feat(glyph): add agentsview service with PostgreSQL backend

- Add agentsview database and user to PostgreSQL
- Add systemd service for agentsview pg serve (team dashboard on :8095)
- Add systemd timer to push local glyph sessions every 10 minutes
- Tailscale subnet trusted for passwordless PG access

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: stackptr

hosts/glyph/services/agentsview.nix

@@ -0,0 +1,56 @@
+{
+  config,
+  pkgs,
+  ...
+}: let
+  port = 8095;
+  configFile = pkgs.writeText "agentsview-config.toml" ''
+    [pg]
+    url = "postgres://agentsview@localhost:5432/agentsview?sslmode=disable"
+    machine_name = "glyph"
+  '';
+in {
+  # Serve the aggregated team dashboard from PostgreSQL
+  systemd.services.agentsview = {
+    description = "Agentsview team dashboard";
+    after = ["postgresql.service"];
+    requires = ["postgresql.service"];
+    wantedBy = ["multi-user.target"];
+    serviceConfig = {
+      ExecStart = "${pkgs.agentsview}/bin/agentsview pg serve -host 127.0.0.1 -port ${toString port}";
+      DynamicUser = true;
+      User = "agentsview";
+      Group = "agentsview";
+      StateDirectory = "agentsview";
+      RuntimeDirectory = "agentsview";
+      Environment = "HOME=/var/lib/agentsview";
+      ExecStartPre = "+${pkgs.coreutils}/bin/install -Dm640 -o agentsview -g agentsview ${configFile} /var/lib/agentsview/.agentsview/config.toml";
+      Restart = "on-failure";
+      RestartSec = 5;
+    };
+  };
+
+  # Push local glyph sessions to PostgreSQL every 10 minutes
+  systemd.timers.agentsview-pg-push = {
+    description = "Push agentsview sessions to PostgreSQL";
+    wantedBy = ["timers.target"];
+    timerConfig = {
+      OnBootSec = "2min";
+      OnUnitActiveSec = "10min";
+      Persistent = true;
+    };
+  };
+
+  systemd.services.agentsview-pg-push = {
+    description = "Push agentsview sessions to PostgreSQL";
+    after = ["postgresql.service"];
+    requires = ["postgresql.service"];
+    serviceConfig = {
+      Type = "oneshot";
+      ExecStart = "${pkgs.agentsview}/bin/agentsview pg push";
+      User = "mu";
+      Group = "users";
+      Environment = "HOME=/home/mu";
+    };
+  };
+}

hosts/glyph/services/db.nix

@@ -12,12 +12,16 @@
       port = 5432;
       max_connections = 150;
     };
-    ensureDatabases = ["atticd" "grafana" "open-webui" "pocketid"];
+    ensureDatabases = ["agentsview" "atticd" "grafana" "open-webui" "pocketid"];
     ensureUsers = [
       {
         name = "mu";
         ensureClauses.superuser = true;
       }
+      {
+        name = "agentsview";
+        ensureDBOwnership = true;
+      }
       {
         name = "atticd";
         ensureDBOwnership = true;
@@ -39,6 +43,6 @@
 
   services.postgresqlBackup = {
     enable = true;
-    databases = ["atticd" "grafana" "open-webui" "pocketid"];
+    databases = ["agentsview" "atticd" "grafana" "open-webui" "pocketid"];
   };
 }

hosts/glyph/services/default.nix

@@ -4,6 +4,7 @@
   ...
 }: {
   imports = [
+    ./agentsview.nix
     ./attic.nix
     ./db.nix
     ./avahi.nix