feat: reenable immich with native module, prepare nixos-extra-modules update

nix/rage-decrypt-and-cache.sh

@@ -1,44 +0,0 @@
-#!/usr/bin/env bash
-
-set -euo pipefail
-
-print_out_path=false
-if [[ "$1" == "--print-out-path" ]]; then
-	print_out_path=true
-	shift
-fi
-
-file="$1"
-shift
-identities=("$@")
-
-# Strip .age suffix, and store path prefix or ./ if applicable
-basename="${file%".age"}"
-[[ "$file" == "/nix/store/"* ]] && basename="${basename#*"-"}"
-[[ "$file" == "./"* ]] && basename="${basename#"./"}"
-
-# Calculate a unique content-based identifier (relocations of
-# the source file in the nix store should not affect caching)
-new_name="$(sha512sum "$file")"
-new_name="${new_name:0:32}-${basename//"/"/"%"}"
-
-# Derive the path where the decrypted file will be stored
-out="/var/tmp/nix-import-encrypted/$UID/$new_name"
-umask 077
-mkdir -p "$(dirname "$out")"
-
-# Decrypt only if necessary
-if [[ ! -e "$out" ]]; then
-	args=()
-	for i in "${identities[@]}"; do
-		args+=("--identity" "$i")
-	done
-	rage --decrypt "${args[@]}" --output "$out" "$file"
-fi
-
-# Print out path or decrypted content
-if [[ "$print_out_path" == true ]]; then
-	echo "$out"
-else
-	cat "$out"
-fi