chore: don't leave atuin registration open

Signed-off-by: Lander Van den Bulcke <landervandenbulcke@gmail.com>

home/lander/features/cli/atuin.nix

@@ -0,0 +1,14 @@
+{ ... }:
+{
+  programs.atuin = {
+    enable = true;
+    enableZshIntegration = true;
+
+    settings = {
+      auto_sync = true;
+      sync_address = "http://atuin.escapeangle.com";
+      sync_frequency = "30m";
+      update_check = false;
+    };
+  };
+}

home/lander/features/cli/default.nix

@@ -4,6 +4,7 @@
   imports = [
     ./git
 
+    ./atuin.nix
     ./bat.nix
     ./btop.nix
     ./starship.nix

hosts/hosting-01/default.nix

@@ -139,6 +139,23 @@ in
     };
   };
 
+  services.atuin = {
+    enable = true;
+    openRegistration = false;
+    database = {
+      uri = "postgresql://atuin@db-01.tailnet.escapeangle.com:5432/atuin";
+      createLocally = false;
+    };
+  };
+
+  services.nginx.virtualHosts."atuin.escapeangle.com" = {
+    forceSSL = true;
+    enableACME = true;
+    locations."/" = {
+      proxyPass = "http://localhost:${toString config.services.atuin.port}";
+    };
+  };
+
   security.acme.defaults.email = "landervandenbulcke@gmail.com";
   security.acme.acceptTerms = true;
 

hosts/servers/db-01.nix

@@ -9,12 +9,17 @@
       host all all 100.64.0.0/24 trust # trust tailnet
     '';
     ensureDatabases = [
+      "atuin"
       "authelia"
       "forgejo"
       "lldap"
       "mealie"
     ];
     ensureUsers = [
+      {
+        name = "atuin";
+        ensureDBOwnership = true;
+      }
       {
         name = "authelia";
         ensureDBOwnership = true;
@@ -38,6 +43,7 @@
     enable = true;
     startAt = "*-*-* 02:00:00";
     databases = [
+      "atuin"
       "authelia"
       "forgejo"
       "lldap"