From a77c0f533740b99962f67292a926c2d4c6c9f2f0 Mon Sep 17 00:00:00 2001
From: pazpi <davide@pasetto.me>
Date: Tue, 14 Apr 2026 15:10:26 +0200
Subject: [PATCH] Update AI models

---
 hosts/karakeep/default.nix    |  12 ++++--------
 modules/services/karakeep.nix |   3 +++
 secrets/karakeep-env.age      | Bin 679 -> 770 bytes
 3 files changed, 7 insertions(+), 8 deletions(-)

diff --git a/hosts/karakeep/default.nix b/hosts/karakeep/default.nix
index 9f33dd9..b6b50e1 100644
--- a/hosts/karakeep/default.nix
+++ b/hosts/karakeep/default.nix
@@ -28,10 +28,10 @@ in
       extraEnvironment = {
         NEXTAUTH_URL = "https://keep.${p.domains.public}";
         CRAWLER_FULL_PAGE_SCREENSHOT = "true";
-        OPENAI_BASE_URL = "https://litellm.ts.${p.domains.public}";
-        INFERENCE_IMAGE_MODEL = "GPT-4o Mini";
-        INFERENCE_TEXT_MODEL = "GPT-4.1 Mini";
-        EMBEDDING_TEXT_MODEL = "text-embedding-3-small";
+        OPENAI_BASE_URL = "https://openrouter.ai/api/v1";
+        INFERENCE_IMAGE_MODEL = "openai/gpt-4o-mini";
+        INFERENCE_TEXT_MODEL = "openai/gpt-4.1-mini";
+        EMBEDDING_TEXT_MODEL = "openai/text-embedding-3-small";
         DISABLE_PASSWORD_AUTH = "true";
         OAUTH_PROVIDER_NAME = "Authentik";
         OAUTH_WELLKNOWN_URL = "https://auth.${p.domains.public}/application/o/karakeep/.well-known/openid-configuration";
@@ -41,9 +41,5 @@ in
     virtualisation.proxmox.enable = true;
   };
 
-  networking.firewall.allowedTCPPorts = [ 3000 ];
-
-  environment.systemPackages = with pkgs; [ ];
-
   system.stateVersion = "25.11";
 }
diff --git a/modules/services/karakeep.nix b/modules/services/karakeep.nix
index fc6ec19..859a3b5 100644
--- a/modules/services/karakeep.nix
+++ b/modules/services/karakeep.nix
@@ -80,6 +80,9 @@ in
         }
         // cfg.extraEnvironment;
       };
+
+      networking.firewall.allowedTCPPorts = [ cfg.port ];
+
     })
 
     (lib.mkIf cfg.proxy.enable {
diff --git a/secrets/karakeep-env.age b/secrets/karakeep-env.age
index 77a3695606fc881e103ccfa57be57bdc30bcdb20..771e4df351d285b9cc2088bb924a19e7024b3ff3 100644
GIT binary patch
delta 717
zcmZ3^+Qc?Nr{3Gq*|j3Yxu{6H%Fw5*BA`6o(J(hKInO)AC(Ot&IKQgQG2AsWEzQU=
zkSk3)!>rIaD=#p@H6lMZE!Qa7r6{r7DJd$zv>?mCJHk0BBO}Vd)gnAMpG((Hp}06h
zH#Nn`)YQ;Yp|mjFD63o{D<wZY#5BmFq_{9GqBNw$-L)*;Gb`QC)xFTrJ<Ki8B_P1S
zvZ5fTA|>6E%hxp{%RL~aI43eV%)2nRD9ED7z}4L%r64Qc(8shSpfEGT*rM3qDKT>5
z2Z?%P$3lH`-%5kv3}d70DtB}LY>OOIPoo@PSHqwJU!RbI@)Cngw@lZ<z+$cdHv{L&
z5T}YDi!9fm!m891<KT+WLenVI@br|ZydYN(iy*g@d{;xu{A4a&U0nrVQ*YP8vaE79
zF9XYp)QXCb6rT`FA2&-M|C~S<M|ab_l8|~cedCI#g0fI9CX02PpZ3q)&|ZJp_VoOd
zf!8j$G;5#VJy9f2uWp8nqNDzfHNEy#izeTS%5_t!>}J`u<l*Zi*;IpwA3kd4dCA_!
z@9re{&onI&St6)mQ@#1v|N4t}?;biMEbXC@a=p;=fbT6{t7{t<<ZqLR3fr9%^!RR)
z$e~qR>TmFFl3IS)<>VLB8C!n&ZBU&YzvyJ!ssC5L$rbfhO*_Xt^}W`gynB!C{kqO#
zz3gZXXQ9HhM}b{s4(}8;s+^0GU$VUNsoUuzhHuYRTTDoC->v%p;UU!}EDN?xO;x;O
zl==SUM%I+`p|``B?OrZtmhN316IK6X@&mi2UTLorzX?nE)rKvu{X0)3Ctff?vgq84
zd6g47y{mezP8I%iVCS@N6K1V#^ssEUYSnzU$goQ<qOW%EjJS6Pe{)XtXL!w_Bocdi
z_q&>D4cg0(TTd#pP<=5WFXo+7(bXHAk+1hMXlb}lz0jUL^=I+VOmDg3wW-DrLndsq
R_>$gnz0HZUg(12u7yxd1EfN3#

delta 626
zcmZo-Th2N`r#{)+$SFI`%{L+_u*feo$=l4RJTodK%F-kypdi~a$vDfzB-OvnHMcmT
zm@CY~G%GVW!zsV0z%Rty!q2ZH-_ayEr&QlKEy6U)ETb~TyTHgYD>$kwl1tZ4p}06h
zH#Nn`)YQ;Yp|mjFD63qdLf^E|BeOEh+blIBA~naf&^5;~%pgSHEW4_>%Ec@*BFe=;
zKRv0~v%(;dD=^$8EvryJG)O<nJ;)=>EHfk9BQP+uydcZmEF{+}zr-oYsn|8JEHq={
z2Z?&a2!nKYFVmv(4722LAHO1Jf3wPBx1!A82ve7oti*zH?|c`-9B;<}S6{BMkbr<7
z?J(1fFt21!lZ>joP<?;r+%mV+fbyKIWaFs3h_Yf=-{fFZuW~M3U0sEWDzC&mCl5cj
zfGS`2G!Op>R}UwbEVH}}ebfBxeB%hu@REAZQiIGOgS29<V1~RvdG<vU?}Vi=OtU?E
zVeM<-RXYV2zkZ{r^m6@iha=P6qgOIB=B4^Jd#rL*pZKA-xQ=a^jejS@ulI9rJ=5Qk
zcxO^%&*ja&cLGxbWRFSO#u@2f48MM7jqsLi`?lBe>vu1_@I>mQon?(;q9D8e=>?}Y
zaxsSdsV{#~JiU6u3-_e2Ia><F)Srbsy8Ezuvg53SVN*m`9W{C}UHFRA<oauq_dokq
zxGQUsXluKl35%*@=BvzCNB>+_`Ef08$)W2)KN&Xce&KlZ(f_#&OP|e@iExoVb)#t3
zxv-7DvVLo&KMFo{{vkhqVxstJ`)IibT~(8n?>)-0@bRpvQCgtpqRjT~)Z6-iC;Kzh
Z(ie4FJG}k#&n$*<pXkgj^2~u}ECDaI{>K0S