add watchstate syncer

nixos/common/default.nix

@@ -20,6 +20,8 @@
     sharedModules = [ ./hm-modules inputs.nixvim.homeManagerModules.nixvim ];
   };
 
+  virtualisation.oci-containers.backend = lib.mkDefault "podman";
+
   # Clean /tmp on boot.
   boot.tmp.cleanOnBoot = true;
 

nixos/common/desktop/home.nix

@@ -12,9 +12,10 @@ in {
     calibre
     celluloid
     cinny-desktop
-    element-desktop-wayland
+    element-desktop
     fusee-launcher
     fractal-next
+    foliate
     gcc
     gimp
     helix

nixos/hosts/hades/jellyfin/configuration.nix

@@ -23,6 +23,26 @@
     openFirewall = true;
   };
 
+  users.groups.watchstate = { };
+  users.users.watchstate = {
+    isSystemUser = true;
+    group = "watchstate";
+  };
+
+  systemd.tmpfiles.rules =
+    [ "d '/var/lib/watchstate' 0755 watchstate watchstate -" ];
+
+
+  # Managed imperatively through its CLI
+  virtualisation.oci-containers.containers.watchstate = {
+    image = "ghcr.io/arabcoders/watchstate:latest";
+    extraOptions = [ "--pull=newer" ];
+    user = "0:0";
+    environment = { WS_TZ = "Europe/Amsterdam"; };
+    ports = [ "8080:8080" ];
+    volumes = [ "/var/lib/watchstate:/config:rw" ];
+  };
+
   fileSystems."/mnt/storage" = {
     device = "storage:/mnt/storage";
     fsType = "nfs";

nixos/util.nix

@@ -1,4 +1,4 @@
-{ nixpkgs, home-manager, mailserver, lanzaboote, attic, microvm, ... }:
+{ nixpkgs, home-manager, mailserver, lanzaboote, attic, ... }:
 let
   inherit (builtins) filter attrValues concatMap mapAttrs;
   inherit (nixpkgs.lib.attrsets) mapAttrsToList;