feat: Add Immich to eastblue

+ small fix for minecraft server

Signed-off-by: SindreKjelsrud <sindre@kjelsrud.dev>

flake.lock

@@ -7,11 +7,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1751462021,
-        "narHash": "sha256-RUKSK5JFZ15hsQK8qgthbzP0iTuBlAYfnkH8tjz6SPU=",
+        "lastModified": 1754527677,
+        "narHash": "sha256-qAzCtmKkMz40xFgP9KN+TCKjVieK4u04EWwl2KvVk0E=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "6c53df3b9c809e3b4b30d515e18bfa4c6f079254",
+        "rev": "475d35797d9537354d825260cf583114537affc2",
         "type": "github"
       },
       "original": {
@@ -22,11 +22,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1751271578,
-        "narHash": "sha256-P/SQmKDu06x8yv7i0s8bvnnuJYkxVGBWLWHaU+tt4YY=",
+        "lastModified": 1754214453,
+        "narHash": "sha256-Q/I2xJn/j1wpkGhWkQnm20nShYnG7TI99foDBpXm1SY=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "3016b4b15d13f3089db8a41ef937b13a9e33a8df",
+        "rev": "5b09dc45f24cf32316283e62aec81ffee3c3e376",
         "type": "github"
       },
       "original": {

hosts/eastblue/configuration.nix

@@ -75,7 +75,20 @@
       enable = true;
       eula = true;
       openFirewall = true;
+      package = pkgs.minecraft-server;
     };
+    immich = {
+      enable = true;
+      host = "0.0.0.0";
+      port = 2283;
+      mediaLocation = "/mnt/media/immich-photos";
+    };
+  };
+
+  fileSystems."/mnt/media" = {
+    device = "/dev/disk/by-uuid/36bb5317-da75-48d2-848a-1ff249e62a6b";
+    fsType = "ext4";
+    options = [ "defaults" "nofail" ];
   };
 
   # Some programs need SUID wrappers, can be configured further or are
@@ -92,7 +105,7 @@
   services.openssh.enable = true;
 
   # Open ports in the firewall.
-  # networking.firewall.allowedTCPPorts = [ ... ];
+  networking.firewall.allowedTCPPorts = [ 2283 ];
   # networking.firewall.allowedUDPPorts = [ ... ];
   # Or disable the firewall altogether.
   # networking.firewall.enable = false;