Inital commit for working omega-relay host.

This commit includes:
- Mysql module from umbriel
- Disko configuration for the Ferox VM
- Freshrss module
- Stalwart module
- Vaultwarden module
- Wakapi module
- Uptime Kuma module
- Support for using mysql socket
- Server user that does not depend on full home-manager preset.
- ACME for wilkuu.xyz domains, including all the services.

4 files changed, 106 insertions, 0 deletions

diff --git a/secrets/omega-relay/freshrss.yaml b/secrets/omega-relay/freshrss.yaml
new file mode 100644
index 0000000..d6ad4b6
--- /dev/null
+++ b/secrets/omega-relay/freshrss.yaml
@@ -0,0 +1,27 @@
+fresh-rss:
+    admin_password: ENC[AES256_GCM,data:aAKl2jCR4w==,iv:xYQXINEeywuyg8+guhS+kv79L/crXLquJp+k6l4vUkI=,tag:4UA4D9jcYtIGHh1FHBv7Nw==,type:str]
+    db_password: ENC[AES256_GCM,data:Ov79Vw1I8A==,iv:T7oJEszUQoNyK8xxSg9jUEEmGlAVHTm98idrcLBWC3E=,tag:dow8CF+HwZFDh7PjF1dSUg==,type:str]
+sops:
+    age:
+        - recipient: age1hsxrd9shau86k7zz9wfdeplldyg5c2al6umnr7rn6tf7ewus64uswufr0a
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBxNjgybzlud0F0Tnd5UzA2
+            YkNTTGsyR1EvZGM3bGdQY3V5cnZWbWtiVGd3CnZac1RER3NhYisrVm9TVDcva1Nx
+            Z2RBdi9TUWxkY2lTYWlMVFVqYXNGN0kKLS0tIDZtd3hmZGdkMVRSZ0NsY0N6Nk16
+            cWs5SElDSjF1RytaTWZlMHl6OUxWRWsK6EVAusVlZb2skuQBa8hfgc9uH3MBgwWE
+            UoLJgeZ+7NLvj0SY6XbLJVm7mzY9BH1ezSU0ZZlJEJyUdgwc+HdV9w==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age13x9grwfpqjgvjfcnwg5snuntp5emze85hqc8qwuz9nfphfe2pg4skl29r4
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBTbTcyelc1YTgvYytESnNy
+            TnFkNGFhbUg2djdqK3dUeFFpRlVjd2tENW04CnRNUmtmc0NBeWFwYzlNTUNwTmJy
+            L3RNMDk2S3ZRYUVNUENUSWVNOFpkQTgKLS0tIE56RW95bVRYR0NWdGQrUlRaSFlu
+            alBWOE94TnA2ZnFEOHg2dElDS0ZuZ3MKem45+6LBH4GXrZpbAn9RUrbF/8A8Ecyd
+            oOjFC7bRxEDSbq1bU9LV4PurnjIFXJjrZbFlIZkiqQz8IfievsKY/w==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-01-25T12:43:00Z"
+    mac: ENC[AES256_GCM,data:SzUHVvZ9eDMMuXFSsmqxEPvpbLDd+b0x8c9vkypCduLyoi7W2kvM4hT/F5hWbdDcCcI262BETceMq19a3hkH9H0I2U8zxnYkPZuPjCI53v9Rb4tQkhrSc35afHijcVOsQmfqoP/olvESdNi+Db1ghkay8C3Dl7/SJ+J6chClmFs=,iv:ayViaJ5Ammcqi2mmf1y6W2BcLcheoMwlPN7CHEFaXYc=,tag:harswwEu4WVISwz6KyxDdg==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.11.0
diff --git a/secrets/omega-relay/stalwart.yaml b/secrets/omega-relay/stalwart.yaml
new file mode 100644
index 0000000..6cb5cba
--- /dev/null
+++ b/secrets/omega-relay/stalwart.yaml
@@ -0,0 +1,26 @@
+stalwart:
+    user_admin_password: ENC[AES256_GCM,data:oHKLJRLYCbVO7AQuzqwOd40jTV5Y7M76do9EduXpbas=,iv:u+jwIZL8c603XlbuANNYjXTY1vKan0xO3eWTiW6NlQo=,tag:C81dfQOuqtqnXPxJv5QuHw==,type:str]
+sops:
+    age:
+        - recipient: age1hsxrd9shau86k7zz9wfdeplldyg5c2al6umnr7rn6tf7ewus64uswufr0a
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBnc0NEREVWOVNCemtja1hx
+            RTZNMFFhdllrNTUrRzIxUCtJYW9YaStzMXlZCk5BOEFDRWJ4d0wrNVdRZmNxSUtq
+            OTV5Y1p5Q1hrdm4vci9STHRtSzQzbEEKLS0tIFJXdWxjUTQ1WVlJZW1aQU5MZXk0
+            anNhdWx0dnNML2JOd3A0K2pUMGp3THcKFULx1PTapR1/6f5SnLTdmrj1SIsqUkFS
+            oQ66VJrsJTUAtYkTPADyLwvTwTrhlGVOLw1S7iuSvvzgkb9j5k8lIg==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age13x9grwfpqjgvjfcnwg5snuntp5emze85hqc8qwuz9nfphfe2pg4skl29r4
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSByZ0ZFdVR3QlN6ajJjSDdz
+            RnlYL1FXaTl5cmxJYW9wYVVlMGNXNDUwNFFBCmRocUM5S3o1aWNBSjNBNmdXYTBh
+            Z0paUkNldzlkRWw2cnI0cGZwZGw3RzgKLS0tIFpwRGgzYzhCUUljOHZhY2g0cUc3
+            L3FBTTEyYU10c3pJUFdodTRwM0RkTVEK5DwewdrHKP8REJN3dCrx2Swkcat/15ep
+            wH4bb+3fy6jndgaczNpI9MUr6OfsS904mItw879OCIiRrxcjnuN5nw==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-01-17T21:45:45Z"
+    mac: ENC[AES256_GCM,data:ZN8Zmo6yvhuyJKrnAw4btIf6FxEWiQuCCBpWedYGj0S973YRgEbl7Q9HKsYrVOwNwGIMS5MBv+hjjvOMZvJU0331V7PefRy4yzqN10pJLgLwyB63ZrhOdY87q9U8Gz3K1qOoPJievJmyxBwUvbdwO7JWoeiNVxsC+YwGZiJ19yg=,iv:OillC3jS5bILDrZahmsN/sztSlFqrr2BpqzUYjdd7vU=,tag:28az0UH1hVcEq9532yY8nw==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.11.0
diff --git a/secrets/omega-relay/vaultwarden.yaml b/secrets/omega-relay/vaultwarden.yaml
new file mode 100644
index 0000000..69d49d1
--- /dev/null
+++ b/secrets/omega-relay/vaultwarden.yaml
@@ -0,0 +1,27 @@
+vaultwarden:
+    admin_token: ENC[AES256_GCM,data:d37MTTlBAelmO1ZAv9Qg5DlCUVF1YkqzvkCAq4/CPObvyIi7Km7u1zJGb8lCZx8p9qJRGaJQz6CRhusIH4iGWvg317j9WtO2kUYHhrduXkk9/BIDoW/BaN+9FmxEPSmH7Xpyoss/HnGNNce03KCUjqs7ZA81rXfPa6suVn4HV4+GnoiZJBs=,iv:gQncevzr8VBTLaA9Zd2zWH8xKYzuy8kR04xpwFwYNdM=,tag:H4MQfWrOQGkbY2Ghpd0/XA==,type:str]
+    admin_pass: ENC[AES256_GCM,data:/Acr0LuuWBzMx4Vcz/lV/5HUgNqxyAbhxVpvBFyo,iv:kANWTVPsPo+1VFxSsPqH9sCaH2lFJ5p9X15j12jZ5iU=,tag:4zsUNvFDADvFmW9DmQ/9cw==,type:str]
+sops:
+    age:
+        - recipient: age1hsxrd9shau86k7zz9wfdeplldyg5c2al6umnr7rn6tf7ewus64uswufr0a
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBzSTdRN1EvdG1DMzhMaDRV
+            VGdQaXE4SjZSVkJFNkRxbEE4blJPREM4Mmh3CmkrZFRvUytaUmpkNGdOSGhlWTJM
+            RWRRY0piOHBoQTg5cFUyOW03RDZKN1EKLS0tIFJKb0t2YXlvWTMvMm1BRWZRRE9G
+            NUhUUlUzUkxZNFlBa1lscU53K2RFRTQKrhP4y8tqkwXaSqoYzRNrAVQ9TFrxKOCM
+            PD3nI/R64Smou/ZHsXqv3EbdCeiccXH9WPoN/BNAh36Y3VsqlHSk9A==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age13x9grwfpqjgvjfcnwg5snuntp5emze85hqc8qwuz9nfphfe2pg4skl29r4
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSA5K201WTQrOWM3OEQwaUlp
+            RXlXMDExL0ZWcnR6aU0wNWQrRS9zZG5Ec2tJCnVLb1RTQkh0UkpDckFnRlc5RVo3
+            M2dKQjh2NU5rZGNRN281RGR0dC9qbWsKLS0tIDExbldNY1hNenBvNTdHcWVjRzl5
+            aUt2YTF4WkE0clFDMWhUSTJsNlhsMHMKtlGJ1nIhBtZ8OM9bbLyinroS1dUpPAmI
+            EnUnl2X+bACL0OK125T5SNyC2T/tNjO9TOzc9YlaJSlGLUbfwb1U1Q==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-01-24T19:54:55Z"
+    mac: ENC[AES256_GCM,data:7xNKZSR9CD0U7LhQ0ziHhgafNcvwZdWx+bQAffEVr+zk/1uC4LZn8vpab9Mwkma4ycW0w++LZZxNWx4lDJTLSl/+bGYb13pBGKiai5+4Bi7JIt5z9UAjLasPKTNCZXvXKv4Y2QLGT+Jqqkaa+e92RG3WSdnLwfZpoGUu89v/ifo=,iv:cwYU8650Ro437NpamndB6yMGUsGFxmtmWlwPwyC4VKE=,tag:qJlnztMaE6DhZ2WBQpCzLw==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.11.0
diff --git a/secrets/omega-relay/wakapi.yaml b/secrets/omega-relay/wakapi.yaml
new file mode 100644
index 0000000..06d0112
--- /dev/null
+++ b/secrets/omega-relay/wakapi.yaml
@@ -0,0 +1,26 @@
+wakapi:
+    password_salt: ENC[AES256_GCM,data:u8gNo915MwX9nWxJHsxI1xx+S7384EahefW5SrdqJVQ=,iv:1SCDw0CwgTIPEICmHwWlrzsguDmlBWSw7yWhw5aguJw=,tag:LvJwUGpNVHaj1EWx8XFXbQ==,type:str]
+sops:
+    age:
+        - recipient: age1hsxrd9shau86k7zz9wfdeplldyg5c2al6umnr7rn6tf7ewus64uswufr0a
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBCZ3Y4NkdXeFM2U2svMXdu
+            U044QlpPQjBsN3VhREtnTTJhempqWmNpNVNZClVGK1JNWUUvODBBSmpleXdqeEtz
+            YWM5ZVVodGJzZGV5QjBzN1BTRUFiOEEKLS0tIE9FOXFEa3NEd1BHeUIrcW95UUlm
+            NnFhSFJUZ0Q5bHBJVW95R1VHenU0bjgKHG88y2VtLZ7XoG3iNLda48jk+MvlQg+T
+            vRfjQIvcChsxZbttZk78DXmz2Z+wj+Cr0kyuZWAhjVJgCRV9owGp1w==
+            -----END AGE ENCRYPTED FILE-----
+        - recipient: age13x9grwfpqjgvjfcnwg5snuntp5emze85hqc8qwuz9nfphfe2pg4skl29r4
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAvblNnQzdLZnV5bFoyYjhL
+            enBPaHYvUXhNbWdEMy9LYk9aTVZWMkVobTBJClpuNVpTWmVnKzYwNUhFSTJlSDlW
+            bkpHbDRJelMyaldkcmc0ZVFxQnFNaTAKLS0tIGNKRXZodFBUditMWmd3M3h3L1lS
+            dHlSTnY0a21xa2FSUFAvNmRZQXZGZ1UKWzPXR/HiynJDO8AHNZn/kEfM3lynsVsp
+            9zHFzqeywBwPkqYrxEABVXASk7k9AXw8MTL/mgvUcATkKCWjic6Geg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-01-25T12:52:57Z"
+    mac: ENC[AES256_GCM,data:tkmq5bwnqmucoRJuD867q4TL/GWPjDvkQO4LUIsVwXtIj+CUmrh3CS9rAMMS+dcMGuG9e9H3hJX3LKWNWIdHTuA6GqIAU94LmmKI57gm1EPmaakJWB9P9gIP/N1IVQS3fc451RSU1cd94Dy1rApTjsspzpBxeed24KqoY67/76E=,iv:cfQqv2s2bSiB7+T/9OZcaA7N05LqvWIBlMr6NfLoTWE=,tag:4/o3V1CS7urudjqUjN5FkQ==,type:str]
+    unencrypted_suffix: _unencrypted
+    version: 3.11.0