try

system/services/containers/ollama/default.nix

@@ -8,6 +8,10 @@
     };
 
     config = lib.mkIf config.sysconfig.virtualization.ollama.enable {
+
+        networking = {
+            nat.internalInterfaces = [ "ve-ollama" ];
+        };
         
         containers.ollama = {
 
@@ -37,6 +41,11 @@
                     hostPath = "/dev/nvidia-uvm-tools";
                     isReadOnly = false;
                 };
+
+                "/dev/dri/renderD128" = {
+                    hostPath = "/dev/dri/renderD128";
+                    isReadOnly = false;
+                };
             };
 
             allowedDevices = [
@@ -60,6 +69,11 @@
                     node = "/dev/nvidia-uvm-tools";
                     modifier = "rw";
                 }
+
+                {
+                    node = "/dev/dri/renderD128";
+                    modifier = "rw";
+                }
             ];
 
             config = {

system/services/containers/traefik/default.nix

@@ -8,8 +8,16 @@
     config = lib.mkIf config.sysconfig.virtualization.traefik.enable {
             
         networking = {
-            hosts."192.168.100.11" = [ "esotericbytes.com" "*.esotericbytes.com" "traefik.local" ];
+            hosts."192.168.100.11" = [
-            firewall.allowedTCPPorts = [ 22 80 443];
+
+                "esotericbytes.com"
+                "*.esotericbytes.com"
+                
+                "esotericbytes.local"
+                "*.esotericbytes.local"
+            ];
+
+            firewall.allowedTCPPorts = [ 22 80 443 ];
 
             nat.internalInterfaces = [ "ve-traefik" ];
         };
@@ -156,13 +164,13 @@
                                         "nextcloud_redirectregex"
                                     ];
                                 };
-                                /*traefik = {
+                                traefik = {
                                     entryPoints = [ "websecure" ];
-                                    rule = "Host(`192.168.100.11`) || Host(`homebox.vpn`)";
+                                    rule = "Host(`traefik.esotericbytes.local`)";
                                     service = "api@internal";
                                     tls.certResolver = "cloudflare";
                                     #middlewares = [ "authentik" ];
-                                };*/
+                                };
                                 /*ntfy = {
                                     entryPoints = [ "websecure" ];
                                     rule = "Host(`ntfy.esotericbytes.com`)";

system/services/wireguard/default.nix

@@ -1,17 +0,0 @@
-{ config, lib, ... }: {
-
-    options = {
-        sysconfig.wireguard.enable = lib.options.mkOption {
-            type = lib.types.bool;
-            default = false;
-        };
-    };
-
-    config = lib.mkIf config.sysconfig.wireguard.enable {
-        networking.wireguard = {
-            enable = true;
-            interfaces.wg0 = {
-            };
-        };
-    };
-}

system/users/nathan/home-manager/dotfiles/hypr/main.conf

@@ -130,7 +130,7 @@ bind = $mainMod, V, togglefloating,
 
 bind = $mainMod SHIFT, V, exec, hyprrun vlc
 
-bind = , Menu, exec, hyprrun rofi -show drun -show-icons -run-command 'hyprrun {cmd}'
+bind = , Menu, exec, rofi -show drun -show-icons -run-command 'hyprrun {cmd}'
 
 bind = $mainMod, Menu, exec, hyprrun hyprpanel -q; hyprrun hyprpanel