From 95cd68aac2f49f2d87cea602b25984366b53dd96 Mon Sep 17 00:00:00 2001
From: tux <t@tux.rs>
Date: Wed, 12 Aug 2026 15:54:15 +0530
Subject: [PATCH] feat(arcturus): enable copyparty

---
 modules/hosts/arcturus/config.nix   | 21 +++++++++++++++++++++
 modules/hosts/arcturus/secrets.yaml |  5 +++--
 2 files changed, 24 insertions(+), 2 deletions(-)

diff --git a/modules/hosts/arcturus/config.nix b/modules/hosts/arcturus/config.nix
index b737c59..7406137 100644
--- a/modules/hosts/arcturus/config.nix
+++ b/modules/hosts/arcturus/config.nix
@@ -59,6 +59,22 @@
             domain = "bw.lab.tux.rs";
             configurePangolin = true;
           };
+
+          copyparty = {
+            enable = true;
+            domain = "files.lab.tux.rs";
+            accounts.${userName}.passwordFile = innerArgs.config.sops.secrets.copyparty.path;
+            volumes = {
+              "/" = {
+                path = "/var/lib/copyparty/data";
+                access = {
+                  r = "*";
+                  rwmdgGha = [ userName ];
+                };
+              };
+            };
+            configurePangolin = true;
+          };
         };
 
         virtualisation = {
@@ -101,6 +117,11 @@
           sopsFile = ./secrets.yaml;
           owner = userName;
         };
+
+        copyparty = {
+          sopsFile = ./secrets.yaml;
+          owner = innerArgs.config.services.copyparty.user;
+        };
       };
 
       # --- Networking ---
diff --git a/modules/hosts/arcturus/secrets.yaml b/modules/hosts/arcturus/secrets.yaml
index eddc366..67aafaf 100644
--- a/modules/hosts/arcturus/secrets.yaml
+++ b/modules/hosts/arcturus/secrets.yaml
@@ -4,6 +4,7 @@ gemini-api-key: ENC[AES256_GCM,data:gLZSoYTdKY+rwIpYiXvN9n9PGkUD6q8Oe7dHnYkjEjwD
 openrouter-api-key: ENC[AES256_GCM,data:6xONCl9lqOoO7b4CEyCz9607tICDUAkpglRjGS5nYq2ppg2UKqYTrWD1BGCA5Xfs/CWskniVhoNG3vscjKiYCCh9gbM6aqdmTQ==,iv:7Iwc9t00HOOBjA7URXcUO41badqYyJCkFHM/uPkLFxY=,tag:Cl39kitr2e0//HVwAdsdUQ==,type:str]
 opencode-go-api-key: ENC[AES256_GCM,data:dmeRKn7TWHnqvpyPQpcEG6yHTb2bRby/rh10ytL0jHj5R+lRmNVdmqUF92GTznY9vEaB6ZYCJecWhpm8g4upNfOWBg==,iv:9UMJpAlD8gpcNiN+liu3nawoAZQKapEg7sCp561N9E8=,tag:OZlASpOa5BQaQwFWjoLCRw==,type:str]
 netbird-key: ENC[AES256_GCM,data:q6eKisca04qn/CvALrvXF79MsToDhvLRLv2JTiUBAZglCC9m,iv:jj0/ZD7IDgopprTVUgSfJmdAJmUP3iqewU3dqssGYbk=,tag:6IPRdCm2FGdlTEIX7jt3qA==,type:str]
+copyparty: ENC[AES256_GCM,data:QXt8IgTekg9rzFyuzpg=,iv:vJYfHqCiheq290K9TGACHNHyOWzIn60j1Kz502SE27w=,tag:ECt7Wavlqw1V6zgXiRZtUg==,type:str]
 newt: ENC[AES256_GCM,data:r5Rd81ZrzrIYbXtFkypbJltoGCOYrW6P4IpwGCtaH7lqCg7wD/WMboMx13HN4Mm0J4qbBpDakpfVv9qUTrisYP1xwpKkmY1kqPlFWRZN8hzuuNS2Tv3qUjavTp5XGotVPLHj1Cg/cwGcf8EAssYTwTy7H0PgdQKwqigQD1f1s/j4iXQ=,iv:1xP38/Ayt1xvn2fJGa5zgOrVNOw2J5taG1Orx6uNgZI=,tag:H9JXu9gzyyvTPWgXaoTsiw==,type:str]
 sops:
     age:
@@ -25,7 +26,7 @@ sops:
             TLKEYsPQgOJ7s8P9gw2uPUY6HRz86CtiC6EbO27u0+8BbI85x1QScg==
             -----END AGE ENCRYPTED FILE-----
           recipient: age1huqa3hc7wcxk4dpelrzny437nzrx4fnll3d8g9ahznzk268yju5qufapxy
-    lastmodified: "2026-08-09T11:21:03Z"
-    mac: ENC[AES256_GCM,data:XFy+AiJRfrLhbX3j+0oO24qiHD5Hj2bVFqTMbUOOzsJzR0r8FBrwSNAZ0FVlFPFPAMitAIpZySS+kvbmEdZUfZ0soo83F5qwH6i/H5PZxqyDHst/Ig6Mrypp2DZMNZXNlqyLLmuaNGDf2pqApxCM3eSsgvCsNxdapRKlLSFJou4=,iv:D7gB4J4dhCfRo+1DaUAvOe3dWpoGvzIFouCJBNpwKiY=,tag:eLBZq/+Lce2S5Hu9OIC3gw==,type:str]
+    lastmodified: "2026-08-12T09:47:06Z"
+    mac: ENC[AES256_GCM,data:gh5vEo25SDm0lymsnhJJAl3LhbdJunAjAd01bauFwn13vlLGKITUvYbCUd7iSxTMGg9emTiTueSTTFeIaFF7VEuZbuRPfBb3tGpY0OQJqc8IR1GrzoyvjHFEJfOj7orqPxim2YoRcKEBMOBVIkTDiNP/7HSvAucbfw1mfUVxzHQ=,iv:u3tBnR53UHk4wTPrMClE3eQUwdAlbNEvwWdSnaobrOU=,tag:Us9qZToS53IabsA6O6otpg==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.13.3