feat: pgbounce, librechat upgrade, homarr

hosts/AZ-CLD-1/services/containers/baserow.nix

@@ -7,7 +7,7 @@ in {
     environment = {
       # BASEROW_AMOUNT_OF_GUNICORN_WORKERS = "4";
       # BASEROW_AMOUNT_OF_WORKERS = "2";
-      DATABASE_CONN_MAX_AGE = "60";
+      DATABASE_CONN_MAX_AGE = "0";
       # Proxy: tell Django the connection is HTTPS so cookies get Secure flag
       BASEROW_ENABLE_SECURE_PROXY_SSL_HEADER = "yes";
       # Published apps run on different origins — allow cross-origin cookie delivery

hosts/AZ-CLD-1/services/containers/default.nix

@@ -1,6 +1,7 @@
 {lib, ...}: {
   imports = [
     ./baserow.nix
+    ./homarr.nix
     ./it-tools.nix
     ./librechat.nix
     ./litellm.nix

hosts/AZ-CLD-1/services/containers/homarr.nix

@@ -0,0 +1,48 @@
+{config, ...}: let
+  serviceName = "homarr";
+  servicePort = config.m3ta.ports.get serviceName;
+in {
+  virtualisation.oci-containers.containers.${serviceName} = {
+    image = "ghcr.io/homarr-labs/homarr:latest";
+    environment = {
+      TZ = "Europe/Berlin";
+
+      BASE_URL = "https://dash.az-gruppe.com";
+      NEXTAUTH_URL = "https://dash.az-gruppe.com";
+      AUTH_PROVIDERS = "oidc";
+      AUTH_OIDC_CLIENT_NAME = "Azure";
+      AUTH_OIDC_SCOPE_OVERWRITE = "openid email profile";
+      AUTH_OIDC_GROUPS_ATTRIBUTE = "roles";
+    };
+    environmentFiles = [config.age.secrets.homarr-env.path];
+    ports = ["127.0.0.1:${toString servicePort}:7575"];
+    volumes = ["homarr_data:/appdata"];
+    extraOptions = ["--ip=10.89.0.13" "--network=web" "--dns=8.8.8.8" "--dns=8.8.4.4"];
+  };
+
+  # Traefik configuration
+  services.traefik.dynamicConfigOptions.http = {
+    services.${serviceName}.loadBalancer.servers = [
+      {
+        url = "http://localhost:${toString servicePort}/";
+      }
+    ];
+
+    middlewares."${serviceName}-headers".headers = {
+      customRequestHeaders = {
+        X-Forwarded-Proto = "https";
+        X-Forwarded-Port = "443";
+      };
+    };
+
+    routers.${serviceName} = {
+      rule = "Host(`dash.az-gruppe.com`)";
+      tls = {
+        certResolver = "ionos";
+      };
+      service = serviceName;
+      entrypoints = "websecure";
+      middlewares = ["${serviceName}-headers"];
+    };
+  };
+}

hosts/AZ-CLD-1/services/containers/librechat-dev.nix

@@ -29,7 +29,7 @@ in {
       environment = {
         RAG_PORT = "8000";
         DB_HOST = "10.89.1.1";
-        DB_PORT = "5432";
+        DB_PORT = "6432";
       };
       environmentFiles = [envFileDev envFileCommon];
       dependsOn = ["meilisearch-dev"];

hosts/AZ-CLD-1/services/containers/librechat.nix

@@ -29,7 +29,7 @@ in {
       environment = {
         RAG_PORT = "8000";
         DB_HOST = "10.89.0.1";
-        DB_PORT = "5432";
+        DB_PORT = "6432";
       };
       environmentFiles = [envFileCommon envFileProd];
       dependsOn = ["meilisearch"];

hosts/AZ-CLD-1/services/containers/zammad-hr.nix

@@ -28,8 +28,8 @@
     POSTGRESQL_DB = "zammad_${instanceName}";
     POSTGRESQL_HOST = "10.89.0.1";
     POSTGRESQL_USER = "zammad_${instanceName}";
-    POSTGRESQL_PORT = "5432";
-    POSTGRESQL_OPTIONS = "?pool=50";
+    POSTGRESQL_PORT = "6433";
+    POSTGRESQL_OPTIONS = "?pool=5";
     REDIS_URL = "redis://zammad-redis:6379";
     TZ = "Europe/Berlin";
     BACKUP_DIR = "/var/tmp/zammad";
@@ -231,8 +231,8 @@ in {
         --env POSTGRESQL_DB=zammad_${instanceName} \
         --env POSTGRESQL_HOST=10.89.0.1 \
         --env POSTGRESQL_USER=zammad_${instanceName} \
-        --env POSTGRESQL_PORT=5432 \
-        --env POSTGRESQL_OPTIONS='?pool=50' \
+        --env POSTGRESQL_PORT=6433 \
+        --env POSTGRESQL_OPTIONS='?pool=5' \
         --env REDIS_URL=redis://zammad-redis:6379 \
         --env TZ=Europe/Berlin \
         --env ELASTICSEARCH_ENABLED=true \