modules: clean up

machines/weilite/default.nix

@@ -52,10 +52,6 @@
           owner = "caddy";
           mode = "400";
         };
-        "immich/oauth_client_secret" = {
-          owner = "immich";
-          mode = "400";
-        };
         "restic/localpass" = {
           owner = "restic";
         };
@@ -72,6 +68,10 @@
       };
     };
 
+    custom.monitoring = {
+      loki.enable = true;
+    };
+
     systemd.mounts = [
       {
         what = "immich";
@@ -108,43 +108,6 @@
       2222
     ];
 
-    services.immich = {
-      enable = true;
-      mediaLocation = "/mnt/XinPhotos/immich";
-      host = "127.0.0.1";
-      port = 3001;
-      openFirewall = true;
-      machine-learning.enable = true;
-      environment = {
-        IMMICH_MACHINE_LEARNING_ENABLED = "true";
-      };
-      database.enable = true;
-    };
-
-    custom.immich.jsonSettings = {
-      oauth = {
-        enabled = true;
-        issuerUrl = "https://auth.xinyang.life/oauth2/openid/immich/";
-        clientId = "immich";
-        clientSecret = {
-          _secret = config.sops.secrets."immich/oauth_client_secret".path;
-        };
-        scope = "openid email profile";
-        signingAlgorithm = "ES256";
-        storageLabelClaim = "email";
-        buttonText = "Login with Kanidm";
-        autoLaunch = true;
-        mobileOverrideEnabled = true;
-        mobileRedirectUri = "https://immich.xinyang.life:8000/api/oauth/mobile-redirect/";
-      };
-      passwordLogin = {
-        enabled = false;
-      };
-      newVersionCheck = {
-        enabled = false;
-      };
-    };
-
     services.dae = {
       enable = true;
       configFile = "/var/lib/dae/config.dae";