feat: paperless

Author: DieracDelta

custom_modules/core_services.nix

@@ -102,6 +102,18 @@ in
             reverse_proxy localhost:5123
           }
 
+          handle_path /searx* {
+            reverse_proxy 127.0.0.1:3838
+          }
+
+          handle /ntopng* {
+            reverse_proxy 100.74.54.40:3123
+          }
+
+          handle /paperless* {
+            reverse_proxy localhost:28981
+          }
+
           handle {
             reverse_proxy 127.0.0.1:8082
           }
@@ -191,6 +203,33 @@ in
                 };
               };
             }
+            {
+              "SearX" = {
+                icon = "searxng"; # or "searx"
+                href = "/searx/";
+                description = "Private Search Engine";
+              };
+            }
+            {
+              "Ntopng" = {
+                icon = "ntopng";
+                href = "/ntopng/";
+                description = "Network Traffic Monitor";
+              };
+            }
+            {
+              "Paperless" = {
+                icon = "paperless-ngx";
+                href = "/paperless/"; # Browser link
+                description = "Document Manager";
+                widget = {
+                  type = "paperlessngx";
+                  # Note: We must include /paperless in the internal URL too
+                  url = "http://127.0.0.1:28981/paperless";
+                  key = "YOUR_LONG_API_TOKEN_HERE";
+                };
+              };
+            }
           ];
         }
       ];

custom_modules/jellyfin.nix

@@ -270,6 +270,18 @@ in
       # consumptionDir = "/var/lib/paperless/in";
       # consumptionDirIsPublic = true;
       address = "0.0.0.0";
+      settings = {
+        # 1. This is the Magic Switch: Tells Paperless "I live in this folder"
+        PAPERLESS_FORCE_SCRIPT_NAME = "/paperless";
+        PAPERLESS_STATIC_URL = "/paperless/static/";
+
+        # 2. Your full public URL (Must include /paperless at the end)
+        PAPERLESS_URL = "https://office-desktop.tail5ca7.ts.net/paperless";
+
+        # 3. Security settings to allow the connection
+        PAPERLESS_CSRF_TRUSTED_ORIGINS = "https://office-desktop.tail5ca7.ts.net";
+        PAPERLESS_ALLOWED_HOSTS = "office-desktop.tail5ca7.ts.net,localhost,127.0.0.1";
+      };
     };
     users.users.paperless = {
       shell = pkgs.bashInteractive;
@@ -435,6 +447,9 @@ in
     services.vnstat.enable = true;
     services.ntopng.enable = true;
     services.ntopng.httpPort = 3123;
+    services.ntopng.extraConfig = ''
+      --http-prefix="/ntopng"
+    '';
 
     services.opensnitch.enable = true;
 

custom_modules/workstation_services.nix

@@ -355,6 +355,7 @@ in
       enable = true;
       redisCreateLocally = true;
       settings.server = {
+        base_url = "https://office-desktop.tail5ca7.ts.net/searx";
         bind_address = "0.0.0.0";
         port = "3838";
         secret_key = "secret key";