From 531ca725a22bbdccd539a247857d64cc148b1c71 Mon Sep 17 00:00:00 2001
From: Christine Elisabeth Koppel <kuutruu@posteo.net>
Date: Sat, 21 Feb 2026 12:58:56 +0100
Subject: [PATCH 1/5] Add Podman to personal server

---
 .../modules/system/teamspeak.nix              | 21 +++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/nix-system-configs/modules/system/teamspeak.nix b/nix-system-configs/modules/system/teamspeak.nix
index 5e6cf5c..4858e1d 100644
--- a/nix-system-configs/modules/system/teamspeak.nix
+++ b/nix-system-configs/modules/system/teamspeak.nix
@@ -52,6 +52,27 @@ in {
       openFirewall = true;
     };
 
+    # Add podman with docker compose
+    # Enable common container config files in /etc/containers
+    virtualisation.containers.enable = true;
+    virtualisation = {
+      podman = {
+        enable = true;
+
+        # Create a `docker` alias for podman, to use it as a drop-in replacement
+        dockerCompat = true;
+
+        # Required for containers under podman-compose to be able to talk to each other.
+        defaultNetwork.settings.dns_enabled = true;
+      };
+    };
+    environment.systemPackages = with pkgs; [
+      dive # look into docker image layers
+      podman-tui # status of containers in the terminal
+      docker-compose # start group of containers for dev
+      #podman-compose # start group of containers for dev
+    ];
+
     ## Add Conduit for Matrix
 
     # See https://search.nixos.org/options?channel=unstable&query=services.matrix-conduit.

From 8c22e153bdd0826456dcbc11bbcf1dec90d3da1e Mon Sep 17 00:00:00 2001
From: Christine Elisabeth Koppel <kuutruu@posteo.net>
Date: Sat, 21 Feb 2026 13:06:47 +0100
Subject: [PATCH 2/5] Open ports for Mautrix Bridge

---
 nix-system-configs/modules/system/teamspeak.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/nix-system-configs/modules/system/teamspeak.nix b/nix-system-configs/modules/system/teamspeak.nix
index 4858e1d..205b0b8 100644
--- a/nix-system-configs/modules/system/teamspeak.nix
+++ b/nix-system-configs/modules/system/teamspeak.nix
@@ -108,12 +108,14 @@ in {
       443
       12244
       8448
+      29334
     ];
     networking.firewall.allowedUDPPorts = [
       80
       443
       12244
       8448
+      29334
     ];
 
     system.stateVersion = "25.11";

From 891f974404a3abc426025e56f5748fbcc04bb263 Mon Sep 17 00:00:00 2001
From: Christine Elisabeth Koppel <kuutruu@posteo.net>
Date: Sat, 21 Feb 2026 13:52:06 +0100
Subject: [PATCH 3/5] Add database for the Relay

---
 nix-system-configs/modules/system/teamspeak.nix | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/nix-system-configs/modules/system/teamspeak.nix b/nix-system-configs/modules/system/teamspeak.nix
index 205b0b8..c7b8175 100644
--- a/nix-system-configs/modules/system/teamspeak.nix
+++ b/nix-system-configs/modules/system/teamspeak.nix
@@ -102,6 +102,15 @@ in {
         # turn_secret = "your secret";
       };
     };
+    # PostgreSQL for the Relay
+    config.services.postgresql = {
+      enable = true;
+      ensureDatabases = ["discord-mautrix"];
+      authentication = pkgs.lib.mkOverride 10 ''
+        #type database  DBuser  auth-method
+        local all       all     trust
+      '';
+    };
 
     networking.firewall.allowedTCPPorts = [
       80

From 3beaad7928d816308b5708fc66a5003655fd6e8e Mon Sep 17 00:00:00 2001
From: Christine Elisabeth Koppel <kuutruu@posteo.net>
Date: Sat, 21 Feb 2026 13:53:34 +0100
Subject: [PATCH 4/5] Derp. Type in the config.

---
 nix-system-configs/modules/system/teamspeak.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nix-system-configs/modules/system/teamspeak.nix b/nix-system-configs/modules/system/teamspeak.nix
index c7b8175..17df572 100644
--- a/nix-system-configs/modules/system/teamspeak.nix
+++ b/nix-system-configs/modules/system/teamspeak.nix
@@ -103,7 +103,7 @@ in {
       };
     };
     # PostgreSQL for the Relay
-    config.services.postgresql = {
+    services.postgresql = {
       enable = true;
       ensureDatabases = ["discord-mautrix"];
       authentication = pkgs.lib.mkOverride 10 ''

From 43dc281e5a87f862a7c099a299686063e74ed0f8 Mon Sep 17 00:00:00 2001
From: Christine Elisabeth Koppel <kuutruu@posteo.net>
Date: Sat, 21 Feb 2026 14:03:45 +0100
Subject: [PATCH 5/5] Allow local connextions.

---
 nix-system-configs/modules/system/teamspeak.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/nix-system-configs/modules/system/teamspeak.nix b/nix-system-configs/modules/system/teamspeak.nix
index 17df572..09bcb1e 100644
--- a/nix-system-configs/modules/system/teamspeak.nix
+++ b/nix-system-configs/modules/system/teamspeak.nix
@@ -109,6 +109,8 @@ in {
       authentication = pkgs.lib.mkOverride 10 ''
         #type database  DBuser  auth-method
         local all       all     trust
+        host    all       all     127.0.0.1/32     scram-sha-256
+        host    all       all     ::1/128          scram-sha-256
       '';
     };