From 85f673d099926f5575331955568065aa81d79cc5 Mon Sep 17 00:00:00 2001
From: Lander Van den Bulcke <landervandenbulcke@gmail.com>
Date: Sat, 4 Oct 2025 08:56:31 +0200
Subject: [PATCH 1/5] feat: enable atuin

Signed-off-by: Lander Van den Bulcke <landervandenbulcke@gmail.com>
---
 home/lander/features/cli/atuin.nix   | 7 +++++++
 home/lander/features/cli/default.nix | 1 +
 2 files changed, 8 insertions(+)
 create mode 100644 home/lander/features/cli/atuin.nix

diff --git a/home/lander/features/cli/atuin.nix b/home/lander/features/cli/atuin.nix
new file mode 100644
index 0000000..a4dd48a
--- /dev/null
+++ b/home/lander/features/cli/atuin.nix
@@ -0,0 +1,7 @@
+{ ... }:
+{
+  programs.atuin = {
+    enable = true;
+    enableZshIntegration = true;
+  };
+}
diff --git a/home/lander/features/cli/default.nix b/home/lander/features/cli/default.nix
index 4cd9937..0219eb7 100644
--- a/home/lander/features/cli/default.nix
+++ b/home/lander/features/cli/default.nix
@@ -4,6 +4,7 @@
   imports = [
     ./git
 
+    ./atuin.nix
     ./bat.nix
     ./btop.nix
     ./starship.nix

From 119663c180cc05d9ac9da5f50559083c600f47e4 Mon Sep 17 00:00:00 2001
From: Lander Van den Bulcke <landervandenbulcke@gmail.com>
Date: Sat, 4 Oct 2025 08:59:33 +0200
Subject: [PATCH 2/5] feat: add atuin db

Signed-off-by: Lander Van den Bulcke <landervandenbulcke@gmail.com>
---
 hosts/servers/db-01.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/hosts/servers/db-01.nix b/hosts/servers/db-01.nix
index 8484249..1fcaef4 100644
--- a/hosts/servers/db-01.nix
+++ b/hosts/servers/db-01.nix
@@ -9,12 +9,17 @@
       host all all 100.64.0.0/24 trust # trust tailnet
     '';
     ensureDatabases = [
+      "atuin"
       "authelia"
       "forgejo"
       "lldap"
       "mealie"
     ];
     ensureUsers = [
+      {
+        name = "atuin";
+        ensureDBOwnership = true;
+      }
       {
         name = "authelia";
         ensureDBOwnership = true;
@@ -38,6 +43,7 @@
     enable = true;
     startAt = "*-*-* 02:00:00";
     databases = [
+      "atuin"
       "authelia"
       "forgejo"
       "lldap"

From cca554ebfbbb075a08ad809a56c738160fff58a3 Mon Sep 17 00:00:00 2001
From: Lander Van den Bulcke <landervandenbulcke@gmail.com>
Date: Sat, 4 Oct 2025 09:08:22 +0200
Subject: [PATCH 3/5] feat: enable atuin sync server

Signed-off-by: Lander Van den Bulcke <landervandenbulcke@gmail.com>
---
 hosts/hosting-01/default.nix | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/hosts/hosting-01/default.nix b/hosts/hosting-01/default.nix
index e061474..1ddec9b 100644
--- a/hosts/hosting-01/default.nix
+++ b/hosts/hosting-01/default.nix
@@ -139,6 +139,23 @@ in
     };
   };
 
+  services.atuin = {
+    enable = true;
+    openRegistration = true;
+    database = {
+      uri = "postgresql://atuin@db-01.tailnet.escapeangle.com:5432/atuin";
+      createLocally = false;
+    };
+  };
+
+  services.nginx.virtualHosts."atuin.escapeangle.com" = {
+    forceSSL = true;
+    enableACME = true;
+    locations."/" = {
+      proxyPass = "http://localhost:${toString config.services.atuin.port}";
+    };
+  };
+
   security.acme.defaults.email = "landervandenbulcke@gmail.com";
   security.acme.acceptTerms = true;
 

From 422dec98c7d913c78295cfee152ede22641edc31 Mon Sep 17 00:00:00 2001
From: Lander Van den Bulcke <landervandenbulcke@gmail.com>
Date: Sat, 4 Oct 2025 09:16:12 +0200
Subject: [PATCH 4/5] feat: configure atuin sync server

Signed-off-by: Lander Van den Bulcke <landervandenbulcke@gmail.com>
---
 home/lander/features/cli/atuin.nix | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/home/lander/features/cli/atuin.nix b/home/lander/features/cli/atuin.nix
index a4dd48a..dfe099e 100644
--- a/home/lander/features/cli/atuin.nix
+++ b/home/lander/features/cli/atuin.nix
@@ -3,5 +3,12 @@
   programs.atuin = {
     enable = true;
     enableZshIntegration = true;
+
+    settings = {
+      auto_sync = true;
+      sync_address = "http://atuin.escapeangle.com";
+      sync_frequency = "30m";
+      update_check = false;
+    };
   };
 }

From 7b9fcfdb1b3a56226550a1ac21f67f5739b77619 Mon Sep 17 00:00:00 2001
From: Lander Van den Bulcke <landervandenbulcke@gmail.com>
Date: Sat, 4 Oct 2025 09:19:50 +0200
Subject: [PATCH 5/5] chore: don't leave atuin registration open

Signed-off-by: Lander Van den Bulcke <landervandenbulcke@gmail.com>
---
 hosts/hosting-01/default.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/hosts/hosting-01/default.nix b/hosts/hosting-01/default.nix
index 1ddec9b..b1e0a7c 100644
--- a/hosts/hosting-01/default.nix
+++ b/hosts/hosting-01/default.nix
@@ -141,7 +141,7 @@ in
 
   services.atuin = {
     enable = true;
-    openRegistration = true;
+    openRegistration = false;
     database = {
       uri = "postgresql://atuin@db-01.tailnet.escapeangle.com:5432/atuin";
       createLocally = false;