From 2bca44f57805e1917977d273869631e0fdd4db53 Mon Sep 17 00:00:00 2001
From: Noah Pederson <noah@packetlost.dev>
Date: Fri, 7 Aug 2026 09:59:51 -0500
Subject: [PATCH] Update ngp-nur, add celld

---
 host-specific/odin/networking.nix |  2 ++
 host-specific/odin/services.nix   | 10 ++++++++++
 2 files changed, 12 insertions(+)

diff --git a/host-specific/odin/networking.nix b/host-specific/odin/networking.nix
index 0d1d7a4..b89a739 100644
--- a/host-specific/odin/networking.nix
+++ b/host-specific/odin/networking.nix
@@ -41,6 +41,8 @@
     interfaces.tailscale0.allowedTCPPorts = [
       80
       443
+      # celld application and private peer traffic
+      8082
     ];
     extraInputRules = ''
       ip saddr 192.168.1.3 tcp dport 6555 accept comment "Spindle proxy from Misaki"
diff --git a/host-specific/odin/services.nix b/host-specific/odin/services.nix
index 7f0a032..b661466 100644
--- a/host-specific/odin/services.nix
+++ b/host-specific/odin/services.nix
@@ -9,6 +9,7 @@ let
 in
 {
   imports = [
+    inputs.ngp-nur.nixosModules.celld
     inputs.microcosm-rs.nixosModules.default
     inputs.tangled.nixosModules.spindle
   ];
@@ -35,6 +36,15 @@ in
     enable = true;
   };
 
+  # With no external S3 configuration, the celld module provisions a local
+  # single-node Garage cluster and initializes its bucket and credentials.
+  services.celld = {
+    enable = true;
+    listenAddress = "0.0.0.0";
+    port = 8082;
+    advertise = "odin:8082";
+  };
+
   services.microcosm.constellation = {
     enable = false;
     jetstream = "us-east-1";
-- 
2.51.2