enable docker

nixbld-etc-nixos/configuration.nix

@@ -9,7 +9,6 @@
     [ # Include the results of the hardware scan.
       ./hardware-configuration.nix
       ./homu/nixos-module.nix
-      ./notifico/nixos-module.nix
     ];
 
   # Use the systemd-boot EFI boot loader.
@@ -70,11 +69,11 @@
   users.extraGroups.plugdev = { };
   users.extraUsers.sb = {
     isNormalUser = true;
-    extraGroups = ["wheel" "plugdev" "dialout" "lp" "scanner" "wireshark"];
+    extraGroups = ["wheel" "plugdev" "dialout" "lp" "scanner" "wireshark" "docker"];
   };
   users.extraUsers.rj = {
     isNormalUser = true;
-    extraGroups = ["wheel" "plugdev" "dialout" "wireshark"];
+    extraGroups = ["wheel" "plugdev" "dialout" "wireshark" "docker"];
   };
   users.extraUsers.astro = {
     isNormalUser = true;
@@ -156,6 +155,7 @@ ACTION=="add", SUBSYSTEM=="tty", \
   nix.sandboxPaths = ["/opt"];
 
   virtualisation.libvirtd.enable = true;
+  virtualisation.docker.enable = true;
 
   services.gitea = {
     enable = true;
@@ -195,6 +195,7 @@ ACTION=="add", SUBSYSTEM=="tty", \
         "lab.m-labs.hk" = null;
         "git.m-labs.hk" = null;
         "chat.m-labs.hk" = null;
+        "hooks.m-labs.hk" = null;
       };
     };
   };
@@ -248,11 +249,6 @@ ACTION=="add", SUBSYSTEM=="tty", \
           uwsgi_pass unix:${config.services.uwsgi.runDir}/uwsgi.sock;
         '';
       };
-      "notifico.m-labs.hk" = {
-        forceSSL = true;
-        useACMEHost = "notifico.m-labs.hk";
-        locations."/".proxyPass = "http://127.0.0.1:5000";
-      };
     };
   };
   services.uwsgi = {
@@ -271,11 +267,6 @@ ACTION=="add", SUBSYSTEM=="tty", \
     config = "/etc/nixos/secret/homu.toml";
   };
 
-  services.notifico = {
-    enable = true;
-    config = "/etc/nixos/secret/notifico.py";
-  };
-
   # This value determines the NixOS release with which your system is to be
   # compatible, in order to avoid breaking some software such as database
   # servers. You should change this only after NixOS release notes say you