🏗️ Debian Trixie Architect

cp /etc/apt/sources.list /etc/apt/sources.list.bak_$(date +%s)

cat <<EOF > /etc/apt/sources.list
deb http://deb.debian.org/debian trixie main contrib non-free non-free-firmware
deb-src http://deb.debian.org/debian trixie main contrib non-free non-free-firmware
deb http://deb.debian.org/debian-security trixie-security main contrib non-free non-free-firmware
deb http://deb.debian.org/debian trixie-updates main contrib non-free non-free-firmware
deb http://deb.debian.org/debian trixie-backports main contrib non-free non-free-firmware
EOF

apt-get update && apt-get install -y curl wget apt-transport-https software-properties-common build-essential git

apt install -y extrepo linux-headers-$(uname -r)
extrepo enable nvidia-cuda
apt update
apt install -y nvidia-driver firmware-misc-nonfree

dpkg --add-architecture i386
apt update
apt install -y firmware-amd-graphics libgl1-mesa-dri:i386 libglx-mesa0:i386 mesa-vulkan-drivers:i386 libgbm1:i386

apt install -y libgl1-mesa-dri libglx-mesa0 mesa-vulkan-drivers intel-media-va-driver-non-free

apt install -y intel-microcode tlp tlp-rdw thermald
systemctl enable --now tlp
systemctl enable --now thermald

# Architecture 32-bit pour Steam
dpkg --add-architecture i386
apt update
apt install -y steam-installer

# Flatpak + Flathub
apt install -y flatpak plasma-discover-backend-flatpak gnome-software-plugin-flatpak
flatpak remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo

# ProtonPlus (gestionnaire Proton)
flatpak install -y flathub com.vysp3r.ProtonPlus

wget -O /tmp/chrome.deb https://dl.google.com/linux/direct/google-chrome-stable_current_amd64.deb
apt install -y /tmp/chrome.deb
rm /tmp/chrome.deb

cd ~
wget -O /tmp/zen.tar.xz 'https://github.com/zen-browser/desktop/releases/latest/download/zen.linux-x86_64.tar.xz'
tar -xJf /tmp/zen.tar.xz -C ~
mv ~/zen ~/zen-browser

cat > ~/.local/share/applications/zen-browser.desktop <<EOL
[Desktop Entry]
Version=1.0
Name=Zen Browser
Exec=$HOME/zen-browser/zen %u
Icon=$HOME/zen-browser/browser/chrome/icons/default/default128.png
Type=Application
Categories=Network;WebBrowser;
Terminal=false
EOL
chmod +x ~/.local/share/applications/zen-browser.desktop

apt install -y torbrowser-launcher

cd ~
wget -O /tmp/discord.tar.gz 'https://discord.com/api/download?platform=linux&format=tar.gz'
tar -xzvf /tmp/discord.tar.gz -C ~

cat > ~/.local/share/applications/discord.desktop <<EOL
[Desktop Entry]
Name=Discord
Exec=$HOME/Discord/Discord
Icon=$HOME/Discord/discord.png
Type=Application
Categories=Network;InstantMessaging;
EOL

cd ~
wget -O /tmp/telegram.tar.xz 'https://telegram.org/dl/desktop/linux'
tar -xJvf /tmp/telegram.tar.xz -C ~

cat > ~/.local/share/applications/telegram.desktop <<EOL
[Desktop Entry]
Name=Telegram
Exec=$HOME/Telegram/Telegram
Icon=$HOME/Telegram/Telegram.png
Type=Application
Categories=Network;InstantMessaging;
EOL

# VLC, GIMP, qBittorrent, Fastfetch
apt install -y vlc gimp qbittorrent fastfetch

# Visual Studio Code
wget -O /tmp/vscode.deb 'https://code.visualstudio.com/sha/download?build=stable&os=linux-deb-x64'
apt install -y /tmp/vscode.deb

# OBS Studio (Flatpak)
flatpak install -y flathub com.obsproject.Studio

apt-get update && apt-get install -y ca-certificates curl gnupg
install -m 0755 -d /etc/apt/keyrings
curl -fsSL https://download.docker.com/linux/debian/gpg | gpg --dearmor -o /etc/apt/keyrings/docker.gpg
chmod a+r /etc/apt/keyrings/docker.gpg
echo "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/debian $(lsb_release -cs) stable" | tee /etc/apt/sources.list.d/docker.list > /dev/null
apt-get update && apt-get install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
usermod -aG docker $USER

curl -fsSL https://nvidia.github.io/libnvidia-container/gpgkey | gpg --dearmor -o /usr/share/keyrings/nvidia-container-toolkit-keyring.gpg
curl -s -L https://nvidia.github.io/libnvidia-container/stable/deb/nvidia-container-toolkit.list | sed "s#deb https://#deb [signed-by=/usr/share/keyrings/nvidia-container-toolkit-keyring.gpg] https://#g" | tee /etc/apt/sources.list.d/nvidia-container-toolkit.list
apt-get update && apt-get install -y nvidia-container-toolkit
nvidia-ctk runtime configure --runtime=docker
systemctl restart docker

mkdir -p /opt/ai-stack/{searxng,ollama,open-webui}
cd /opt/ai-stack

cat > docker-compose.yml <<EOF
services:
  ollama:
    image: ollama/ollama:latest
    restart: always
    ports: ["11434:11434"]
    volumes: [ollama:/root/.ollama]
    deploy:
      resources:
        reservations:
          devices: [{driver: nvidia, count: 1, capabilities: [gpu]}]
  open-webui:
    image: ghcr.io/open-webui/open-webui:main
    restart: always
    ports: ["3000:8080"]
    environment:
      - OLLAMA_BASE_URL=http://ollama:11434
      - SEARXNG_QUERY_URL=http://searxng:8080/search?q=
    volumes: [open-webui:/app/backend/data]
    depends_on: [ollama, searxng]
  searxng:
    image: searxng/searxng:latest
    restart: always
    ports: ["8080:8080"]
    volumes: [./searxng:/etc/searxng]
    environment:
      - BASE_URL=http://localhost:8080/
volumes: {ollama: {}, open-webui: {}}
EOF

docker compose up -d

docker run -d \
  --name perplexica \
  --restart always \
  -p 7000:3000 \
  --add-host=host.docker.internal:host-gateway \
  -e SEARXNG_API_URL=http://host.docker.internal:8080 \
  -e OLLAMA_API_URL=http://host.docker.internal:11434 \
  -v perplexica-data:/home/perplexica/data \
  itzcrazykns1337/perplexica:slim-latest

apt -t trixie-backports install -y linux-image-amd64 linux-headers-amd64