update lock file remove tabs

modules/ripping.nix

@@ -3,7 +3,7 @@
 {
   home.packages = with pkgs; [
     whipper
-	beets
+  beets
   ];
 
   programs.beets = {
@@ -14,11 +14,11 @@
       library = "/var/lib/music/library.db";
 
       plugins = [
-	    "musicbrainz"
+      "musicbrainz"
         "fetchart"
         "embedart"
         "scrub"
-		"chroma"
+    "chroma"
       ];
 
       per_disc_numbering = true;
@@ -36,7 +36,7 @@
         default = "$albumartist/$album%aunique{}/$track - $title";
       };
 
-	  fetchart.auto = true;
+    fetchart.auto = true;
       embedart.auto = true;
       scrub.auto = true;
     };

modules/site/blog.nix

@@ -14,13 +14,7 @@ in
     enable = true;
     virtualHosts."grasswren.net".extraConfig = ''
       encode
-      root * ${website}/home
-      file_server
-    '';
-
-    virtualHosts."blog.grasswren.net".extraConfig = ''
-      encode
-      root * ${website}/blog
+      root * ${website}
       file_server
     '';
   };

modules/site/code.nix

@@ -20,13 +20,13 @@
       user = "gitea";
     };
 
-	settings.service.DISABLE_REGISTRATION = true;
+  settings.service.DISABLE_REGISTRATION = true;
   };
 
   services.caddy = {
     enable = true;
-	virtualHosts."code.grasswren.net".extraConfig = ''
-	  reverse_proxy localhost:3000
-	'';
+  virtualHosts."code.grasswren.net".extraConfig = ''
+    reverse_proxy localhost:3000
+  '';
   };
 }

modules/site/music.nix

@@ -3,13 +3,13 @@
 {
   services.navidrome = {
     enable = true;
-	settings.MusicFolder = "/var/lib/music";
+  settings.MusicFolder = "/var/lib/music";
   };
 
   services.caddy = {
     enable = true;
-	virtualHosts."music.grasswren.net".extraConfig = ''
+  virtualHosts."music.grasswren.net".extraConfig = ''
       reverse_proxy localhost:4533
-	'';
+  '';
   };
 }

modules/site/photo.nix

@@ -3,15 +3,15 @@
 {
   services.immich = {
     enable = true;
-	host = "127.0.0.1";
-	port = 2283;
-	mediaLocation = "/var/lib/immich";
+  host = "127.0.0.1";
+  port = 2283;
+  mediaLocation = "/var/lib/immich";
   };
 
   services.caddy = {
     enable = true;
-	virtualHosts."photo.grasswren.net".extraConfig = ''
+  virtualHosts."photo.grasswren.net".extraConfig = ''
       reverse_proxy localhost:2283
-	'';
+  '';
   };
 }

modules/site/vault.nix

@@ -3,7 +3,7 @@
 {
   services.vaultwarden = {
     enable = true;
-	backupDir = "/var/lib/vault-backup";
+  backupDir = "/var/lib/vault-backup";
     config = {
       DOMAIN = "https://vault.example.com";
       SIGNUPS_ALLOWED = false;
@@ -14,8 +14,8 @@
 
   services.caddy = {
     enable = true;
-	virtualHosts."vault.grasswren.net".extraConfig = ''
-	  reverse_proxy localhost:8222
-	'';
+  virtualHosts."vault.grasswren.net".extraConfig = ''
+    reverse_proxy localhost:8222
+  '';
   };
 }

modules/site/vpn.nix

@@ -3,29 +3,29 @@
 {
   services.headscale = {
     enable = true;
-	settings = {
+  settings = {
       server_url = "https://vpn.grasswren.net";
-	  listen_addr = "127.0.0.1:8080";
+    listen_addr = "127.0.0.1:8080";
 
-	  database.type = "sqlite";
+    database.type = "sqlite";
 
-	  ip_prefixes = [
+    ip_prefixes = [
         "100.64.0.0/10"
         "fd7a:115c:a1e0::/48"
       ];
 
-	  dns = {
-	    magic_domain = true;
-	    base_domain = "vpn.grasswren.net";
-		nameservers.global = [ "1.1.1.1" ];
-	  };
-	};
+    dns = {
+      magic_domain = true;
+      base_domain = "vpn.grasswren.net";
+    nameservers.global = [ "1.1.1.1" ];
+    };
+  };
   };
 
   services.caddy = {
     enable = true;
-	virtualHosts."vpn.grasswren.net".extraConfig = ''
-	  reverse_proxy localhost:8080
-	'';
+  virtualHosts."vpn.grasswren.net".extraConfig = ''
+    reverse_proxy localhost:8080
+  '';
   };
 }

modules/ssh.nix

@@ -3,19 +3,19 @@
 {
   networking.firewall = {
     enable = true;
-	interfaces.wg0.allowedTCPPorts = [ 22 ];
+  interfaces.wg0.allowedTCPPorts = [ 22 ];
   };
   services.openssh = {
     enable = true;
-	settings = {
+  settings = {
       PermitRootLogin = "prohibit-password";
-	  PasswordAuthentication = false;
-	  KbdInteractiveAuthentication = false;
-	};
-	listenAddresses = [{
+    PasswordAuthentication = false;
+    KbdInteractiveAuthentication = false;
+  };
+  listenAddresses = [{
       addr = "0.0.0.0";
-	  port = 22;
-	}];
+    port = 22;
+  }];
   };
 
   users.users.lilac.openssh.authorizedKeys.keys = [