feat: add ollama ai server

hosts/sire/default.nix

@@ -132,6 +132,7 @@
       // mkMicrovm "immich" {
         enableStorageDataset = true;
       }
+      // mkMicrovm "ai" {}
       #// mkMicrovm "minecraft"
       #// mkMicrovm "firefly"
       #// mkMicrovm "fasten-health"

hosts/sire/guests/ai.nix

@@ -0,0 +1,18 @@
+{
+  microvm.mem = 1024 * 16;
+  microvm.vcpu = 20;
+
+  networking.firewall.allowedTCPPorts = [11434];
+
+  environment.persistence."/state".directories = [
+    {
+      directory = "/var/lib/private/ollama";
+      mode = "0700";
+    }
+  ];
+
+  services.ollama = {
+    enable = true;
+    listenAddress = "0.0.0.0:11434";
+  };
+}

hosts/sire/secrets/ai/host.pub

@@ -0,0 +1 @@
+ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIGD35UWbMDS/Asz1xNAf23XUqbAYsCxJFMuujfcFSENA

secrets/generated/sire-ai/telegraf-influxdb-token.age

@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> X25519 e09chuumAr9YIQr2FfMksKQ6fuynCRG48q3MFUpZMy0
+tdk5i7W1B3jHBQtpu0GNKhbRSCwAGdANJ++XTvcJsUc
+-> piv-p256 xqSe8Q AlCSRpF/mmCbRdgeJmgRfjYGv3UXsiDUXNd1ycXL/VYP
+flgemElH9cDwS13GFK0yhXEFMtae7mu6cigrtdEqwD4
+-> $#F(3&-grease
+
+--- oiRai0AKyVi3x1Ca4kvxWTsB+9iNGc1ns/dwhWKQ5Bk
+�®fõNbl΢ÜM‘uê¯r7{de‘\F´ùx"6=ÃGûÀ¯Zw$ÐM|È…”`¢ìf5¹~a@k÷8ñaîîØmÌAÌ$A=š¶å�øY

secrets/wireguard/proxy-sentinel/keys/sire-ai.age

@@ -0,0 +1,10 @@
+age-encryption.org/v1
+-> X25519 TH0kjq49QgHVMxiKN/A7GwtqwdQw9DAikE+5EjCvBh4
++vYyoJa5I2PTH+v+kwj5NyFwY+ZM9taFsC7r9uVn6nU
+-> piv-p256 xqSe8Q At6UZoFAzsYlT0QDcGGSWKxCsv4Iw/fOctV+d1EL3kMl
+Nf0ueYrxTsPPO/TsEHaNSV5jHFZkbDi0vQBd0wNfduE
+-> i-grease u.xSTA x'~zLGA_ e GE#
+ST6gex/P7Tl+iuVMtoP892ZiSqxNBKPcPu8mZqFMnuWOmY1sgaGWqo8uANrENf4S
+AWdV9+b9NrRHzwp+s5ZglVEZCj8uY/yNjr+5/sPqwyVGWqRh24kwWPg
+--- ihZIFb7aU1VLXXfmQCMhpC0YwTMyCu7mV8wRBaSIaXo
+ó3øÍãônkÁ¶&àH<»=ÖoœeAd+”)�™Y¡á„Ë
²
­ñ©à‚ðš€\5ÔP°åÇöç¹	Ÿj!ßü²•y—E>ÉEüµ8ki

secrets/wireguard/proxy-sentinel/keys/sire-ai.pub

@@ -0,0 +1 @@
+ygcBHVWOJfuMpLjaP8wmTlOxaKtLdfnOpkSnSI1yK0E=

secrets/wireguard/proxy-sentinel/psks/sentinel+sire-ai.age

@@ -0,0 +1,9 @@
+age-encryption.org/v1
+-> X25519 T95WvKmKcGXdvR9je/tOyisM9IFKYMAY/3GuHZwD+zo
+7kmXql4Ti7orkYWf3RGNW2fJ1GBL7X95TzPHzWmlTGc
+-> piv-p256 xqSe8Q A+L9ytWGceDG0o8dto7/Q35AGAKc4geqNq0/U46xMvfU
+RFiabxIUqn1eehP5Dy4aWQbTVqVFG1uXUkGmys5wuA4
+-> 9-grease B?'f1
+y9r8TgPo/KFoIkJ7svBEwQsRwSdENuvKbZUX
+--- INSbhj2g2kORf8xCpIWnCdbCh/kHh1RoiDhMdPvDLuk
+¶ðsÕ_„ÆYåÅã;߶€àÇÎT†s)ˆ-½« uM6*¤O•}^÷Ûb
/çü¤„]Rn
Ä÷îFùo—‚0Ô~ý2)éö/Èóž»