Add a11ywatch and related configurations for Podman and Nginx

- Introduced a new module for a11ywatch with Podman support, creating a bridge network and defining backend and frontend containers.
- Configured Nginx to serve the a11ywatch application with SSL and ACME support.
- Added user and group configurations for a11ywatch.
- Created a systemd service to ensure the Podman network exists on boot.

Implement Firefox Container Controller extension and host

- Added a module for the Firefox Container Controller extension, allowing installation via Nix.
- Created a native messaging host for the extension to communicate with the container controller.
- Included CLI helpers to enqueue commands for showing and hiding containers.

Enable fingerprint authentication in PAM

- Configured fingerprint authentication for login, sudo, and swaylock services.

Setup Raspberry Pi OS image creation script

- Developed a script to create a read-only Raspberry Pi OS Lite image with Snapcast client.
- Included configuration for Wi-Fi, hostname, and Snapcast server.
- Implemented user and group setup for Snapcast client and ensured necessary services are enabled.

Document Raspberry Pi Zero W setup instructions

- Added detailed instructions for configuring Raspberry Pi OS on Zero W, including disabling unused services and setting up Snapcast client.

Create test configuration script for NixOS

- Implemented a script to perform dry-builds for NixOS configurations, allowing for easy validation of host configurations.

hosts/web-arm/modules/a11ywatch.nix

@@ -0,0 +1,24 @@
+{ config, ... }:
+{
+  #Collabora Containers
+  virtualisation.oci-containers.containers.pally = {
+    image = "docker.io/croox/pa11y-dashboard:latest";
+    ports = [ "4000:4000/tcp" ];
+    extraOptions = [ 
+      "--pull=newer"
+    ];  
+  };
+
+  services.nginx.virtualHosts."allywatch.cloonar.com" = {
+    enableACME = true;
+    forceSSL = true;
+
+    extraConfig = ''
+      # static files
+      location ^~ / {
+        proxy_pass http://127.0.0.1:4000;
+        proxy_set_header Host $host;
+      }
+    '';
+  };
+}

hosts/web-arm/modules/pa11y.nix

@@ -0,0 +1,24 @@
+{ config, ... }:
+{
+  #Collabora Containers
+  virtualisation.oci-containers.containers.pally = {
+    image = "docker.io/croox/pa11y-dashboard:latest";
+    ports = [ "4000:4000/tcp" ];
+    extraOptions = [ 
+      "--pull=newer"
+    ];  
+  };
+
+  services.nginx.virtualHosts."allywatch.cloonar.com" = {
+    enableACME = true;
+    forceSSL = true;
+
+    extraConfig = ''
+      # static files
+      location ^~ / {
+        proxy_pass http://127.0.0.1:4000;
+        proxy_set_header Host $host;
+      }
+    '';
+  };
+}