🏡 my personal home lab
add paperless gpt
+46
-1
+6
hosts/rk1-node-1.nix
+6
hosts/rk1-node-1.nix
+40
-1
modules/paperless.nix
+40
-1
modules/paperless.nix
···
20
20
};
21
21
};
22
22
23
+
virtualisation.oci-containers = {
24
+
backend = "podman";
25
+
containers.paperless-gpt = {
26
+
image = "icereed/paperless-gpt:latest";
27
+
extraOptions = [ "--network=host" ];
28
+
environmentFiles = [ config.sops.templates."paperless-gpt.env".path ];
29
+
environment = {
30
+
PAPERLESS_BASE_URL = "http://localhost:28981";
31
+
LLM_PROVIDER = "ollama";
32
+
LLM_MODEL = "deepseek-r1:8b";
33
+
LLM_LANGUAGE = "deu";
34
+
VISION_LLM_PROVIDER = "ollama";
35
+
VISION_LLM_MODEL = "deepseek-ocr";
36
+
OLLAMA_HOST = "http://localhost:11434";
37
+
LOG_LEVEL = "info";
38
+
};
39
+
volumes = [
40
+
"/var/lib/paperless-gpt/prompts:/app/prompts"
41
+
];
42
+
};
43
+
};
44
+
45
+
services.ollama = {
46
+
enable = true;
47
+
loadModels = [
48
+
"deepseek-r1:8b"
49
+
"deepseek-ocr"
50
+
];
51
+
};
52
+
23
53
services.postgresqlBackup = {
24
54
enable = true;
25
55
databases = [ "paperless" ];
···
28
58
29
59
systemd.tmpfiles.rules = [
30
60
"d /mnt/nas/data/paperless 0750 root root -"
61
+
"d /var/lib/paperless-gpt/prompts 0750 root root -"
31
62
];
32
63
33
64
systemd.services.paperless-scheduler = {
···
70
101
PAPERLESS_SOCIALACCOUNT_PROVIDERS=${oidcConfig}
71
102
'';
72
103
104
+
sops.templates."paperless-gpt.env".content = ''
105
+
PAPERLESS_API_TOKEN=${config.sops.placeholder.paperless-api-token}
106
+
'';
107
+
73
108
sops.secrets.paperless-admin-password = { };
74
109
sops.secrets.paperless-oidc-client-id = { };
75
110
sops.secrets.paperless-oidc-client-secret = { };
111
+
sops.secrets.paperless-api-token = { };
76
112
77
-
networking.firewall.allowedTCPPorts = [ 28981 ];
113
+
networking.firewall.allowedTCPPorts = [
114
+
28981
115
+
8080
116
+
];
78
117
}