deps

flake.lock

@@ -230,11 +230,11 @@
     "homebrew-cask": {
       "flake": false,
       "locked": {
-        "lastModified": 1767110926,
+        "lastModified": 1767295766,
-        "narHash": "sha256-DYYilOpLkrBdErjlTAy855OH9r3OIag18zPcvyY5Rto=",
+        "narHash": "sha256-Yl7L9Rbk3N8sJUBmk5undThK2dsJ2mgR3spJtFn3b+0=",
         "owner": "homebrew",
         "repo": "homebrew-cask",
-        "rev": "fd51f9aa1c03e362c702647d066a478f21942e1e",
+        "rev": "624505f9e894377d0afa3d68fea1a940266b8e42",
         "type": "github"
       },
       "original": {
@@ -246,11 +246,11 @@
     "homebrew-core": {
       "flake": false,
       "locked": {
-        "lastModified": 1767109830,
+        "lastModified": 1767294706,
-        "narHash": "sha256-jJuTvpgaI4X0/cpN6+k7RgPX6cvcFQkL5sSHc5GUyIs=",
+        "narHash": "sha256-8Q52NODr65kZ5i2ebLAZmkIJJk8uwob91AZBMqYCV/c=",
         "owner": "homebrew",
         "repo": "homebrew-core",
-        "rev": "9e58dc8fbfacf43e2ad2968ead35e87d2415cfa4",
+        "rev": "e7b92c0ecd62580f75acad66fe3ab3eb07b95fe1",
         "type": "github"
       },
       "original": {
@@ -266,11 +266,11 @@
         "treefmt-nix": "treefmt-nix"
       },
       "locked": {
-        "lastModified": 1767105192,
+        "lastModified": 1767277901,
-        "narHash": "sha256-Tofr+Al+jv8Z5ZfgMY5heYM/7DBv/n6TlYXAM3yMSbg=",
+        "narHash": "sha256-kUWSkMykZRX7xcftXbeqBEEPh4YlDqHVryIi9mkyWI4=",
         "owner": "numtide",
         "repo": "llm-agents.nix",
-        "rev": "2d8bccd50420e21dff80d3a1c003447dd613624c",
+        "rev": "35296d7ed78e9a051e1bbae3ec717e454b263001",
         "type": "github"
       },
       "original": {
@@ -351,11 +351,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1766902085,
+        "lastModified": 1767116409,
-        "narHash": "sha256-coBu0ONtFzlwwVBzmjacUQwj3G+lybcZ1oeNSQkgC0M=",
+        "narHash": "sha256-5vKw92l1GyTnjoLzEagJy5V5mDFck72LiQWZSOnSicw=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "c0b0e0fddf73fd517c3471e546c0df87a42d53f4",
+        "rev": "cad22e7d996aea55ecab064e84834289143e44a0",
         "type": "github"
       },
       "original": {
@@ -367,11 +367,11 @@
     },
     "nixpkgs_3": {
       "locked": {
-        "lastModified": 1766840161,
+        "lastModified": 1767026758,
-        "narHash": "sha256-Ss/LHpJJsng8vz1Pe33RSGIWUOcqM1fjrehjUkdrWio=",
+        "narHash": "sha256-7fsac/f7nh/VaKJ/qm3I338+wAJa/3J57cOGpXi0Sbg=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "3edc4a30ed3903fdf6f90c837f961fa6b49582d1",
+        "rev": "346dd96ad74dc4457a9db9de4f4f57dab2e5731d",
         "type": "github"
       },
       "original": {
@@ -404,11 +404,11 @@
         "systems": "systems_2"
       },
       "locked": {
-        "lastModified": 1767002962,
+        "lastModified": 1767185101,
-        "narHash": "sha256-HGFRwMRUwt56E+SiVX9YQOzpOwHy0/rtEqMoEbkF8Yg=",
+        "narHash": "sha256-gyNczVfQMoi+OQghxBik6wx8XLsCelok9SMl1bMLUoc=",
         "owner": "nix-community",
         "repo": "nixvim",
-        "rev": "63c957603751f0a107c4d9c2cbaff1c8749fc9f1",
+        "rev": "df9d3637e80b98c5b937fc73a465d0eea2c3aa88",
         "type": "github"
       },
       "original": {
@@ -544,11 +544,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1767086983,
+        "lastModified": 1767122417,
-        "narHash": "sha256-l4c8HQkgsB15BUZI1SHLAZHQ7822iIkJtOsdIuXIO4s=",
+        "narHash": "sha256-yOt/FTB7oSEKQH9EZMFMeuldK1HGpQs2eAzdS9hNS/o=",
         "owner": "numtide",
         "repo": "treefmt-nix",
-        "rev": "c9eb5bb179067ddced348aca023a3fbf8b5832c5",
+        "rev": "dec15f37015ac2e774c84d0952d57fcdf169b54d",
         "type": "github"
       },
       "original": {

hosts/tahani/paperless.nix

@@ -12,6 +12,37 @@
 				reverse_proxy localhost:${toString config.services.paperless.port}
 			'';
 		};
+		virtualHosts."docs-ai.manticore-hippocampus.ts.net" = {
+			extraConfig = ''
+				tls {
+					get_certificate tailscale
+				}
+				reverse_proxy localhost:3000
+			'';
+		};
+	};
+
+	virtualisation.oci-containers = {
+		backend = "docker";
+		containers.paperless-ai = {
+			image = "clusterzx/paperless-ai:latest";
+			autoStart = true;
+			volumes = [
+				"paperless-ai-data:/app/data"
+			];
+			environment = {
+				PUID = "1000";
+				PGID = "1000";
+				PAPERLESS_AI_PORT = "3000";
+				# Initial setup wizard will configure the rest
+				PAPERLESS_AI_INITIAL_SETUP = "yes";
+				# Paperless-ngx API URL accessible from container (using host network)
+				PAPERLESS_API_URL = "http://127.0.0.1:${toString config.services.paperless.port}/api";
+			};
+			extraOptions = [
+				"--network=host"
+			];
+		};
 	};
 
 	services.redis.servers.paperless = {