From a4b2a879608d1a3d69565b2329940367537605a6 Mon Sep 17 00:00:00 2001
From: Yan Lin <github@yanlincs.com>
Date: Sat, 29 Nov 2025 22:33:35 +0100
Subject: [PATCH] add local proxy to immich

---
 hosts/nixos/hs/proxy.nix        | 19 +++++++++++++++++++
 hosts/nixos/thinkpad/system.nix |  7 -------
 hosts/nixos/vps/proxy.nix       | 21 ---------------------
 3 files changed, 19 insertions(+), 28 deletions(-)

diff --git a/hosts/nixos/hs/proxy.nix b/hosts/nixos/hs/proxy.nix
index 4bbcb94..8cb38d9 100644
--- a/hosts/nixos/hs/proxy.nix
+++ b/hosts/nixos/hs/proxy.nix
@@ -27,6 +27,17 @@
           };
         };
 
+        photo = {
+          rule = "Host(`photo.${config.networking.hostName}.yanlincs.com`)";
+          service = "photo";
+          tls = {
+            certResolver = "cloudflare";
+            domains = [{
+              main = "*.${config.networking.hostName}.yanlincs.com";
+            }];
+          };
+        };
+
       };
 
       services = {
@@ -46,6 +57,14 @@
           };
         };
 
+        photo = {
+          loadBalancer = {
+            servers = [{
+              url = "http://127.0.0.1:5000";
+            }];
+          };
+        };
+
       };
     };
   };
diff --git a/hosts/nixos/thinkpad/system.nix b/hosts/nixos/thinkpad/system.nix
index 1f87ab6..f521893 100644
--- a/hosts/nixos/thinkpad/system.nix
+++ b/hosts/nixos/thinkpad/system.nix
@@ -7,7 +7,6 @@
     ../../../modules/hyprland/system.nix
     ../../../modules/tailscale.nix
     ../../../modules/login-display.nix
-    ../../../modules/dufs.nix
   ];
 
   # Bootloader - standard UEFI setup
@@ -243,10 +242,4 @@
     showDiskUsage = true;
   };
 
-  services.dufs = {
-    sharedPath = "/home/yanlin/NSFW";
-    user = "yanlin";
-    group = "users";
-  };
-
 }
diff --git a/hosts/nixos/vps/proxy.nix b/hosts/nixos/vps/proxy.nix
index 5cd16db..501f0b3 100644
--- a/hosts/nixos/vps/proxy.nix
+++ b/hosts/nixos/vps/proxy.nix
@@ -66,18 +66,6 @@
           };
         };
 
-        # NSFW WebDAV (dufs on thinkpad)
-        nsfw = {
-          rule = "Host(`nsfw.yanlincs.com`)";
-          service = "nsfw";
-          tls = {
-            certResolver = "cloudflare";
-            domains = [{
-              main = "*.yanlincs.com";
-            }];
-          };
-        };
-
       };
 
       services = {
@@ -127,15 +115,6 @@
           };
         };
 
-        # NSFW backend (dufs on thinkpad via WireGuard)
-        nsfw = {
-          loadBalancer = {
-            servers = [{
-              url = "http://10.2.2.30:5099";
-            }];
-          };
-        };
-
       };
 
     };