From 352b589ad1ed90125ec6c39f7929795d96e31c1f Mon Sep 17 00:00:00 2001
From: ahuston-0 <aliceghuston@gmail.com>
Date: Mon, 13 Apr 2026 22:49:18 -0400
Subject: [PATCH 1/3] add Mattermost service configuration and related
 variables

---
 .vscode/mcp.json                        | 10 ++++++++++
 systems/palatine-hill/configuration.nix |  1 +
 systems/palatine-hill/mattermost.nix    | 19 +++++++++++++++++++
 systems/palatine-hill/postgresql.nix    |  2 ++
 systems/palatine-hill/vars.nix          |  1 +
 5 files changed, 33 insertions(+)
 create mode 100644 .vscode/mcp.json
 create mode 100644 systems/palatine-hill/mattermost.nix

diff --git a/.vscode/mcp.json b/.vscode/mcp.json
new file mode 100644
index 0000000..b603b1c
--- /dev/null
+++ b/.vscode/mcp.json
@@ -0,0 +1,10 @@
+{
+    "servers": {
+        "nixos": {
+            "command": "uvx",
+            "args": [
+                "mcp-nixos"
+            ]
+        }
+    }
+}
\ No newline at end of file
diff --git a/systems/palatine-hill/configuration.nix b/systems/palatine-hill/configuration.nix
index c41c3e8..f3d3eb4 100644
--- a/systems/palatine-hill/configuration.nix
+++ b/systems/palatine-hill/configuration.nix
@@ -14,6 +14,7 @@
     ./haproxy
     ./hardware-changes.nix
     ./hydra.nix
+    ./mattermost.nix
     ./minio.nix
     ./networking.nix
     ./nextcloud.nix
diff --git a/systems/palatine-hill/mattermost.nix b/systems/palatine-hill/mattermost.nix
new file mode 100644
index 0000000..f4c8021
--- /dev/null
+++ b/systems/palatine-hill/mattermost.nix
@@ -0,0 +1,19 @@
+{
+  config,
+}:
+let
+  vars = import ./vars.nix;
+in
+
+{
+  services.mattermost = {
+    enable = true;
+    siteUrl = "https://mattermost.nayeonie.com"; # Set this to the URL you will be hosting the site on.
+    database = {
+      peerAuth = true; # This allows Mattermost to connect to the database without a password, which is more secure when both are on the same machine.
+      create = true;
+      driver = "postgres";
+    };
+    dataDir = "${vars.primary_mattermost}/mattermost";
+  };
+}
diff --git a/systems/palatine-hill/postgresql.nix b/systems/palatine-hill/postgresql.nix
index 0e5dc45..95ea9b7 100644
--- a/systems/palatine-hill/postgresql.nix
+++ b/systems/palatine-hill/postgresql.nix
@@ -40,6 +40,7 @@ in
       ensureDatabases = [
         "atticd"
         "alice"
+        "mattermost"
       ];
       ensureUsers = [
         {
@@ -171,6 +172,7 @@ in
           "hydra-server"
           "atticd"
           "gitea"
+          "mattermost"
         ];
       };
     };
diff --git a/systems/palatine-hill/vars.nix b/systems/palatine-hill/vars.nix
index 821c461..62a29ab 100644
--- a/systems/palatine-hill/vars.nix
+++ b/systems/palatine-hill/vars.nix
@@ -20,4 +20,5 @@ rec {
   primary_plex = "${zfs_primary}/plex";
   primary_plex_storage = "${zfs_primary}/plex_storage";
   primary_ollama = "${zfs_primary}/ollama";
+  primary_mattermost = "${zfs_primary}/mattermost";
 }

From 6ee3eaf9d393f832f27aba8dca30e54729f2abff Mon Sep 17 00:00:00 2001
From: ahuston-0 <aliceghuston@gmail.com>
Date: Mon, 13 Apr 2026 22:51:51 -0400
Subject: [PATCH 2/3] add Mattermost service configuration and related
 variables

---
 systems/palatine-hill/firewall.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/systems/palatine-hill/firewall.nix b/systems/palatine-hill/firewall.nix
index 8feeb16..047bcde 100644
--- a/systems/palatine-hill/firewall.nix
+++ b/systems/palatine-hill/firewall.nix
@@ -48,6 +48,9 @@
 
       # torr
       29432
+
+      # mattermost
+      8065
     ];
 
     allowedUDPPorts = [

From 732d29eea37adad30e21684d5ed1d4514a429d8f Mon Sep 17 00:00:00 2001
From: ahuston-0 <aliceghuston@gmail.com>
Date: Mon, 13 Apr 2026 22:59:00 -0400
Subject: [PATCH 3/3] add Mattermost service configuration and related
 variables

---
 systems/palatine-hill/mattermost.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/systems/palatine-hill/mattermost.nix b/systems/palatine-hill/mattermost.nix
index f4c8021..efe8fff 100644
--- a/systems/palatine-hill/mattermost.nix
+++ b/systems/palatine-hill/mattermost.nix
@@ -1,10 +1,10 @@
 {
   config,
+  ...
 }:
 let
   vars = import ./vars.nix;
 in
-
 {
   services.mattermost = {
     enable = true;