Progress dump before ai agent

hosts/lazyworkhorse/configuration.nix

@@ -125,14 +125,19 @@
     age
     agenix
     git
+    nh
     lm_sensors
     rocmPackages.rocminfo
     rocmPackages.rocm-smi
+    nvtopPackages.amd
     clinfo
     ncurses
     kitty.terminfo
     nodejs_22
     uv
+    (python3.withPackages (ps: with ps; [
+      openai-whisper
+    ]))
   ];
 
   # Some programs need SUID wrappers, can be configured further or are
@@ -148,7 +153,7 @@
   # Enable the OpenSSH daemon
   services.openssh = {
     enable = true;
-    ports = [ 22 2424 ];
+    ports = [ 2424 ];
     settings = {
       PasswordAuthentication = false;
       KbdInteractiveAuthentication = false;
@@ -162,18 +167,6 @@
     ];
   };
 
-  # services.ollama = {
-  #   enable = true;
-  #   acceleration = "rocm";
-  #   # Optional: force Ollama to use the MI50 target
-  #   rocmOverrideGfx = "9.0.6"; 
-  #   environmentVariables = {
-  #     ROCR_VISIBLE_DEVICES = "0,1";
-  #     # This helps with memory allocation on dual-GPU setups
-  #     HSA_ENABLE_SDMA = "0"; 
-  #   };
-  # };
-
   services.dockerStacks = {
     versioncontrol = {
       path = self + "/assets/compose/versioncontrol";
@@ -204,6 +197,31 @@
       path = self + "/assets/compose/homeautomation";
       envFile = config.age.secrets.containers_env.path;
     };
+
+    authentification = {
+      path = self + "/assets/compose/authentification";
+    };
+
+    backup = {
+      path = self + "/assets/compose/backup";
+      envFile = config.age.secrets.containers_env.path;
+    };
+
+    coms = {
+      path = self + "/assets/compose/coms";
+    };
+
+    finance = {
+      path = self + "/assets/compose/finance";
+    };
+
+    homepage = {
+      path = self + "/assets/compose/homepage";
+    };
+
+    # tak = {
+    #   path = self + "/assets/compose/tak";
+    # };
   };
 
   services.opencode = {
@@ -211,28 +229,7 @@
     port = 4099;
     ollamaUrl = "http://127.0.0.1:11434/v1"; 
   };
-
-  # services.systemd-fancon = {
-  #   enable = true;
-  #   config = ''
-  #   [MI50_Cooling]
-  #   # The lm96163 controller
-  #   hwmon = hwmon0
-    
-  #   # Most lm96163 chips use pwm1 for the main fan header
-  #   pwm = 1
-  #   pwm = 2
-
-  #   # Watch both MI50 cards
-  #   sensor = hwmon3/temp1_input
-  #   sensor = hwmon4/temp1_input
-    
-  #   # Servers cards need air early! 
-  #   # Starts spinning at 40C, full blast by 70C
-  #   curve = 40:60 55:160 70:255
-  #   '';
-  # };
-
+  
   # Private host ssh key managed by agenix
   age = {
     identityPaths = paths.identities;
@@ -251,13 +248,13 @@
         mode = "0600";
         path = "/etc/ssh/ssh_host_ed25519_key";
       };
-      n8n_ssh_key = {
-        file = ../../secrets/n8n_ssh_key.age;
-        owner = "root";
-        group = "root";
-        mode = "0600";
-        path = "/home/n8n-worker/.ssh/n8n_ssh_key";
-      };
+      # n8n_ssh_key = {
+      #   file = ../../secrets/n8n_ssh_key.age;
+      #   owner = "root";
+      #   group = "root";
+      #   mode = "0600";
+      #   path = "/home/n8n-worker/.ssh/n8n_ssh_key";
+      # };
     };
   };
 
@@ -276,7 +273,6 @@
     enable32Bit = true; # Useful for some compatibility layers
     extraPackages = with pkgs; [
       rocmPackages.clr.icd # OpenCL/HIP runtime
-      amdvlk               # Vulkan drivers
     ];
   };
   nixpkgs.config.rocmTargets = [ "gfx906" ];