Nix Podman Stacks

Appearance

bambuddy ​

Bambu Lab printer management, print archiving, and queueing.

Example ​

nix
{config, ...}: {
  nps.stacks.bambuddy = {
    enable = true;
    orcaSlicer.enable = true;
    oidc = {
      enable = true;
      clientSecretFile = config.sops.secrets."bambuddy/authelia/client_secret".path;
    };
  };
}

Stack Options ​

nps.stacks.bambuddy.bambuStudio.enable ​

Whether to run a private Bambu Studio API sidecar. Requires x86_64 Linux and enabling Use Slicer API in Bambuddy.

Type
plaintext
boolean
Default
nix
false
Declaration
<nps/modules/bambuddy>

nps.stacks.bambuddy.enable ​

Whether to enable bambuddy.

Type
plaintext
boolean
Default
nix
false
Example
nix
true
Declaration
<nps/modules/bambuddy>

nps.stacks.bambuddy.extraEnv ​

Extra environment variables (supports fromFile, fromTemplate, fromCommand). Overrides generated defaults.

Type
plaintext
attribute set of (null or boolean or signed integer or string or absolute path or (submodule))
Default
nix
{ }
Declaration
<nps/modules/bambuddy>

nps.stacks.bambuddy.oidc.adminGroup ​

LLDAP group mapped to Bambuddy's Administrators role on SSO login.

Type
plaintext
string
Default
nix
"bambuddy_admin"
Declaration
<nps/modules/bambuddy>

nps.stacks.bambuddy.oidc.clientSecretFile ​

The file containing the client secret for the OIDC client that will be registered in Authelia.

For examples on how to generate a client secret, see

https://www.authelia.com/integration/openid-connect/frequently-asked-questions/#client-secret

Type
plaintext
absolute path
Example
nix
config.sops.secrets."immich/authelia/client_secret".path"
Declaration
<nps/modules/bambuddy>

nps.stacks.bambuddy.oidc.clientSecretHash ​

The client secret hash. For examples on how to generate a client secret, see https://www.authelia.com/integration/openid-connect/frequently-asked-questions/#client-secret

The value can be passed in multiple ways:

  1. As a literal string
  2. As an absolute path to a file containing the hash (toFile)
  3. As an absolute oath to a file containing the client_secret, in which case the hash will be automatically computed (toHash)
  4. As null

If left unset (null), the client secret will be read from the file specified in the clientSecretFile option and hashed automatically before being passed to the Authelia container.

Type
plaintext
null or string or (submodule)
Default
nix
null
Example
nix
# Literal String:
"$pbkdf2-sha512$310000$cbOAIWbfz3vCVXIPIp6d2A$J0klwULa6TvPRCU1HAfuKua/dMKTl8gbTYJz2N73ejGUu0LUGz/y3kwmJLuKuAYGg3WQOT0q9ZzVHHUvpKpgvQ"

# Client secret hash stored in a file
{ fromFile = config.sops.secrets."immich/client_secret_hash".path; }

# Client secret stored in a file: Hash will be computed dynamically
{ toHash = config.sops.secrets."immich/client_secret".path; }

# Null (default): Hash will be computed automatically based on the clientSecretFile option
# Equivalent to { toHash = cfg.oidc.clientSecretFile; }
null
Declaration
<nps/modules/bambuddy>

nps.stacks.bambuddy.oidc.enable ​

Whether to configure native OIDC login with Authelia. Authentication and a local recovery administrator must still be set up in Bambuddy.

Type
plaintext
boolean
Default
nix
false
Declaration
<nps/modules/bambuddy>

nps.stacks.bambuddy.oidc.operatorGroup ​

LLDAP group mapped to Bambuddy's Operators role on SSO login.

Type
plaintext
string
Default
nix
"bambuddy_operator"
Declaration
<nps/modules/bambuddy>

nps.stacks.bambuddy.oidc.viewerGroup ​

LLDAP group mapped to Bambuddy's Viewers role on SSO login.

Type
plaintext
string
Default
nix
"bambuddy_viewer"
Declaration
<nps/modules/bambuddy>

nps.stacks.bambuddy.orcaSlicer.enable ​

Whether to run a private OrcaSlicer API sidecar. Requires x86_64 Linux and enabling Use Slicer API in Bambuddy.

Type
plaintext
boolean
Default
nix
false
Declaration
<nps/modules/bambuddy>

nps.stacks.bambuddy.virtualPrinter.enable ​

Whether to publish virtual-printer TCP ports on all host interfaces and advertise nps.hostIP4Address. Requires host permission for rootless low-port binding and manual in-app setup; does not configure the firewall or guarantee proxy-mode operation.

Type
plaintext
boolean
Default
nix
false
Declaration
<nps/modules/bambuddy>

Container Aliases ​

nps.stacks.bambuddy.containers.bambuddy ​

Alias of {option}services.podman.containers.bambuddy.

Type
plaintext
submodule
Declaration
<nps/modules/bambuddy>

nps.stacks.bambuddy.containers.bambuddy-bambu-studio ​

Alias of {option}services.podman.containers.bambuddy-bambu-studio.

Type
plaintext
submodule
Declaration
<nps/modules/bambuddy>

nps.stacks.bambuddy.containers.bambuddy-orca-slicer ​

Alias of {option}services.podman.containers.bambuddy-orca-slicer.

Type
plaintext
submodule
Declaration
<nps/modules/bambuddy>