flake.nix

@@ -23,11 +23,11 @@
         disko.nixosModules.disko
         srvos.nixosModules.common
         srvos.nixosModules.mixins-systemd-boot
-        inputs.lanzaboote.nixosModules.lanzaboote
       ];
 
       systems.hosts.thonkpad.modules = [
         inputs.nixos-hardware.nixosModules.lenovo-thinkpad-x1-12th-gen
+        inputs.lanzaboote.nixosModules.lanzaboote
       ];
       systems.hosts.thonkpad.specialArgs = {
         inherit userdata;
@@ -101,6 +101,7 @@
     nil.inputs.nixpkgs.follows = "nixpkgs";
 
     nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
+    nixpkgs-immich.url = "github:nixos/nixpkgs/d026e3fa1ad0d78d9072d9afdeae515d2d68acae";
     nixos-hardware.url = "github:nixos/nixos-hardware";
 
     nur.url = "github:nix-community/nur";

modules/nixos/services/backup/default.nix

@@ -3,7 +3,9 @@
   lib,
   ...
 }:
-with lib; {
+with lib; let
+  inherit (utils.systemdUtils.unitOptions) unitOption;
+in {
   options.snowflake.services.backups = {
     enable = mkEnableOption "Enable restic backup service";
 
@@ -25,7 +27,7 @@ with lib; {
       default = {};
       type = types.attrsOf (
         types.submodule (
-          {lib, ...}: {
+          {_}: {
             options = {
               dynamicFilesFrom = mkOption {
                 type = types.nullOr types.str;
@@ -61,6 +63,7 @@ with lib; {
               };
 
               timerConfig = mkOption {
+                type = types.attrsOf unitOption;
                 default = {
                   OnCalendar = "daily";
                 };

modules/nixos/services/immich/default.nix

@@ -1,9 +1,13 @@
 {
   config,
+  inputs,
   lib,
-  pkgs,
   ...
 }: {
+  imports = [
+    "${inputs.nixpkgs-immich}/nixos/modules/services/web-apps/immich.nix"
+  ];
+
   options.snowflake.services.immich = {
     enable = lib.mkEnableOption "Enable immich service";
 
@@ -20,7 +24,7 @@
     lib.mkIf cfg.enable {
       services.immich = {
         enable = true;
-        package = pkgs.immich;
+        package = inputs.nixpkgs-immich.legacyPackages.x86_64-linux.immich;
         mediaLocation = "/storage/media/immich-library";
         port = 9121;
       };

modules/nixos/services/paperless/default.nix

@@ -64,7 +64,7 @@
         };
       };
 
-      snowflake.services.backups.config.paperless = {
+      snowflake.services.backups.paperless.config = {
         dynamicFilesFrom = let
           path = config.services.paperless.dataDir;
         in ''

modules/nixos/services/vaultwarden/default.nix

@@ -77,7 +77,7 @@
         };
       };
 
-      snowflake.services.backups.config.vaultwarden.paths = [
+      snowflake.services.backups.vaultwarden.paths = [
         "/var/lib/bitwarden_rs"
       ];
     };