Move frigate into the cluster and enable GPU detector

1-nixos-node/configuration.nix

@@ -49,6 +49,9 @@
           preferred_address_family = "ipv4";
 %{if cpu_total_compute != null ~}
           cpu_total_compute = ${cpu_total_compute};
+%{endif ~}
+%{if node_class != null ~}
+          node_class = "${node_class}";
 %{endif ~}
           host_volume = {
 %{ for volume in host_volumes ~}
@@ -116,6 +119,17 @@
   # Ensure Docker daemon is available (Nomad enableDocker only configures Nomad, does not guarantee docker service)
   virtualisation.docker.enable = true;
 
+%{if node_class == "latte-panda-n150" ~}
+  # Enable Intel iGPU (N150 UHD Graphics) for OpenVINO / VA-API workloads running in Docker
+  hardware.graphics = {
+    enable = true;
+    extraPackages = with pkgs; [
+      intel-media-driver   # VA-API (iHD)
+      intel-compute-runtime # OpenCL / oneAPI
+    ];
+  };
+
+%{endif ~}
   # Proper systemd service definition for macvlan network creation
   systemd.services.docker-macvlan-network = {
     description = "Ensure macvlan Docker network exists";

1-nixos-node/node.tf

@@ -21,6 +21,7 @@ variable "nodes" {
     bind_interface    = string
     bootstrap         = optional(bool, false)  # Optional field for bootstrap nodes
     cpu_total_compute = optional(number, null) # Optional field for CPU total compute
+    node_class        = optional(string, null) # Optional Nomad node_class for scheduling constraints
     host_volumes      = list(string)
   }))
 }
@@ -32,6 +33,7 @@ locals {
       bind_interface    = v.bind_interface
       bootstrap         = v.bootstrap
       cpu_total_compute = v.cpu_total_compute
+      node_class        = v.node_class
       host_volumes      = v.host_volumes
     })
   }