feat(nemesis): point rrvsh/nixpkgs as inout

systems/x86_64-linux/nemesis/default.nix

@@ -1,5 +1,13 @@
-{ lib, config, ... }:
 {
+  lib,
+  config,
+  inputs,
+  ...
+}:
+{
+  imports = [
+    "${inputs.rrvsh-nixpkgs}/nixos/modules/services/web-apps/librechat.nix"
+  ];
 
   system = {
     hostname = "nemesis";
@@ -52,5 +60,48 @@
     };
   };
 
+  services.librechat = {
+    enable = true;
+    openFirewall = true;
+    env = {
+      HOST = "0.0.0.0";
+      ALLOW_REGISTRATION = "true";
+      MONGO_URI = "mongodb://apollo:27017";
+    };
+    credentials = {
+      CREDS_KEY = config.sops.secrets."librechat/creds_key".path;
+      CREDS_IV = config.sops.secrets."librechat/creds_iv".path;
+      JWT_SECRET = config.sops.secrets."librechat/jwt_secret".path;
+      JWT_REFRESH_SECRET = config.sops.secrets."librechat/jwt_refresh_secret".path;
+    };
+    settings = {
+      version = "1.0.8";
+      cache = true;
+      interface = {
+        privacyPolicy = {
+          externalUrl = "https://librechat.ai/privacy-policy";
+          openNewTab = true;
+        };
+      };
+      endpoints = {
+        custom = [
+          {
+            name = "OpenRouter";
+            apiKey = "\${OPENROUTER_KEY}";
+            baseURL = "https://openrouter.ai/api/v1";
+            models = {
+              default = [ "meta-llama/llama-3-70b-instruct" ];
+              fetch = true;
+            };
+            titleConvo = true;
+            titleModule = "meta-llama/llama-3-70b-instruct";
+            dropParams = [ "stop" ];
+            modelDisplayLabel = "OpenRouter";
+          }
+        ];
+      };
+    };
+  };
+
   nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
 }