chore: udate m3-atlas

hosts/m3-atlas/secrets.nix

@@ -10,6 +10,8 @@
       kestra-env = {file = ../../secrets/kestra-env.age;};
       littlelink-m3tam3re = {file = ../../secrets/littlelink-m3tam3re.age;};
       minio-root-cred = {file = ../../secrets/minio-root-cred.age;};
+      rustfs-access-key = {file = ../../secrets/rustfs-access-key.age;};
+      rustfs-secret-key = {file = ../../secrets/rustfs-secret-key.age;};
       n8n-env = {file = ../../secrets/n8n-env.age;};
       netbird-auth-secret = {
         file = ../../secrets/netbird-auth-secret.age;

hosts/m3-atlas/services/default.nix

@@ -4,7 +4,7 @@
     ./containers
     ./gitea.nix
     ./gitea-actions-runner.nix
-    ./minio.nix
+    ./rustfs.nix
     ./mysql.nix
     ./netbird.nix
     ./n8n.nix

hosts/m3-atlas/services/rustfs.nix

@@ -1,14 +1,29 @@
-{config, ...}: {
-  services.minio = {
+{
+  config,
+  inputs,
+  pkgs,
+  ...
+}: {
+  services.rustfs = {
     enable = true;
-    region = "eu-central-1";
+    package = inputs.rustfs.packages.${pkgs.stdenv.hostPlatform.system}.default;
+
+    # Reuse existing MinIO data directory
+    volumes = "/var/storage/s3";
+
+    # Keep same ports as MinIO to avoid changing Traefik and client configs
+    address = ":3008";
+    consoleEnable = true;
     consoleAddress = ":3007";
-    listenAddress = ":3008";
-    browser = true;
-    rootCredentialsFile = config.age.secrets.minio-root-cred.path;
-    dataDir = ["/var/storage/s3"];
+
+    # Credentials via agenix
+    accessKeyFile = config.age.secrets.rustfs-access-key.path;
+    secretKeyFile = config.age.secrets.rustfs-secret-key.path;
+
+    logLevel = "info";
   };
-  # Traefik configuration specific to minio
+
+  # Traefik configuration — same routes as before
   services.traefik.dynamicConfigOptions.http = {
     services.minio-console.loadBalancer.servers = [
       {

hosts/m3-hermes/services/hermes-agent.nix

@@ -78,7 +78,7 @@ in {
     enable = true;
     addToSystemPackages = true;
 
-    extraPackages = with pkgs; [docker git tea];
+    extraPackages = with pkgs; [docker git tea nix];
 
     # Secrets via agenix
     environmentFiles = [