Replace Nominatim with self-hosted Photon for Dawarich geocoding

- Add Photon OCI container on nixnuc (rtuszik/photon-docker, planet
  index) storing data on the /orico ZFS mirror
- Open port 2322 in nixnuc's main firewall allowlist (LAN + Tailscale)
- Remove services.nominatim, its nginx vhost, and www-data PostgreSQL
  user from nixnuc
- Switch Dawarich on hetznix01 from NOMINATIM_API_HOST to
  PHOTON_API_HOST pointing at nixnuc.atlas-snares.ts.net:2322
- Add zfs-datasets.nix oneshot to declaratively ensure all orico
  datasets exist before services start

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Gene Liverman 2026-05-27 22:58:30 -04:00
parent f317a10095
commit 952fd0e083
No known key found for this signature in database
4 changed files with 82 additions and 32 deletions

View file

@ -51,8 +51,8 @@ in
enable = true;
configureNginx = true;
environment = {
NOMINATIM_API_HOST = "nominatim.home.technicalissues.us";
NOMINATIM_API_USE_HTTPS = "true";
PHOTON_API_HOST = "nixnuc.atlas-snares.ts.net:2322";
PHOTON_API_USE_HTTPS = "false";
};
extraEnvFiles = [
"${config.sops.secrets.dawarich_env.path}"