Finish felixalbpc, cleanup home-manager

- Removes hold host edison
- Adds new host, felixalbpc, a work machine. This requires some cleanup
  to fit into the office network, use other SSH keys, etc.
- Clean up some package installs, putting more things into the common
  home-manager packages, rather than systemwide or host-specific homes.
- Various small changes like disabling Github Copilot on nvim startup.

flake.lock

@@ -96,11 +96,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1722082646,
-        "narHash": "sha256-od8dBWVP/ngg0cuoyEl/w9D+TCNDj6Kh4tr151Aax7w=",
+        "lastModified": 1725975477,
+        "narHash": "sha256-sBnXxmYBb0S85Vkny97z2TFLd5SJW5o0k6KQNwpSLb0=",
         "owner": "lnl7",
         "repo": "nix-darwin",
-        "rev": "0413754b3cdb879ba14f6e96915e5fdf06c6aab6",
+        "rev": "5b2d8e9a47c3e17514650d1ce7d5e907114db82b",
         "type": "github"
       },
       "original": {

hosts/challenger/configuration.nix

@@ -12,6 +12,7 @@
       ./filesystems.nix
 
       ./services/calibre.nix
+      ./services/ersatztv.nix
       ./services/jellyfin.nix
       ./services/komga.nix
       ./services/navidrome.nix

hosts/challenger/services/ersatztv.nix

@@ -0,0 +1,27 @@
+{ config, lib, pkgs, ... }:
+let
+  domain = "etv.home.feal.no";
+  bind = "127.0.0.1:8409";
+in {
+  virtualisation.oci-containers.containers.ersatztv = {
+    autoStart = true;
+    image = "jasongdove/ersatztv:latest-nvidia";
+    volumes = [
+      "/var/lib/ersatztv:/root/.local/share/ersatztv"
+      "/tank/media/other/ersatztv:/media" # Filler, watermarks, etc.
+    ];
+    ports = [
+      "${bind}:8409"
+    ];
+    environment = {
+      TZ = "Europe/Oslo";
+    };
+    extraOptions = [
+      "--device=/dev/dri"
+    ];
+  };
+
+  services.nginx.virtualHosts.${domain} = {
+    locations."/".proxyPass = "http://${bind}";
+  };
+}

hosts/challenger/services/nginx.nix

@@ -10,6 +10,8 @@
     recommendedTlsSettings = true;
     recommendedGzipSettings = true;
     recommendedOptimisation = true;
+
+    virtualHosts."cloud.feal.no".default = true;
   };
 
   networking.firewall.allowedTCPPorts = [ 80 443 ];

hosts/defiant/services/nginx.nix

@@ -12,6 +12,8 @@ in {
     recommendedGzipSettings = true;
     recommendedOptimisation = true;
 
+    virtualHosts."git.feal.no".default = true;
+
     defaultListen = [
       {
         addr = "192.168.10.175";

hosts/malcolm/services/nginx.nix

@@ -9,6 +9,8 @@
     recommendedTlsSettings = true;
     recommendedGzipSettings = true;
     recommendedOptimisation = true;
+
+    virtualHosts."kinealbrigtsen.no".default = true;
   };
 
   networking.firewall.allowedTCPPorts = [ 80 443 ];