(use-package-modules databases)
(use-service-modules cups desktop networking ssh xorg docker dbus databases)

(operating-system
  (locale "en_US.utf8")
  (timezone "America/Chicago")
  (keyboard-layout (keyboard-layout "us"))
  (host-name "excellon")

  ;; The list of user accounts ('root' is implicit).
  (users
    (cons* (user-account
             (name "bartronx7")
             (comment "bartronx7")
             (group "users")
             (home-directory "/home/bartronx7")
             (supplementary-groups '("wheel" "netdev" "audio" "video" "docker")))
           %base-user-accounts))

  ;; Below is the list of system services.  To search for available
  ;; services, run 'guix system search KEYWORD' in a terminal.
  (services
   (append (list
      ;; To configure OpenSSH, pass an 'openssh-configuration'
      ;; record as a second argument to 'service' below.
      (service openssh-service-type)
      (service dhcp-client-service-type)
      (service ntp-service-type)
      (service elogind-service-type
        (elogind-configuration (handle-suspend-key 'ignore)))
      (service dbus-root-service-type)
      (service containerd-service-type)
      (service docker-service-type (docker-configuration
        (environment-variables (list
          "TMPDIR=/tmp/dockerd"))))

      (service oci-container-service-type (list

        (oci-container-configuration
          (image "localhost:5000/caddy:latest")
          (provision "caddy")
          (respawn? #t)
          (network "sandbox")
          (ports '(
            ("80" . "80")
            ("443" . "443")))
          (environment (list
            '("NAMECHEAP_API_KEY" . "af43a35060854eb98fd0c0837113a384")
            '("NAMECHEAP_API_USER" . "bakeley")
            '("PUBLIC_IP" . "70.112.209.162")))
          (volumes (list
            '("/data/docker/volumes/caddy/Caddyfile" . "/etc/caddy/Caddyfile")
            '("/data/docker/volumes/caddy/data" . "/data")
            '("/data/docker/volumes/caddy/config" . "/config"))))

        (oci-container-configuration
          (image "docker.io/actualbudget/actual-server:latest")
          (provision "actual")
          (network "sandbox")
          (ports '(
            ("5006" . "5006")))
          (volumes (list
            '("/data/docker/volumes/actual/data" . "/data"))))

        (oci-container-configuration
          (image "miniflux/miniflux:latest")
          (provision "miniflux")
          (network "sandbox")
          (requirement '(miniflux-db))
          (ports '(
            ("8081" . "8080")))
          (environment (list
            '("DATABASE_URL" . "postgres://miniflux:99uskas0_l@miniflux-db/miniflux?sslmode=disable")
            '("RUN_MIGRATIONS" . "1")
            '("CREATE_ADMIN" . "1")
            '("ADMIN_USERNAME" . "admin")
            '("ADMIN_PASSWORD" . "982#@2gGGHjf"))))

        (oci-container-configuration
          (image "docker.io/postgres:17-alpine")
          (provision "miniflux-db")
          (network "sandbox")
          (ports '(
            ("5432" . "5432")))
          (environment (list
            '("POSTGRES_USER" . "miniflux")
            '("POSTGRES_PASSWORD" . "99uskas0_l")
            '("POSTGRES_DB" . "miniflux")))
          (volumes (list
            '("/data/docker/volumes/miniflux_db" . "/var/lib/postgresql/data"))))

        (oci-container-configuration
          (image "codeberg.org/forgejo/forgejo:10")
          (provision "forgejo")
          (network "sandbox")
          (ports '(
            ("3000" . "3000")
            ("2222" . "22")))
          (environment (list
            '("USER_UID" . "1000")
            '("USER_GID" . "1000")))
          (volumes (list
            '("/data/docker/volumes/forgejo" . "/data")
            '("/etc/timezone" . "/etc/timezone:ro")
            '("/etc/localtime" . "/etc/localtime:ro"))))

        (oci-container-configuration
          (image "packetriot/pktriot:latest")
          (provision "pktriot")
          (respawn? #t)
          (network "sandbox")
          (volumes (list
            '("/data/docker/volumes/pktriot" . "/data:rw"))))

        (oci-container-configuration
          (image "plexinc/pms-docker")
          (provision "plex")
          (network "sandbox")
          (extra-arguments '("--device=/dev/dvb"))
          (ports '(
            ("32400" . "32400")
            ("8324"  . "8324")
            ("32469" . "32469")
            ("1900"  . "1900")
            ("32410" . "32410")
            ("32412" . "32412")
            ("32413" . "32413")
            ("32414" . "32414")))
          (environment (list
            '("TZ" . "America/Chicago")
            '("PLEX_CLAIM:" . "claim-7-N1LVT5AMco6ayhy4Tm")
            '("ADVERTISE_IP:" . "http://192.168.1.3:32400/")))
          (volumes (list
            '("/data/docker/volumes/plex/config" . "/config")
            '("/data/docker/volumes/plex/transcode" . "/transcode")
            '("/data" . "/data:rw"))))

        (oci-container-configuration
          (image "jellyfin/jellyfin:latest")
          (provision "jellyfin")
          (network "sandbox")
          (ports '(
            ("8096" . "8096")))
          (volumes (list
            '("/data/docker/volumes/jellyfin/config" . "/config")
            '("/data/docker/volumes/jellyfin/cache" . "/cache")
            '("/data/shows" . "/shows")
            '("/data/movies" . "/movies")
            '("/data/music" . "/music"))))
            
        (oci-container-configuration
          (image "lscr.io/linuxserver/sonarr:latest")
          (provision "sonarr")
          (requirement '(prowlarr))
          (network "sandbox")
          (ports '(
            ("8989" . "8989")))
          (environment (list
            '("PUID" . "1000")
            '("PGID" . "1000")
            '("TZ" . "US/America/Chicago")))
          (volumes (list
            '("/data/docker/volumes/sonarr/config" . "/config")
            '("/data/shows" . "/data/shows")
            '("/data/downloads" . "/data/downloads"))))

        (oci-container-configuration
          (image "ghcr.io/hotio/radarr:latest")
          (provision "radarr")
          (requirement '(prowlarr))
          (network "sandbox")
          (ports '(
            ("7878" . "7878")))
          (environment (list
            '("PUID" . "1000")
            '("PGID" . "1000")
            '("UMASK" . "002")
            '("TZ" . "US/America/Chicago")))
          (volumes (list
            '("/data/docker/volumes/radarr/config" . "/config")
            '("/data/downloads" . "/data/downloads")
            '("/data/movies" . "/data/movies"))))

        (oci-container-configuration
          (image "ghcr.io/hotio/prowlarr:latest")
          (provision "prowlarr")
          (network "sandbox")
          (ports '(
            ("9696" . "9696")))
          (environment (list
            '("PUID" . "1000")
            '("PGID" . "1000")
            '("TZ" . "US/America/Chicago")))
          (volumes (list
            '("/data/docker/volumes/prowlarr/config" . "/config"))))

        (oci-container-configuration
          (image "ghcr.io/hotio/nzbget:latest")
          (provision "nzbget")
          (network "sandbox")
          (ports '(
            ("6789" . "6789")))
          (environment (list
            '("PUID" . "1000")
            '("PGID" . "1000")
            '("UMASK" . "002")
            '("TZ" . "US/America/Chicago")))
          (volumes (list
            '("/data/docker/volumes/nzbget/config" . "/config")
            '("/data/downloads" . "/data/downloads")
            '("/data/movies" . "/data/movies")
            '("/data/shows" . "/data/shows"))))

        (oci-container-configuration
            (image "drakkan/sftpgo:latest")
            (provision "sftpgo")
            (network "sandbox")
            (ports '(
              ("8082" . "8080")
              ("2022" . "2022")))
            (volumes (list
              '("/data/movies" . "/movies")
              '("/data/shows" . "/shows")
              '("/data/music" . "/music")
              '("/data/pictures" . "/pictures"))))

        (oci-container-configuration
            (image "ghcr.io/immich-app/immich-server:release")
            (provision "immich-server")
            (network "sandbox")
            (requirement '(immich-redis immich-postgres))
            (volumes (list
              '("/data/docker/volumes/immich/server" . "/data")
              '("/data/docker/volumes/immich/pgdata" . "/db")
              '("/data/pictures" . "/pictures")
              '("/etc/localtime" . "/etc/localtime")
            ))
            (environment (list
              '("DB_DATA_LOCATION" . "/db")
              '("DB_HOSTNAME" . "immich-postgres")
              '("DB_DATABASE_NAME" . "immich")
              '("DB_USERNAME" . "immich")
              '("DB_PASSWORD" . "i7_qpV3$0o")
              '("REDIS_HOSTNAME" . "immich-redis")))
            (ports '(
              ("2283" . "2283"))))

        (oci-container-configuration
          (image "ghcr.io/immich-app/immich-machine-learning:release")
          (provision "immich-ml")
          (network "sandbox")
          (respawn? #t)
          (volumes (list
            '("/data/docker/volumes/immich/ml/cache" . "/cache"))))

        (oci-container-configuration
          (image "docker.io/valkey/valkey:8-bookworm")
          (provision "immich-redis")
          (network "sandbox")
          (respawn? #t)
          (volumes (list
            '("/data/docker/volumes/immich/valkey" . "/data"))))

        (oci-container-configuration
          (image "ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0")
          (provision "immich-postgres")
          (network "sandbox")
          (respawn? #t)
          (environment (list
            '("POSTGRES_PASSWORD" . "i7_qpV3$0o")
            '("POSTGRES_USER" . "immich")
            '("POSTGRES_DB" . "immich")
            '("POSTGRES_INITDB_ARGS" . "--data-checksums")
            '("DB_STORAGE_TYPE" . "HDD")))
          (volumes (list
            '("/data/docker/volumes/immich/pgdata" . "/var/lib/postgresql/data"))))

        (oci-container-configuration
          (image "registry.gitlab.com/fmd-foss/fmd-server:latest")
          (provision "fmd")
          (network "sandbox")
          (respawn? #t)
          (ports '(("8080" . "8080"))))

      ))) %base-services))

  (bootloader (bootloader-configuration
                (bootloader grub-bootloader)
                (targets (list "/dev/sda"))
                (keyboard-layout keyboard-layout)))

  ;; The devices that make up the luks "docs" labelled filesystem
  (mapped-devices
   (list (mapped-device
          (source (uuid "cf6bafca-b225-46ca-8dfc-b82fb6ab5560"))
          (target "doc1")
          (type luks-device-mapping))
        (mapped-device
          (source (uuid "05f833fb-1c68-4453-9df5-68a454f59845"))
          (target "doc2")
          (type luks-device-mapping))))

  ;; The list of file systems that get "mounted".  The unique
  ;; file system identifiers there ("UUIDs") can be obtained
  ;; by running 'blkid' in a terminal.
  (file-systems
    (cons*  (file-system
              (mount-point "/")
              (device (file-system-label "guixos"))
              (type "btrfs"))

            (file-system
              (mount-point "/data")
              (device (file-system-label "datapool"))
              (type "btrfs"))

            (file-system
              (mount-point "/docs")
              (device "/dev/mapper/doc1")
              (type "btrfs"))

            %base-file-systems)))