feat: add Ollama and Qdrant service modules to configuration

.roo/rules/rules.md

@@ -70,6 +70,7 @@ Bento is utilized for deploying configurations across systems.
 * Regularly review and refactor modules for efficiency and clarity.
 * Document all modules and configurations for future reference.
 * Test configurations in a controlled environment before deploying to production systems.([NixOS & Flakes][6])
+* After developing a feature, delete the corresponding development plan.
 
 ---
 

hosts/mail/configuration.nix

@@ -13,7 +13,7 @@
 
     ./utils/modules/borgbackup.nix
     ./utils/modules/promtail
-    ./utils/modules/victoriametrics
+    ./modules/metrics
     ./modules/set-nix-channel.nix # Automatically manage nix-channel from /var/bento/channel
 
     ./hardware-configuration.nix

hosts/mail/modules/metrics/default.nix

@@ -0,0 +1,8 @@
+{ config, pkgs, ... }:
+{
+  imports = [
+    ../../utils/modules/victoriametrics/default.nix
+    ./postfix-exporter.nix
+    ./dovecot-exporter.nix
+  ];
+}

hosts/mail/modules/metrics/dovecot-exporter.nix

@@ -0,0 +1,15 @@
+{ config, pkgs, lib, ... }:
+
+{
+  services.prometheus.exporters.dovecot = {
+    enable = true;
+  };
+
+  services.victoriametrics.extraScrapeConfigs = [
+    ''
+      - job_name: "dovecot-exporter"
+        static_configs:
+        - targets: ['localhost:9166']
+    ''
+  ];
+}

hosts/mail/modules/metrics/postfix-exporter.nix

@@ -0,0 +1,16 @@
+{ config, pkgs, lib, ... }:
+
+{
+
+  services.prometheus.exporters.postfix = {
+    enable = true;
+  };
+  
+  services.victoriametrics.extraScrapeConfigs = [
+    ''
+      - job_name: "postfix-exporter"
+        static_configs:
+        - targets: ['localhost:9154']
+    ''
+  ];
+}

hosts/nb/configuration.nix

@@ -26,6 +26,9 @@ in {
       # ./modules/cyberghost.nix
       ./utils/modules/autoupgrade.nix
       ./modules/puppeteer.nix
+      ./modules/mcp-global.nix
+      ./modules/ollama.nix
+      ./modules/qdrant.nix
 
       # ./modules/development
 
@@ -205,6 +208,7 @@ in {
 
   environment.variables = {
     TERMINAL_COMMAND = "alacritty";
+    MOZ_ENABLE_WAYLAND = "1";
   };
   
   services.blueman.enable = true;
@@ -296,4 +300,5 @@ in {
 
   system.stateVersion = "24.05"; # Did you read the comment?
 
+
 }

hosts/nb/modules/desktop/default.nix

@@ -18,6 +18,7 @@ in {
     cryptomator
     fontforge
     freecad
+    firefox
     openscad
 
     (where-is-my-sddm-theme.override {

hosts/nb/modules/fingerprint.nix

@@ -3,7 +3,7 @@
 {
   services.fprintd.enable = true;
 
-  security.pam.services.login.fprintAuth = true;
+  # security.pam.services.login.fprintAuth = true;
   security.pam.services.sudo.fprintAuth = true;
   # If you use swaylock and want fingerprint auth for it:
   security.pam.services.swaylock.fprintAuth = true;

hosts/nb/modules/mcp-global.nix

@@ -0,0 +1,58 @@
+{ config, lib, pkgs, ... }:
+
+let
+  # Fetch MCP servers library
+  mcpServersNix = import (builtins.fetchTarball {
+    url = "https://github.com/dpolakovics/mcp-servers-nix/archive/e068d6aa5d9972987aa8aed198b7bb763b1af161.tar.gz";
+    sha256 = "sha256-yWFrZG9UryIf3EW8BoYNqRU61hL5iyqYrEOX0wXWuhk=";
+  }) { inherit pkgs; };
+
+  # Build MCP configuration
+  mcpJsonConfig = mcpServersNix.lib.mkConfig pkgs {
+    programs = {
+      fetch.enable            = true;
+      brave-search = {
+        enable  = true;
+        envFile = config.sops.secrets.mcp-brave-env.path;
+        # envFile = "/run/secrets/mcp-brave-env";
+      };
+      puppeteer.enable        = true;
+      # memory.enable           = true;
+      sequential-thinking.enable = true;
+    };
+    settings = {
+      mcpServers.nixos = {
+        command = "nix";
+        args    = [ "run" "github:utensils/mcp-nixos" "--" ];
+      };
+    };
+  };
+
+  setupMcpConfigDominik = pkgs.writeShellScript "setup" ''
+    ${pkgs.coreutils-full}/bin/mkdir -p /home/dominik/.config/Code/User/globalStorage/rooveterinaryinc.roo-cline/settings
+    if [ -f /home/dominik/.config/Code/User/globalStorage/rooveterinaryinc.roo-cline/settings/mcp_settings.json ]; then
+      echo "Removing old mcp.json…"
+      rm /home/dominik/.config/Code/User/globalStorage/rooveterinaryinc.roo-cline/settings/mcp_settings.json
+    fi
+    ${pkgs.coreutils-full}/bin/ln -s ${builtins.toString mcpJsonConfig} \
+       /home/dominik/.config/Code/User/globalStorage/rooveterinaryinc.roo-cline/settings/mcp_settings.json
+  '';
+in
+{
+  # Manage Brave Search API key file via sops
+  sops.secrets.mcp-brave-env = {
+    owner = "dominik";
+  };
+
+  # Systemd service to deploy to VSCode globalStorage
+  systemd.services."setup-roo-mcp-config-dominik" = {
+    description = "Deploy Roo MCP config for dominik";
+    wantedBy    = [ "multi-user.target" ];
+    after       = [ "nss-user-lookup.target" ];
+    serviceConfig = {
+      Type            = "oneshot";
+      RemainAfterExit = true;
+      ExecStart       = setupMcpConfigDominik;
+    };
+  };
+}

hosts/nb/modules/ollama.nix

@@ -0,0 +1,13 @@
+{ config, pkgs, lib, ... }:
+
+{
+  services.ollama = {
+    enable = true;
+    host = "127.0.0.1";
+    port = 11434;
+    openFirewall = false;
+    loadModels = [
+      "mxbai-embed-large"
+    ];
+  };
+}

hosts/nb/modules/qdrant.nix

@@ -0,0 +1,7 @@
+{ config, pkgs, ... }:
+
+{
+  services.qdrant = {
+    enable = true;
+  };
+}

hosts/nb/modules/sway/foot.ini

@@ -2,6 +2,7 @@
 
 # shell=$SHELL (if set, otherwise user's default shell from /etc/passwd)
 # term=foot (or xterm-256color if built with -Dterminfo=disabled)
+term=xterm-256color
 # login-shell=no
 
 # app-id=foot # globally set wayland app-id. Default values are "foot" and "footclient" for desktop and server mode

hosts/nb/modules/sway/sway.conf

@@ -5,7 +5,7 @@
 # i3 config file (v4)
 
 # font for window titles and bar
-font pango:Source Sans Pro 14
+font pango:Source Sans Pro 12
 seat * xcursor_theme Adwaita 24
 
 # use win key
@@ -293,7 +293,7 @@ exec /run/wrappers/bin/gnome-keyring-daemon --start --daemonize
 exec dbus-sway-environment
 exec configure-gtk
 exec nm-applet --indicator
-exec alacritty -t alacritty-sway
+exec foot -c /etc/xdg/foot/foot.ini -T terminal-sway
 exec firefox --name=social -p social
 exec thunderbird
 exec firefox
@@ -312,7 +312,7 @@ exec mako --default-timeout=5000
 
 # wallpaper
 # output eDP-1 scale 2 scale_filter linear
-output eDP-1 mode 2880x1920 scale 2
+output eDP-1 mode 2880x1920 scale 2 scale_filter linear
 output eDP-1 bg #282a36 solid_color
 output eDP-1 bg ~/.wallpaper.png center
 output DP-2 position 0 0

hosts/nb/modules/sway/sway.nix

@@ -13,7 +13,6 @@ let
       systemctl --user stop pipewire pipewire-media-session xdg-desktop-portal xdg-desktop-portal-wlr
       systemctl --user start pipewire pipewire-media-session xdg-desktop-portal xdg-desktop-portal-wlr
       systemctl --user import-environment DISPLAY
-      export GDK_BACKEND=x11
       export STEAM_RUNTIME=0
     '';
   };

hosts/nb/modules/sway/waybar.css

@@ -1,5 +1,5 @@
 * {
-	font-size: 16px;
+	font-size: 13px;
 	font-family: monospace;
 }
 
@@ -10,12 +10,12 @@ window#waybar {
 
 #custom-right-arrow-dark,
 #custom-left-arrow-dark {
-  font-size: 20px;
+  font-size: 16px;
 	color: #252525;
 }
 #custom-right-arrow-light,
 #custom-left-arrow-light {
-  font-size: 20px;
+  font-size: 16px;
 	color: #282a36;
 	background: #252525;
 }

hosts/nb/secrets.yaml

@@ -9,11 +9,8 @@ cyberghost_ca: ENC[AES256_GCM,data:9PHq2qHLsCvAmJR3S4J2ccNk6ec/LDauR6KoIpvvHX2v7
 cyberghost_cert: ENC[AES256_GCM,data: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,iv:vYJer+NYyRo/jcpGb66askFA42T+TmSfWTm3DKOIIt4=,tag:RlvqzLfvtJN0HloJZTJb1Q==,type:str]
 cyberghost_key: ENC[AES256_GCM,data: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,iv:EgSXZvyWmcBxBkAe6asJ2B12FKaLQPy4tRAtCvkys3M=,tag:B0lyX7IRNHX1CqlvBZaSpg==,type:str]
 openai_api_key: ENC[AES256_GCM,data:lH5Jf/xvtRRwuGYPM3g39J5DTQJowSKVqLtObgXRo+GOfpY/BKb46/R25rkWrOUv5pYK8PXmSm7obEkVBfoaYG0WufR6SzGH+R7hjrNgCzBA6g5pxmlE7CWPlPy6C6XqVgblL8aP2vD9qxJmIw8FYCLRgFHt5hK4d+Gd23BeBnkmPWIH23xyRFhCcb891CoiEEdXL5p1LNAOAW5ePmAyavc/Dlk=,iv:lWXy8/LlWeRVSect87/qsG2nOkmL5W7jpw/DVSnAbEs=,tag:n3pWUJ5uEMXtgt/kHG8J8w==,type:str]
+mcp-brave-env: ENC[AES256_GCM,data:FND006AIjGjSkJqx12RVd8NnyDIhqdUBgZxucaAOFlnt7ZRYAHj4xQqgSJuFxg==,iv:Fn/663cGELKYQWg+Ok1uCtNCeIP7zZBJgxhhcsR/Q8M=,tag:v8K6JQ15CYwcLj7vSjyN6g==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
     age:
         - recipient: age14grjcxaq4h55yfnjxvnqhtswxhj9sfdcvyas4lwvpa8py27pjy2sv3g6v7
           enc: |
@@ -42,8 +39,7 @@ sops:
             L21ncjlQdGVDUjI2eXFIb3U2dW13bWsKuEwATNEUWtjuLsH7DQAt6J2l4blTId1W
             A1kQ+0dfUKrZ0dsbvUA5L9+haUiK8f5RvapaKW+L2JEn7gW5wJSJEw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-02-05T16:19:21Z"
+    lastmodified: "2025-06-04T07:24:01Z"
-    mac: ENC[AES256_GCM,data:ERVdP6Nk+o7DAVsN24EFr23R/9eF98Vq8O9ov9tiUyKdFcE/N5N0rQg1IyESuVujpOKOp4/WF488/Ez3S9dM0gNfqIctLT5Qw4EmNV+gs1SbtXdFE0eU3KbmFHxFsWRftQSpz0xalXBAAUHMUJfMQf1lyV7+TgGccIkvQB12QDM=,iv:Nsn1ohLkh3NSMbaWnl3UHDKG1lhTSUxNB8M7CIYxwvM=,tag:6PQ7VCb+enUnbRVAKYNR2g==,type:str]
+    mac: ENC[AES256_GCM,data:j/MJqFuGqJr5k/B0WCpeAQ0h0qADDHXtnlKbbNuvtYIkXj9z4hKN8xV7zzHg9tCak2GRNlVgn27qgiab0XxzG8LJN6GStWC28u6AZSzC9tGsJqQBlucmz7G3eEIcLLI37i3Fw+vXkgZ0T1NQai4gCIQCCjrZip/Lfug4BNuJkWU=,iv:IvznUwSbPfhL6V/WnWm/30+c1jh0JqAqlDX8KazvZAc=,tag:YsuSpx/dEIMlNqR1xmGU4w==,type:str]
-    pgp: []
     unencrypted_suffix: _unencrypted
-    version: 3.9.4
+    version: 3.10.2

hosts/nb/users/configs/project_history

@@ -8,6 +8,7 @@
 /home/dominik/projects/cloonar/cloonar-assistant
 /home/dominik/projects/cloonar/cloonar-assistant-customers
 /home/dominik/projects/cloonar/updns
+/home/dominik/projects/cloonar/mcp-servers-nix
 
 /home/dominik/projects/cloonar/flow/flow-docs
 /home/dominik/projects/cloonar/flow/flow-user-service

hosts/nb/users/dominik.nix

@@ -18,7 +18,7 @@ let
     "calendar.ui.version" = 3;
     "calendar.timezone.local" = "Europe/Vienna";
     "calendar.week.start" = 1;
-    "layout.css.devPixelsPerPx" = "1.5";
+    "layout.css.devPixelsPerPx" = "1.25";
   };
 
   thunderbirdCalendarPersonal = {
@@ -74,18 +74,18 @@ let
     "signon.rememberSignons" = false;
     "identity.sync.tokenserver.uri" = "https://sync.cloonar.com/1.0/sync/1.5";
     # "toolkit.legacyUserProfileCustomizations.stylesheets" = true;
-    "layout.css.devPixelsPerPx" = "1.5";
+    "layout.css.devPixelsPerPx" = "1.25";
     "media.ffmpeg.vaapi.enabled" = true;
     "media.ffmpeg.vaapi-drm-display.enabled" = true;
     "gfx.webrender.all" = true;
     "xpinstall.signatures.required" = false;
   };
 
-  firefoxUserChrome = ''
+  # firefoxUserChrome = ''
-    * {
+  #   * {
-    font-size: 16pt !important
+  #   /* removed explicit font-size to use default */
-    }
+  #   }
-  '';
+  # '';
 
   firefoxSearchSettings = {
     force = true;
@@ -604,6 +604,7 @@ in
       git clone gitea@git.cloonar.com:Cloonar/cloonar-assistant.git ${persistHome}/projects/cloonar/cloonar-assistant 2>/dev/null
       git clone gitea@git.cloonar.com:Cloonar/cloonar-assistant-customers.git ${persistHome}/projects/cloonar/cloonar-assistant-customers 2>/dev/null
       git clone gitea@git.cloonar.com:Cloonar/updns.git ${persistHome}/projects/cloonar/updns 2>/dev/null
+      git clone git@github.com:dpolakovics/mcp-servers-nix.git ${persistHome}/cloonar/mcp-servers-nix 2>/dev/null
 
       git clone gitea@git.cloonar.com:Cloonar/flow-docs.git ${persistHome}/projects/cloonar/flow/flow-docs 2>/dev/null
       git clone gitea@git.cloonar.com:Cloonar/flow-user-service.git ${persistHome}/projects/cloonar/flow/flow-user-service 2>/dev/null

shell.nix

@@ -0,0 +1,57 @@
+with import <nixpkgs> { };
+
+let
+  # 1. Import mcp-servers-nix (classic default.nix) from GitHub.
+  #    This provides `mcpServers.lib.mkConfig` and the individual server packages.
+  mcpServers = import (builtins.fetchTarball {
+    url = "https://github.com/natsukium/mcp-servers-nix/archive/refs/heads/main.tar.gz";
+    # Optionally pin with sha256 once known.
+  }) { inherit pkgs; };
+
+  # 3. Build the JSON configuration string with exactly fetch, memory, and brave-search.
+  #    We assume you store your Brave Search API key in "~/.config/mcp-servers/brave.env"
+  mcpConfig = mcpServers.lib.mkConfig pkgs {
+    programs = {
+      # fetch.enable = true;
+      filesystem = {
+        enable = true;
+        args = [ "/home/${builtins.getEnv "USER"}/projects/cloonar/cloonar-nixos/" ];
+      };
+      git = {
+        enable = true;
+        args = [ "/home/${builtins.getEnv "USER"}/projects/cloonar/cloonar-nixos/" ];
+      };
+      sequential-thinking.enable = true;
+      # memory.enable        = true;
+      "brave-search" = {
+        enable  = true;
+        envFile = "/home/${builtins.getEnv "USER"}/.config/mcp-servers/brave.env";
+      };
+    };
+    settings = {
+      mcpServers = {
+        nixos = {
+          command = "nix";
+          args = ["run" "github:utensils/mcp-nixos" "--"];
+        };
+      };
+    };
+  };
+
+in
+
+pkgs.mkShell {
+  # 4. Bring in 'jq' so you can inspect the JSON if needed.
+  buildInputs = [ pkgs.jq ];
+
+  # 5. On shell entry, write out 'claude_desktop_config.json' in the project root.
+  shellHook = ''
+    if [ -f ./.roo/mcp.json ]; then
+      echo "Removing old mcp.json…"
+      rm ./.roo/mcp.json
+    fi
+    echo "Generating mcp.json…"
+    ln -s ${builtins.toString mcpConfig} ./.roo/mcp.json
+    echo "✅ mcp.json has been created."
+  '';
+}

utils/pkgs/bento/default.nix

@@ -6,8 +6,8 @@ stdenv.mkDerivation rec {
 
   src = fetchgit {
     url = "https://github.com/dpolakovics/bento.git";
-    rev = "73092673b194fd734d782f5b7e83dfbb5d169372";
+    rev = "9406ae0d0ab77d0432aad76ea99bc63ecc123dd5";
-    sha256 = "sha256-/37RJTjo+FJa1Flt59LrQbaJIcBid/z+Hy1xfhYGXNA=";
+    sha256 = "sha256-YB0vMoMaPPpDHX29+6GGVRVUOW8tfwYR7BdEgV3KGhA=";
   };
 
   buildInputs = [ ];