1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22

diff --git a/dragonwell/services/atproto.nix b/dragonwell/services/atproto.nix
index 6fce0df7fd5ac6a358718aa40a892d7ebcfc899e..e96c1ff7b83ea82cccc743be2bfb3b717fbadbca 100644
--- a/dragonwell/services/atproto.nix
+++ b/dragonwell/services/atproto.nix
@@ -1,9 +1,15 @@
-{ jolheiser, config, ... }:
+{
+  jolheiser,
+  config,
+  lib,
+  ...
+}:
 let
+  enable = true;
   port = 2759;
   host = "pds.${jolheiser.domain}";
 in
-{
+lib.mkIf enable {
   age.secrets.pds.file = ../../secrets/pds.age;
   services = {
     bluesky-pds = {

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

diff --git a/dragonwell/services/beszel.nix b/dragonwell/services/beszel.nix
index 50ef37e7547039fcd3958e2d1d830d57ea69befb..747ce00f200926a94aced22bbacc1ce825e32e5d 100644
--- a/dragonwell/services/beszel.nix
+++ b/dragonwell/services/beszel.nix
@@ -1,5 +1,8 @@
-{ config, ... }:
-{
+{ config, lib, ... }:
+let
+  enable = true;
+in
+lib.mkIf enable {
   age.secrets.beszel-dragonwell.file = ../../secrets/beszel-dragonwell.age;
   services.beszel.agent = {
     enable = true;

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19

diff --git a/dragonwell/services/caddy.nix b/dragonwell/services/caddy.nix
index 9ce60f5f5fb74eb639fb470e6cd33cf1d8841aeb..9e9a6901668d34cbadef36927bf96a5aa72e2539 100644
--- a/dragonwell/services/caddy.nix
+++ b/dragonwell/services/caddy.nix
@@ -2,9 +2,13 @@ {
   jolheiser,
   inputs,
   pkgs,
+  lib,
   ...
 }:
-{
+let
+  enable = true;
+in
+lib.mkIf enable {
   services.caddy = {
     enable = true;
     virtualHosts = {

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19

diff --git a/dragonwell/services/forge-lines.nix b/dragonwell/services/forge-lines.nix
index 6faec823e772dfce32f9392c55196d6bcd0b673b..fe26d224cb77b736f61bd8aaef4b94a864150b5c 100644
--- a/dragonwell/services/forge-lines.nix
+++ b/dragonwell/services/forge-lines.nix
@@ -1,8 +1,11 @@
-{ config, ... }:
-{
+{ config, lib, ... }:
+let
+  enable = false;
+in
+lib.mkIf enable {
   age.secrets.forge-lines.file = ../../secrets/forge-lines.age;
   services.forge-lines = {
-    enable = false;
+    enable = true;
     discordTokenFile = config.age.secrets.forge-lines.path;
   };
 }

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21

diff --git a/dragonwell/services/foundry.nix b/dragonwell/services/foundry.nix
index cafbf6dc9281dd8878f577434a44d2a91e84d758..b2c24d8bf71851d9e4d1231d2809985a5c972d93 100644
--- a/dragonwell/services/foundry.nix
+++ b/dragonwell/services/foundry.nix
@@ -2,13 +2,15 @@ {
   jolheiser,
   inputs,
   pkgs,
+  lib,
   ...
 }:
 let
+  enable = true;
   port = 30000;
   host = "dnd.${jolheiser.domain}";
 in
-{
+lib.mkIf enable {
   services = {
     foundryvtt = {
       enable = true;

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22

diff --git a/dragonwell/services/git-bug.nix b/dragonwell/services/git-bug.nix
index d5eb1f476da2d0be0f9817a7fdc498bbd4a86d5e..233629f6110537a4014d64910b9c7b5b9d3a9a84 100644
--- a/dragonwell/services/git-bug.nix
+++ b/dragonwell/services/git-bug.nix
@@ -6,7 +6,7 @@ in
 lib.mkIf enable {
   services = {
     git-bug.bugs = {
-      enable = false;
+      enable = true;
       repoDir = "/var/lib/ugit/repos/bugs.git";
       authorUser = "jolheiser";
       authorEmail = "bugs@jolheiser.com";
@@ -15,7 +15,7 @@       host = "localhost";
       inherit port;
     };
     tailproxy.bugs = {
-      enable = false;
+      enable = true;
       hostname = "bugs";
       inherit port;
       authKey = ""; # One-time key

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17

diff --git a/dragonwell/services/git-pr.nix b/dragonwell/services/git-pr.nix
index bbe8a374f5e3db430d9f25da437f4d70fd04f508..d54abdde62400dc4c48344f1c7a3a6fe5470c8ae 100644
--- a/dragonwell/services/git-pr.nix
+++ b/dragonwell/services/git-pr.nix
@@ -1,9 +1,10 @@
-{ jolheiser, ... }:
+{ jolheiser, lib, ... }:
 let
+  enable = true;
   port = 7449;
   host = "pr.${jolheiser.domain}";
 in
-{
+lib.mkIf enable {
   services = {
     git-pr = {
       enable = false;

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21

diff --git a/dragonwell/services/go.nix b/dragonwell/services/go.nix
index 18fcc61e67a6fade1c3f58cf777b38b762f24bb7..ac992aed96aa2d1a1a75e1506cdb2b17847360e0 100644
--- a/dragonwell/services/go.nix
+++ b/dragonwell/services/go.nix
@@ -1,5 +1,6 @@
-{ jolheiser, ... }:
+{ jolheiser, lib, ... }:
 let
+  enable = true;
   altModules = [
     {
       name = "hcaptcha";
@@ -22,7 +23,7 @@                 </body></html>`
     '') altModules
   );
 in
-{
+lib.mkIf enable {
   services.caddy.virtualHosts."${host}" = {
     extraConfig = ''
       header Content-Type text/html

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20

diff --git a/dragonwell/services/gollum.nix b/dragonwell/services/gollum.nix
index 9e060cc60cc97f08d51844b18c8b09759a806574..e08141f17e9edd556a56bbfaef2e66d9e13a0044 100644
--- a/dragonwell/services/gollum.nix
+++ b/dragonwell/services/gollum.nix
@@ -2,12 +2,14 @@ {
   pkgs,
   jolheiser,
   config,
+  lib,
   ...
 }:
 let
+  enable = true;
   port = 9454;
 in
-{
+lib.mkIf enable {
   services = {
     gollum = {
       enable = true;

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

diff --git a/dragonwell/services/horcrux.nix b/dragonwell/services/horcrux.nix
index de6b52d4a1bdd835c21f95463491f32601fb03e2..f1c281b810e39aba1854b86d2e73a7795bf7d4fd 100644
--- a/dragonwell/services/horcrux.nix
+++ b/dragonwell/services/horcrux.nix
@@ -1,5 +1,8 @@
-{ config, ... }:
-{
+{ config, lib, ... }:
+let
+  enable = true;
+in
+lib.mkIf enable {
   age.secrets.horcrux = {
     file = ../../secrets/horcrux.age;
     owner = "horcrux";

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22

diff --git a/dragonwell/services/mealie.nix b/dragonwell/services/mealie.nix
index b67b2443a03498534f7d1906675c79d1047c748f..ba7ca5a1bd179f8e09c033cb605ea6ce259fbf22 100644
--- a/dragonwell/services/mealie.nix
+++ b/dragonwell/services/mealie.nix
@@ -1,14 +1,16 @@
 {
   pkgs,
+  lib,
   jolheiser,
   config,
   ...
 }:
 let
+  enable = true;
   port = 3663;
   host = "recipes.${jolheiser.domain}";
 in
-{
+lib.mkIf enable {
   age.secrets.mealie.file = ../../secrets/mealie.age;
   services = {
     mealie = {

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

diff --git a/dragonwell/services/miniserve.nix b/dragonwell/services/miniserve.nix
index d4cd4b55b97b71c76e1dcb1e960e29560a88f613..3b9d28fd12071bc0d25f9825334a8e751a5fcbe2 100644
--- a/dragonwell/services/miniserve.nix
+++ b/dragonwell/services/miniserve.nix
@@ -1,7 +1,9 @@
+{ lib, ... }:
 let
+  enable = true;
   port = 3453;
 in
-{
+lib.mkIf enable {
   services = {
     miniserve = {
       enable = true;

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21

diff --git a/dragonwell/services/mint.nix b/dragonwell/services/mint.nix
index 71db8d12a12fbe19ee6a48f099686e04d71c93ae..7a7d5e52e32710e9e68cd027c95175867c50536f 100644
--- a/dragonwell/services/mint.nix
+++ b/dragonwell/services/mint.nix
@@ -2,13 +2,15 @@ {
   inputs,
   jolheiser,
   pkgs,
+  lib,
   config,
   ...
 }:
 let
+  enable = true;
   port = 6468;
 in
-{
+lib.mkIf enable {
   age.secrets.mint.file = ../../secrets/mint.age;
   services = {
     mint = {

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21

diff --git a/dragonwell/services/oa2p.nix b/dragonwell/services/oa2p.nix
index bf84920a0853b843cbf0d91714fd4db6d8ae2eeb..bea283cf8c6550b2159469237d141219e12b7042 100644
--- a/dragonwell/services/oa2p.nix
+++ b/dragonwell/services/oa2p.nix
@@ -1,8 +1,14 @@
-{ jolheiser, config, ... }:
+{
+  jolheiser,
+  lib,
+  config,
+  ...
+}:
 let
+  enable = true;
   port = 6227;
 in
-{
+lib.mkIf enable {
   age.secrets.oa2p.file = ../../secrets/oa2p.age;
   services = {
     oauth2-proxy = {

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22

diff --git a/dragonwell/services/pocket-id.nix b/dragonwell/services/pocket-id.nix
index 04f90178059566e2b3edcff835716def6e6364b2..12d7367b702d3b41899c374897a1006639ef86d7 100644
--- a/dragonwell/services/pocket-id.nix
+++ b/dragonwell/services/pocket-id.nix
@@ -1,9 +1,15 @@
-{ config, jolheiser, ... }:
+{
+  config,
+  jolheiser,
+  lib,
+  ...
+}:
 let
+  enable = true;
   port = 2884;
   host = "id.${jolheiser.domain}";
 in
-{
+lib.mkIf enable {
   age.secrets.pocket-id.file = ../../secrets/pocket-id.age;
   services = {
     pocket-id = {

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18

diff --git a/dragonwell/services/pubserve.nix b/dragonwell/services/pubserve.nix
index 38ac37e5c5fc542ebcf381c34395888ddd10981f..41cd7eddaa4780f2a592bae7401df7e5cdcbb3ad 100644
--- a/dragonwell/services/pubserve.nix
+++ b/dragonwell/services/pubserve.nix
@@ -1,11 +1,12 @@
 { pkgs, lib, ... }:
 let
+  enable = true;
   user = "pubserve";
   path = "/var/lib/pubserve";
   pubPort = 3454;
   privPort = 3455;
 in
-{
+lib.mkIf enable {
   users.users.${user} = {
     group = user;
     home = path;

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

diff --git a/dragonwell/services/restic.nix b/dragonwell/services/restic.nix
index fe861a1f577743645d830ea80077317099e3b5e3..ae584018b16c7bdc1fadf83f4729344ba81a839c 100644
--- a/dragonwell/services/restic.nix
+++ b/dragonwell/services/restic.nix
@@ -1,5 +1,8 @@
-{ config, ... }:
-{
+{ config, lib, ... }:
+let
+  enable = true;
+in
+lib.mkIf enable {
   age.secrets = {
     restic-env.file = ../../secrets/restic-env.age;
     restic-pass.file = ../../secrets/restic-pass.age;

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17

diff --git a/dragonwell/services/soju.nix b/dragonwell/services/soju.nix
index e2cdc04473fe08dd41dc285e3e3c2c14f43dcf38..bd2b96f09880d22b583d75305bd222c44e33c1c6 100644
--- a/dragonwell/services/soju.nix
+++ b/dragonwell/services/soju.nix
@@ -1,10 +1,11 @@
 { jolheiser, lib, ... }:
 let
+  enable = true;
   baseCertPath = "/var/lib/acme/${host}";
   port = 7658;
   host = "irc.${jolheiser.domain}";
 in
-{
+lib.mkIf enable {
   security.acme = {
     acceptTerms = true;
     email = "irc@jolheiser.com";

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20

diff --git a/dragonwell/services/ugit.nix b/dragonwell/services/ugit.nix
index baa2ffdda1b39b446e54193c640f95d6ff6dfb30..c268b6d82eb99a133100c153907bcb7ae8411d6b 100644
--- a/dragonwell/services/ugit.nix
+++ b/dragonwell/services/ugit.nix
@@ -1,5 +1,6 @@
 { jolheiser, lib, ... }:
 let
+  enable = true;
   pubPort = 8449;
   privPort = 8447;
   host = "git.${jolheiser.domain}";
@@ -36,7 +37,7 @@         };
       };
     };
 in
-{
+lib.mkIf enable {
   services = {
     ugit = {
       public = opts;

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21

diff --git a/dragonwell/services/woodpecker.nix b/dragonwell/services/woodpecker.nix
index ab586889423b3467c1f1fd4f8812c31202fbce30..549f05111a3007243f773ab2bc58485c6eed3cf1 100644
--- a/dragonwell/services/woodpecker.nix
+++ b/dragonwell/services/woodpecker.nix
@@ -2,13 +2,15 @@ {
   inputs,
   jolheiser,
   pkgs,
+  lib,
   config,
   ...
 }:
 let
+  enable = true;
   port = 2423;
 in
-{
+lib.mkIf enable {
   age.secrets.woodpecker.file = ../../secrets/woodpecker.age;
   services = {
     woodpecker-server = {

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19

diff --git a/dragonwell/services/zoekt.nix b/dragonwell/services/zoekt.nix
index d323150e073984ac9c36e63cc469c46357bea051..0f0d8ed8625094864753bd23330d24f1426a5d20 100644
--- a/dragonwell/services/zoekt.nix
+++ b/dragonwell/services/zoekt.nix
@@ -1,11 +1,12 @@
-{ pkgs, ... }:
+{ pkgs, lib, ... }:
 let
+  enable = true;
   user = "zoekt";
   repoDir = "/var/lib/ugit/repos";
   indexDir = "/var/lib/${user}";
   port = 4737;
 in
-{
+lib.mkIf enable {
   services.tailproxy.zoekt = {
     enable = true;
     hostname = "zoekt";