From aff1392b13112b8c7d6e2b1d9f5d381f1e9bb235 Mon Sep 17 00:00:00 2001
From: Quinn Unger <quinn.unger@pm.me>
Date: Thu, 13 Aug 2026 14:32:32 +0100
Subject: [PATCH] fixup tsumugi config

---
 hosts/tsumugi/arr/default.nix   |  5 ++++-
 hosts/tsumugi/immich.nix        | 23 +++++++++++++++++++++++
 hosts/tsumugi/networkMounts.nix |  3 +--
 secrets/secrets.yaml            |  6 +++---
 4 files changed, 31 insertions(+), 6 deletions(-)
 create mode 100644 hosts/tsumugi/immich.nix

diff --git a/hosts/tsumugi/arr/default.nix b/hosts/tsumugi/arr/default.nix
index 05fa422..0c9f96d 100644
--- a/hosts/tsumugi/arr/default.nix
+++ b/hosts/tsumugi/arr/default.nix
@@ -14,7 +14,10 @@
   ];
 
   sops.secrets."tsumugi/autobrrSecret" = { };
-  sops.secrets."tsumugi/bandcampCookies".owner = config.users.users.bandcampsync.name;
+  sops.secrets."tsumugi/bandcampCookies" = {
+    owner = config.users.users.bandcampsync.name;
+    restartUnits = [ "bandcampsync.service" ];
+  };
 
   services = {
     plex = {
diff --git a/hosts/tsumugi/immich.nix b/hosts/tsumugi/immich.nix
new file mode 100644
index 0000000..c7056ea
--- /dev/null
+++ b/hosts/tsumugi/immich.nix
@@ -0,0 +1,23 @@
+{
+  inputs,
+  config,
+  pkgs,
+  lib,
+  ...
+}:
+let
+  unstable = inputs.unstable.legacyPackages.${pkgs.stdenv.hostPlatform.system};
+in
+lib.mkMerge [
+  (lib.mkAssert (lib.versionOlder config.services.immich.package.version "4")
+    "Immich has updated to a new major version, please ensure all required upgrade steps are taken"
+    { }
+  )
+  {
+    services.immich = {
+      package = unstable.immich;
+      mediaLocation = "/mnt/clientmedia/immich";
+      renderDevices = [ "/dev/dri/renderD128" ];
+    };
+  }
+]
diff --git a/hosts/tsumugi/networkMounts.nix b/hosts/tsumugi/networkMounts.nix
index 413d439..f62f5a9 100644
--- a/hosts/tsumugi/networkMounts.nix
+++ b/hosts/tsumugi/networkMounts.nix
@@ -6,7 +6,6 @@
   ...
 }:
 let
-  hardMount = true;
   mntBenisuzume = name: {
     fsType = "nfs";
     device = "10.0.4.3:/var/nfs/shared/${name}";
@@ -28,7 +27,7 @@ in
   sops.secrets."benisuzume/cifs" = { };
 
   fileSystems."/mnt/media" = mntBenisuzume "media";
-  fileSystems."/mnt/gameservers" = mntBenisuzume "gameservers";
+  fileSystems."/mnt/clientmedia" = mntBenisuzume "clientmedia";
 
   services.cachefilesd = {
     enable = true;
diff --git a/secrets/secrets.yaml b/secrets/secrets.yaml
index 24b28ab..043bb97 100644
--- a/secrets/secrets.yaml
+++ b/secrets/secrets.yaml
@@ -14,7 +14,7 @@ tsumugi:
     radarrAnimeApiKey: ENC[AES256_GCM,data:Dn9LmPjgmGYlIoi0nV760R8v5nbu0iVtEO5rhgkpDGA=,iv:17YeBObcUP+AmAB2DHHRvgRZNfe2TdQ6+IsWV7qYqS8=,tag:1KLlrXSHM5CKZKP02KFSrw==,type:str]
     sonarrMainApiKey: ENC[AES256_GCM,data:sFRU0zRxmVZT8SVkmJIec+4m/s3rL60Y1nbkSXBD7Us=,iv:VmzsoJp/7FIAJSAjs/LCvs8iwOVWNL31p12d49lywHI=,tag:WX3JuJDjdAG2jpcVHichOA==,type:str]
     sonarrAnimeApiKey: ENC[AES256_GCM,data:19WNqd26ZSOMlDaGCkqnhQ7wBDR3BiTNX/DcTnReaoQ=,iv:wVlqszGwacGOJTRSzV9hOKdymBskjwdPigpsW/7jvqg=,tag:2azzn1/kHvhgGoNFDt84CA==,type:str]
-    bandcampCookies: ENC[AES256_GCM,data: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,iv:YDaMXwVo9unTJsg21gUOaneQKosGix5GByo8b2NBFFk=,tag:dc1UEK5T8JHMcYi+O+ewdw==,type:str]
+    bandcampCookies: ENC[AES256_GCM,data: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,iv:yOW/7t3Ke1TGILL+tBXvfE288OkNE9TSF8i7Dg/UQ10=,tag:dZSTo0+IO0HFpq09AT+QfQ==,type:str]
 lala:
     netbird:
         coturnPass: ENC[AES256_GCM,data:Fg9L5wYvnt30o5ZIeqlbJRKMqEMH44GUohALMXbNzrcna0Yg5LmaLCaufRs=,iv:aB7DnpO12N7uKkzkm+uzTlT+ZgSfcj8fnobyJ74Kwnk=,tag:H219S1nkkFroDoud/nZ6bA==,type:str]
@@ -77,7 +77,7 @@ sops:
             JFaroA1RPAmhCC0nSl4seBSIuRl8QrPjfcBJy4mFycll5Mp/0/WwLA==
             -----END AGE ENCRYPTED FILE-----
           recipient: age1cpqgsevvfgk0nnmxacsdcwsrkefd0xcx7wkdlyaqj8vgvfvnm4rq4npjv6
-    lastmodified: "2026-08-11T15:10:29Z"
-    mac: ENC[AES256_GCM,data:bblWFd8qihBcpmKCBW8lQWoDuSrUjqa+6AZTc7C6MqwMbGHtuDK1Tk1kwETqvgi9Nu2XFkacQ70CzkcIHRgw/OspuYKOrrqEjcIonbBiESNpqiDQp6S2mzxQSonyLo6yaMN1HcGMf2m1EGBUQGeePPNbtb3ojAI+5IOJf5+058o=,iv:/NWWvR0DOnCEx9WT5B8Kp2JMf4Av9BIWwzW9p8CX2Bo=,tag:R1yiGf/Ob1udo0l9Xmk02g==,type:str]
+    lastmodified: "2026-08-13T13:01:25Z"
+    mac: ENC[AES256_GCM,data:raik4hSmc5j+KCGRAQo+k7C1y8nshN+uwFdJOQ0J49KLWP3+Rj6xh9lSXMBOixFfYavehRP4vR/GFkFh7DlJ+XCZJWZUxKay+WffFbb7frwFg4XIiCSaXlddy6tcKNrq3Fpmz0RDQeMM9u/QQKu3oF+3kJQrgo6IuRtkE7iv+wQ=,iv:p3ri96GxZMzEP29VS1wL5fibRseZZmzaptzhRssdJa4=,tag:7AkxQt15dIc9ZATzyvtMvw==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.13.3
-- 
2.54.0