🏡 my personal home lab
paperless gpt
+19
-11
+12
-9
modules/paperless.nix
+12
-9
modules/paperless.nix
···
1
-
{ config, ... }:
1
+
{
2
+
config,
3
+
lib,
4
+
...
5
+
}:
2
6
{
3
7
services.paperless = {
4
8
enable = true;
···
29
33
environment = {
30
34
PAPERLESS_BASE_URL = "http://localhost:28981";
31
35
LLM_PROVIDER = "ollama";
32
-
LLM_MODEL = "deepseek-r1:8b";
36
+
LLM_MODEL = "qwen2.5vl:3b";
33
37
LLM_LANGUAGE = "deu";
34
38
VISION_LLM_PROVIDER = "ollama";
35
-
VISION_LLM_MODEL = "deepseek-ocr";
39
+
VISION_LLM_MODEL = "qwen2.5vl:3b";
36
40
OLLAMA_HOST = "http://localhost:11434";
41
+
OLLAMA_CONTEXT_LENGTH = "8192";
42
+
TOKEN_LIMIT = "1000";
37
43
LOG_LEVEL = "info";
38
44
};
39
45
volumes = [
···
44
50
45
51
services.ollama = {
46
52
enable = true;
47
-
loadModels = [
48
-
"deepseek-r1:8b"
49
-
"deepseek-ocr"
50
-
];
53
+
loadModels = [ "qwen2.5vl:3b" ];
51
54
};
52
55
53
56
services.postgresqlBackup = {
···
80
83
81
84
sops.templates."paperless.env".content =
82
85
let
83
-
oidcConfig = builtins.toJSON {
86
+
oidcConfig = lib.toJSON {
84
87
openid_connect = {
85
88
OAUTH_PKCE_ENABLED = true;
86
89
APPS = [
87
90
{
88
91
provider_id = "pocket-id";
89
-
name = "Pocket ID";
92
+
name = "gooID";
90
93
client_id = config.sops.placeholder.paperless-oidc-client-id;
91
94
secret = config.sops.placeholder.paperless-oidc-client-secret;
92
95
settings = {
+6
-2
secrets/secrets.yaml
+6
-2
secrets/secrets.yaml
···
19
19
rustical-oidc-client-secret: ENC[AES256_GCM,data:savr1jjsi+cO6Rotx3zydTVl5qMiieOJ1Ue3+/IFBRQ=,iv:d3h/fuIfA2w3gnT0pCVSixaR1PbvfwwX/Pb3u+sDodc=,tag:YZgogP9Howbt2P7MVThegQ==,type:str]
20
20
screego-secret: ENC[AES256_GCM,data:25elrR88LTQFJz1T6Hj1qDwNnaFnAFxTKwiVZYxVQ66wGI70m22WCexOIVLsxz1xtSEgX0JGTVPSx7qU7ZE4yw==,iv:VV4PpBihmQRJ7CVMIL7jRIAQbwpW5/c6vJftUNp/9hM=,tag:stfLGZ8veoNChnei7U+2/A==,type:str]
21
21
screego-users: ENC[AES256_GCM,data:hoQPaoy3q+gY67IJRPg3MZdomx4I34hHP/aN3slMF+yC46gML7e1gkCrXWSeJYMlxKFAtYEQAh1ShwrBk0OEfow=,iv:f+aQ1qoOg254NqFInQfTGV0lCnLUwBNHZztW05YuahU=,tag:SvLRDnHcag4gDvnYSjZwqw==,type:str]
22
+
paperless-oidc-client-id: ENC[AES256_GCM,data:0vCj5kUaCHfDw9Tc7Hx/h3JbLDbiE589IYnFnMYQfqp05HKU,iv:0BN/CpFS67mY4cA0HPUG36NOhyYuJqgzM9qKHraiUlY=,tag:6wJzAHtdqWyT4c+21zQ52Q==,type:str]
23
+
paperless-oidc-client-secret: ENC[AES256_GCM,data:5VRihI4tukYYMzW2E8QTXWgWospKAgf6AGyLKhAMB+Y=,iv:NgBA3E+9jWqXrSfige1Kn9P/egUtKABE81Hz6+/FiPE=,tag:NEoOub3oROlzgb4Z6Gm8Lg==,type:str]
24
+
paperless-admin-password: ENC[AES256_GCM,data:cFGZt5Iz3bFvFuu0a6DpkQMOCobwaYEXIxnVjtkWvRXNu+YTEK4Bp5cOnUNTCyQARZjAn/wow10nbeA=,iv:jOhVz2hHr/8VYcLfuf0g7eRR7I9HwyW8Tr5zC81mPTw=,tag:KezJTY6W0EFqz4DbMwqLlA==,type:str]
25
+
paperless-api-token: ENC[AES256_GCM,data:2deP+mqPVvajm1q+d7cLlid0gd/vo5/1BgPW1gyoezRDb/HxNMWemA==,iv:/J+C/ofDRHb6WpQnuYWzSPaSmkFi7mrxbh3D9sxJAE4=,tag:jHXP2aF+kD5zknUo1+XJRw==,type:str]
22
26
mumble-password: ENC[AES256_GCM,data:/GA5G4CEVQ==,iv:Ri70GW9Ln7vv3Nf0CSNW0PwypLUNvh+kvJjUqu393ig=,tag:NY+u/RxcKudlaZStgnGVTw==,type:str]
23
27
backup-repository: ENC[AES256_GCM,data:v6tUjTwVsym8i52jcapjSRXPIjX2xNFY+bZRkHnVsp4AebcksHzHEDX6N4BF3OuQ2KepOfHngMn61Mk=,iv:HPV+8aCPpvFnytja6RUA7hJdtz2BMI1zsH01w1J9r2w=,tag:znMIFmrcsKTIq2TowhAV0w==,type:str]
24
28
backup-identity: ENC[AES256_GCM,data:8TJP7vSWJAj56AcczQhMRoQqahxM4EGzPm+wk1apMD+L3pybXh/4LPp0DNcGugOb3RPTyjki6jZArDgiirS+ltbldaNQPZaZ4cFrtiJVt8D/iQlsgM9tR8oC7bcR4KV+UoVeeXJN0fWqy5U+IzJ87ZRKKyb9i8WKhPuWFIftb4KqZRyada7jhl/SzwuoIcw9BagMJPLv6BaUmNp1j5fOHvo7RseImiIqsbVo37NTqMMQf7PKM5gsMU6bbeAMjtdeC2RNVG21eop8JlO5uYVyjGxyl5wfU+PwMSRc+XNpgeVEv9mjdo6dkG3QC2poHZ77ot4py6HzQPUZjwLyFsr0ccC4e6e0PNOBtTPtku/LnXHsV45LB9Q3X7t9VSYCTtlJul2W8huZuCRnv7crvIUW21ZMTWiwMbqNEqDUJTBcPLDi42Ea4CvA+I6ODJP8n5g7GTHW0ggy6FtjVXH5DzhzJJULQ27kq97EWi43bSRv0N+N5C1viM+j+hs6tM5eQ15niRVB,iv:YpRoGlD8YFxZ+RChb6T4Eh665AMTTeTJXRFR0xa7l3k=,tag:FWOVonF+SYbbgQoopa2lhA==,type:str]
···
69
73
ajA5bDZCY1BnblVYRGQ1QTE2S2I4M2cKSIGmFBP6sqiiM+cvTMQuZHit9fN5Vffk
70
74
1pWz8xSen/tqoywqipRf3LqzFb2K7Bx15vwazHbm6LJJa+ZQaruVMg==
71
75
-----END AGE ENCRYPTED FILE-----
72
-
lastmodified: "2026-03-26T17:55:47Z"
73
-
mac: ENC[AES256_GCM,data:jxF/CaHhmr0X1OpseOOj/zIIcb0F/JzVZfplY7Lax4XIfT5Id6Vsve1SEPoR2VTYAqPjPIIxjfZOSihNkR4u15BI8FJjLvDSdJjJUzm3m8gmR46xLRIbX9QITAyyIuPrH75DNzJuq7tZS+Y182QPUC6ELHaTtTEH2A0a5mor+mg=,iv:bSK48upLzLrp4pXLV0X4XGtLHjzV7/H0JM3fBJJbwpE=,tag:gsvfIEzCclyyAD3Rg55c0A==,type:str]
76
+
lastmodified: "2026-04-01T09:35:35Z"
77
+
mac: ENC[AES256_GCM,data:SM9HRqjIxf5SMOYoJIQqTBxkQdL30rRHWF/Zp5m8FKEPOL63gcZIVatQxVevzZSpn1Cczkqx7QNxbo/xD3rEtQManQ0WhoY8RgcWtwLRh2RqxrxgEmJ2JpYvsnpECcxm7YfBdKT5b2nKbNHnDhOdcn9m3htQjCXTJ1aJ6c8mzsw=,iv:zXrt0oCPrGjCIqD55ll1kvX/scn8Ak4qw/cLmtSJWuk=,tag:wL6StpC5sp5BZsIC2Bg5Fw==,type:str]
74
78
unencrypted_suffix: _unencrypted
75
79
version: 3.12.2