Add new server modules and configurations for various services

- Introduced `default-creds` module for managing default credentials with Umami integration.
- Added `fail2ban` module for brute-force attack protection with configurable ban times.
- Created `firewall` module to enable and configure basic firewall settings.
- Implemented `gitea` module for self-hosted Git service with PostgreSQL backend.
- Developed `glance` module for a customizable dashboard with various widgets and themes.
- Added `iknowyou` module for a self-hosted password manager with production and demo environments.
- Introduced `kernel-hardening` module for enhancing kernel security settings.
- Created `mazanoke` module for a simple web application with Nginx integration.
- Added `mealie` module for a self-hosted meal planning application.
- Implemented `stirling-pdf` module for PDF generation service.
- Developed `umami` module for self-hosted analytics with secret management.
- Added `ssh` module for secure SSH configuration with user restrictions.
- Introduced `nixy` theme for a customized aesthetic experience across services.

home/programs/helium/system.nix

@@ -0,0 +1,70 @@
+{...}: let
+  bookmarkList =
+    (import ./bookmarks/general.nix)
+    ++ (import ./bookmarks/tools.nix)
+    ++ (import ./bookmarks/entertainment.nix)
+    ++ (import ./bookmarks/infosec.nix)
+    ++ (import ./bookmarks/other.nix)
+    ++ (import ./bookmarks/jack.nix);
+
+  toChromium = items:
+    map (item:
+      if item ? url
+      then {inherit (item) name url;}
+      else {
+        name = item.name;
+        children = toChromium item.bookmarks;
+      })
+    items;
+in {
+  stylix.targets.chromium.enable = false;
+
+  programs.helium = {
+    enable = true;
+
+    policies = {
+      BrowserSignin = 0;
+      SyncDisabled = true;
+      SigninAllowed = false;
+
+      PasswordManagerEnabled = false;
+      AutofillAddressEnabled = false;
+      AutofillCreditCardEnabled = false;
+      SafeBrowsingEnabled = false;
+      MetricsReportingEnabled = false;
+      SpellCheckServiceEnabled = false;
+      DefaultCookiesSetting = 1;
+      DefaultGeolocationSetting = 2;
+      DefaultNotificationsSetting = 2;
+      DefaultPopupsSetting = 2;
+
+      DefaultBrowserSettingEnabled = false;
+      DeveloperToolsAvailability = 1;
+
+      DnsOverHttpsMode = "secure";
+      DnsOverHttpsTemplates = "https://dns.quad9.net/dns-query";
+
+      DefaultSearchProviderEnabled = true;
+      DefaultSearchProviderName = "Startpage";
+      DefaultSearchProviderSearchURL = "https://www.startpage.com/do/search?q={searchTerms}";
+      DefaultSearchProviderSuggestURL = "https://www.startpage.com/do/suggest?q={searchTerms}";
+
+      NewTabPageLocation = "http://127.0.0.1:8888";
+      HomepageIsNewTabPage = false;
+      HomepageLocation = "http://127.0.0.1:8888";
+      ShowHomeButton = false;
+      RestoreOnStartup = 4;
+
+      BookmarkBarEnabled = false;
+      ManagedBookmarks = toChromium bookmarkList;
+
+      ExtensionInstallForcelist = [
+        "dbepggeogbaibhgnhhndojpepiihcmeb" # Vimiu
+        "gcknhkkoolaabfmlnjonogaaifnjlfnp" # FoxyProxy
+        "ghmbeldphafepmbegfdlkpapadhbakde" # Proton Pass
+        "mdjildafknihdffpkfmmpnpoiajfjnjd" # Consent-O-Matic
+        "pkehgijcmpdhfbdbbnkijodmdjhbjlgp" # Privacy Badger
+      ];
+    };
+  };
+}