refactor(ports): add netbird port definitions

hosts/m3-kratos/services/default.nix

@@ -1,22 +1,24 @@
-{
+{pkgs, ...}: {
   imports = [
     ./containers
     ./mem0.nix
     ./n8n.nix
     ./postgres.nix
     ./sound.nix
-    ./tailscale.nix
     ./udev.nix
     ./wireguard.nix
   ];
   services = {
     hypridle.enable = true;
+    espanso = {
+      enable = true;
+      package = pkgs.espanso-wayland;
+    };
     printing.enable = true;
     gvfs.enable = true;
     trezord.enable = true;
     gnome.gnome-keyring.enable = true;
     qdrant.enable = true;
-    stirling-pdf.enable = true;
     avahi = {
       enable = true;
       nssmdns4 = true;

hosts/m3-kratos/services/n8n.nix

@@ -1,12 +1,13 @@
-{
+{lib, ...}: {
   services.n8n = {
     enable = true;
     openFirewall = true;
-  };
-  systemd.services.n8n = {
     environment = {
       N8N_SECURE_COOKIE = "false";
       N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS = "false";
     };
   };
+  # Temporary fix for upstream module
+  systemd.services.n8n.serviceConfig.LoadCredential = lib.mkForce [];
+  systemd.services.n8n.environment.N8N_RUNNERS_AUTH_TOKEN_FILE = lib.mkForce null;
 }

hosts/m3-kratos/services/tailscale.nix

@@ -1,13 +0,0 @@
-{config, ...}: {
-  services.tailscale = {
-    enable = true;
-    authKeyFile = config.age.secrets.tailscale-key.path;
-    useRoutingFeatures = "both";
-    extraUpFlags = [
-      "--login-server=https://va.m3tam3re.com"
-      "--accept-routes"
-      "--ssh"
-      "--reset"
-    ];
-  };
-}