feat: added comfy ui

modules/nixos/services/comfyui/default.nix

@@ -2,10 +2,12 @@
   config,
   lib,
   pkgs,
+  flake,
   ...
 }:
 
 let
+  inherit (flake.config.people) user0;
   cfg = config.services.comfyui;
 in
 {

systems/ceres/config/comfyui.nix

@@ -1,9 +1,29 @@
-{ config, pkgs, ... }:
 {
+  config,
+  pkgs,
+  flake,
+  ...
+}:
+let
+  inherit (flake.config.machines.devices)
+    ceres
+    ;
+  inherit (flake.config.services.instances)
+    comfyui
+    web
+    ;
+  service = comfyui;
+  localhost = web.localhost.address1;
+in
+{
+  nixpkgs.overlays = [
+    flake.inputs.nix-comfyui.overlays.default
+  ];
+
   services.comfyui = {
     enable = true;
     openFirewall = true;
-    host = "0.0.0.0"; # Allow external connections
+    host = localhost;
     package = pkgs.comfyuiPackages.comfyui.override {
       extensions = with pkgs.comfyuiPackages.extensions; [
         acly-inpaint
@@ -17,4 +37,31 @@
       ];
     };
   };
+  # fileSystems."/var/lib/${service.name}" = {
+  #   device = service.paths.path0;
+  #   fsType = "none";
+  #   options = [
+  #     "bind"
+  #   ];
+  #   depends = [
+  #     ceres.storage0.mount
+  #   ];
+  # };
+
+  # systemd.tmpfiles.rules = [
+  #   "Z ${service.paths.path0} 755 ${service.name} ${service.name} -"
+  #   "Z ${service.sops.path0} 755 ${service.name} ${service.name} -"
+  # ];
+
+  users.users.${service.name}.extraGroups = [
+    "users"
+  ];
+
+  networking = {
+    firewall = {
+      allowedTCPPorts = [
+        service.ports.port0
+      ];
+    };
+  };
 }