From 4c641910fdf994638184a178776dcf640dafe3cf Mon Sep 17 00:00:00 2001
From: Harald Hoyer <harald@subzero.xyz>
Date: Thu, 27 Nov 2025 15:04:53 +0100
Subject: [PATCH] chore(nix): add Wyoming service configuration

- Introduced a new `wyoming.nix` file with service definitions for `faster-whisper` and `piper`.
- Enabled TCP ports `10200` and `10300` in the firewall for service communication.
- Updated SGX configuration to include `wyoming.nix` in system imports.
---
 systems/x86_64-linux/sgx/default.nix |  1 +
 systems/x86_64-linux/sgx/wyoming.nix | 23 +++++++++++++++++++++++
 2 files changed, 24 insertions(+)
 create mode 100644 systems/x86_64-linux/sgx/wyoming.nix

diff --git a/systems/x86_64-linux/sgx/default.nix b/systems/x86_64-linux/sgx/default.nix
index 2bd404e..42ea1a1 100644
--- a/systems/x86_64-linux/sgx/default.nix
+++ b/systems/x86_64-linux/sgx/default.nix
@@ -9,6 +9,7 @@
     ./acme.nix
     ./nginx.nix
     ./mail.nix
+    ./wyoming.nix
   ];
 
   services.tailscale.enable = true;
diff --git a/systems/x86_64-linux/sgx/wyoming.nix b/systems/x86_64-linux/sgx/wyoming.nix
new file mode 100644
index 0000000..b6cfc54
--- /dev/null
+++ b/systems/x86_64-linux/sgx/wyoming.nix
@@ -0,0 +1,23 @@
+{ ... }:
+{
+  services.wyoming = {
+    faster-whisper.servers."main" = {
+      enable = true;
+      language = "de";
+      model = "base"; # or "small"/"medium" for better accuracy
+      uri = "tcp://0.0.0.0:10300";
+      device = "cpu";
+    };
+
+    piper.servers."main" = {
+      enable = true;
+      voice = "de_DE-thorsten-medium"; # popular German voice
+      uri = "tcp://0.0.0.0:10200";
+    };
+  };
+
+  networking.firewall.allowedTCPPorts = [
+    10200
+    10300
+  ];
+}