feat: add terraforming of authentik

containers/auth.nix

@@ -5,6 +5,7 @@ in
 {
   my-lxc.auth = {
     container = {
+      enable = true;
       cores = 2;
       memory = 1024;
       disk = "8G";

containers/papers.nix

@@ -0,0 +1,30 @@
+{ ... }:
+let
+  db_pass = import ../config/_passwords.nix;
+in
+{
+  my-lxc.papers = {
+    container = {
+      cores = 1;
+      memory = 512;
+      disk = "6G";
+      swap = 512;
+    };
+    db = {
+      enable = true;
+      password = db_pass.papers;
+    };
+    system = {
+      port = 80; # open in firewall + expose on proxy
+      importConfig = [
+        ../config/papers-paperless.nix
+      ];
+    };
+    logging = {
+      enable = true;
+      metricsEnable = true;
+    };
+    private = true; # available only on private lan
+    auth = false; # true; # auth overlay
+  };
+}

containers/vault.nix

@@ -7,7 +7,7 @@ in
     container = {
       cores = 1;
       memory = 512;
-      disk = "4G";
+      disk = "5G";
       swap = 512;
     };
     db = {