update postgresql to 18

flake.lock

@@ -2,19 +2,16 @@
   "nodes": {
     "agenix": {
       "inputs": {
-        "darwin": "darwin",
-        "home-manager": "home-manager",
         "nixpkgs": [
           "nixpkgs"
-        ],
-        "systems": "systems"
+        ]
       },
       "locked": {
-        "lastModified": 1770165109,
-        "narHash": "sha256-9VnK6Oqai65puVJ4WYtCTvlJeXxMzAp/69HhQuTdl/I=",
+        "lastModified": 1792507013,
+        "narHash": "sha256-8tKjSQajD3mUND1GaAuaWTcuyUpgcGsh5V+l4ibzC7U=",
         "owner": "ryantm",
         "repo": "agenix",
-        "rev": "b027ee29d959fda4b60b57566d64c98a202e0feb",
+        "rev": "5e5b88a0c8e56f291a108c2fe9934054d9745b2e",
         "type": "github"
       },
       "original": {
@@ -25,11 +22,11 @@
     },
     "crane": {
       "locked": {
-        "lastModified": 1789760033,
-        "narHash": "sha256-jtT4yxZpR8seYnlCMMWSSPlFN92zO6ICuZ8pJrmi86k=",
+        "lastModified": 1790899423,
+        "narHash": "sha256-THGtz65UGJU+sonZidRboyCMk+9DclpMF7pwL4uDV4M=",
         "owner": "ipetkov",
         "repo": "crane",
-        "rev": "73b980519cefc727a5f6cc8e5c0947a2f9be6edd",
+        "rev": "47b6b27ed9a3a9181415e4367d0c30ab2a0e0250",
         "type": "github"
       },
       "original": {
@@ -38,28 +35,6 @@
         "type": "github"
       }
     },
-    "darwin": {
-      "inputs": {
-        "nixpkgs": [
-          "agenix",
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1744478979,
-        "narHash": "sha256-dyN+teG9G82G+m+PX/aSAagkC+vUv0SgUw3XkPhQodQ=",
-        "owner": "lnl7",
-        "repo": "nix-darwin",
-        "rev": "43975d782b418ebf4969e9ccba82466728c2851b",
-        "type": "github"
-      },
-      "original": {
-        "owner": "lnl7",
-        "ref": "master",
-        "repo": "nix-darwin",
-        "type": "github"
-      }
-    },
     "flake-compat": {
       "flake": false,
       "locked": {
@@ -79,20 +54,20 @@
     "home-manager": {
       "inputs": {
         "nixpkgs": [
-          "agenix",
           "nixpkgs"
         ]
       },
       "locked": {
-        "lastModified": 1745494811,
-        "narHash": "sha256-YZCh2o9Ua1n9uCvrvi5pRxtuVNml8X2a03qIFfRKpFs=",
+        "lastModified": 1792438572,
+        "narHash": "sha256-5mQQOcggBRBXB7NlzUxO0dbvQN4euJOISjNybrtfxPk=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "abfad3d2958c9e6300a883bd443512c55dfeb1be",
+        "rev": "24f8f8e786f87d6a818e1746cb2389bf922afdab",
         "type": "github"
       },
       "original": {
         "owner": "nix-community",
+        "ref": "release-26.05",
         "repo": "home-manager",
         "type": "github"
       }
@@ -104,11 +79,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1790365885,
-        "narHash": "sha256-iQ0ebhiVo64NktTnwft9hNxlFu4j5cvljVxyJaEVIP4=",
+        "lastModified": 1792605213,
+        "narHash": "sha256-J73EBU30r2hXvHCcBtaigQDAIu/GGPYk1nc6P9THcmg=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "7b4c5ec4bedaf1e062bbc1bcaeddbc6bd242aa1b",
+        "rev": "ab97a5d09e0f2aa7339cfd35ec5824fd6653e27c",
         "type": "github"
       },
       "original": {
@@ -118,27 +93,6 @@
       }
     },
     "home-manager_2": {
-      "inputs": {
-        "nixpkgs": [
-          "nixpkgs"
-        ]
-      },
-      "locked": {
-        "lastModified": 1790215976,
-        "narHash": "sha256-VkR1rMGyjU9jtw8ISFx5uqR9e+LEaOlhHwrseFkiIVk=",
-        "owner": "nix-community",
-        "repo": "home-manager",
-        "rev": "a6631107a83ceab5872f298a2ea710859c80c4cb",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-community",
-        "ref": "release-26.05",
-        "repo": "home-manager",
-        "type": "github"
-      }
-    },
-    "home-manager_3": {
       "inputs": {
         "nixpkgs": [
           "impermanence",
@@ -161,15 +115,15 @@
     },
     "impermanence": {
       "inputs": {
-        "home-manager": "home-manager_3",
+        "home-manager": "home-manager_2",
         "nixpkgs": "nixpkgs"
       },
       "locked": {
-        "lastModified": 1769548169,
-        "narHash": "sha256-03+JxvzmfwRu+5JafM0DLbxgHttOQZkUtDWBmeUkN8Y=",
+        "lastModified": 1792503832,
+        "narHash": "sha256-WsqPR04nPS1bi5bYva04cJJcJyHw7x/rbaJmoXMzF04=",
         "owner": "nix-community",
         "repo": "impermanence",
-        "rev": "7b1d382faf603b6d264f58627330f9faa5cba149",
+        "rev": "936ced36ecd25fcbd9b4789184b88aa2e4c2a901",
         "type": "github"
       },
       "original": {
@@ -186,11 +140,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1790411649,
-        "narHash": "sha256-CGKljWiOsnYX8s7DimgMRsLVe+Ucf3CF/ij8OGu5PQk=",
+        "lastModified": 1792665883,
+        "narHash": "sha256-8mBJs1By8sIk8IqT494MEEUjAScRzJSujNm1RusXJ1k=",
         "owner": "Jovian-Experiments",
         "repo": "Jovian-NixOS",
-        "rev": "dde76577faacee7682192f26a9b4230526fbc3ed",
+        "rev": "9eabd87f2b6451a5d304fe69d638fabc5ff48cd1",
         "type": "github"
       },
       "original": {
@@ -209,11 +163,11 @@
         "rust-overlay": "rust-overlay"
       },
       "locked": {
-        "lastModified": 1790352947,
-        "narHash": "sha256-Ka3mEWzK+doNs3UHpCjMkGQm2EXYBHLcwxDbq8nzc/s=",
+        "lastModified": 1792270892,
+        "narHash": "sha256-aefPlhND0AelMxBw8g1R0JZKpm/Wkamhj49sbR60pHw=",
         "owner": "nix-community",
         "repo": "lanzaboote",
-        "rev": "92a2a41085c56ec894769afd7c3fc25fa8b2f651",
+        "rev": "4b98333073bdaf9b1b5dd7d87c2dab96883b234e",
         "type": "github"
       },
       "original": {
@@ -231,11 +185,11 @@
         "spectrum": "spectrum"
       },
       "locked": {
-        "lastModified": 1790337272,
-        "narHash": "sha256-Gj7g9GkMZNj0u0VKvyN4uf2XUxdHd4JwKOsaSicGtAo=",
+        "lastModified": 1791551030,
+        "narHash": "sha256-jTx3O3MKqPjv+cDfBFQ5zlKECBEwzF91scC+mSumZyE=",
         "owner": "microvm-nix",
         "repo": "microvm.nix",
-        "rev": "68f2670367e03da7d0cceef0594a7b2c173849de",
+        "rev": "f13928fe9900e91709d7ce581eefa47eaafa79e1",
         "type": "github"
       },
       "original": {
@@ -252,16 +206,15 @@
         ]
       },
       "locked": {
-        "lastModified": 1729697500,
-        "narHash": "sha256-VFTWrbzDlZyFHHb1AlKRiD/qqCJIripXKiCSFS8fAOY=",
-        "owner": "zhaofengli",
+        "lastModified": 1737420293,
+        "narHash": "sha256-F1G5ifvqTpJq7fdkT34e/Jy9VCyzd5XfJ9TO8fHhJWE=",
+        "owner": "nix-community",
         "repo": "nix-github-actions",
-        "rev": "e418aeb728b6aa5ca8c5c71974e7159c2df1d8cf",
+        "rev": "f4158fa080ef4503c8f4c820967d946c2af31ec9",
         "type": "github"
       },
       "original": {
-        "owner": "zhaofengli",
-        "ref": "matrix-name",
+        "owner": "nix-community",
         "repo": "nix-github-actions",
         "type": "github"
       }
@@ -271,11 +224,11 @@
         "nixpkgs": "nixpkgs_2"
       },
       "locked": {
-        "lastModified": 1790321948,
-        "narHash": "sha256-mZGHLGi217oLIwzDM4PNRZeCNa6g2WBXURyXbNMFs7Y=",
+        "lastModified": 1792491056,
+        "narHash": "sha256-6n1Dn+WYtD8lprnSi+0k4FjbKfIVNG8lblpJ5MiiqXs=",
         "owner": "NixOS",
         "repo": "nixos-hardware",
-        "rev": "30d48a0ec6035f8140d0125af274f0de95f1e9b5",
+        "rev": "efb6d0d5e2394c3c5416a18652808aba206c0988",
         "type": "github"
       },
       "original": {
@@ -303,11 +256,11 @@
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1790323409,
-        "narHash": "sha256-VVTPf+Hyd5ebpjBMHmrLMSBIeW6ls48Bqtosj7CNKLA=",
+        "lastModified": 1792502884,
+        "narHash": "sha256-IoNisKcGbUjdd45qCqywGMCYmZ5EnkxezvLII0FWwNA=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "e94cb152ed51bd6e24eb4a41f1460252beb52cd2",
+        "rev": "02c087f3fe673c9e317f206a627cb6b910336dbe",
         "type": "github"
       },
       "original": {
@@ -332,11 +285,11 @@
     },
     "nixpkgs_3": {
       "locked": {
-        "lastModified": 1790340521,
-        "narHash": "sha256-cRrWlIjVRJ6BHDr9caUdXsZ3owzWIKYHpNmGPHBInIU=",
+        "lastModified": 1792615934,
+        "narHash": "sha256-MlvRfa1O5Cqc2/a+gG+l9TSuowEoCKCmrJ1d9oAVm0I=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "f5c082a40f7571c266e74e80ae2e68aadd8a9fc7",
+        "rev": "da6dc0e7b26060f2f71ce3ef7088fb56ee44fa36",
         "type": "github"
       },
       "original": {
@@ -354,11 +307,11 @@
         "noctalia-qs": "noctalia-qs"
       },
       "locked": {
-        "lastModified": 1788016978,
-        "narHash": "sha256-kq3bbBPa5803bLv55bNFztx2YryJl5a/VfUWvvdaZjI=",
+        "lastModified": 1791909440,
+        "narHash": "sha256-9zJyNjsv2/BTTJd8ac8whFDpSQ7j3XLWNPGzQDbB5IY=",
         "owner": "noctalia-dev",
         "repo": "noctalia",
-        "rev": "a08ff3619ed4c1e1cd8b7691438cea34ccecd6c5",
+        "rev": "f6c7c01bb3023e290a91fed130810f623fcdcc06",
         "type": "github"
       },
       "original": {
@@ -374,7 +327,7 @@
           "noctalia",
           "nixpkgs"
         ],
-        "systems": "systems_2",
+        "systems": "systems",
         "treefmt-nix": "treefmt-nix"
       },
       "locked": {
@@ -400,11 +353,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1789514889,
-        "narHash": "sha256-PFD1nxptCXJyJoiYO1gf/5Vv43yqGpHtMC6LUhl9/pQ=",
+        "lastModified": 1790500375,
+        "narHash": "sha256-XN3sDtn8TU9hAc9xqZ+SqRB/HHm2wjxM6aSWYLJU+oo=",
         "owner": "cachix",
         "repo": "git-hooks.nix",
-        "rev": "59f4ca0d063a1a3ec722c88b51a33004862e5379",
+        "rev": "a0e4241b51206fbcbf52fd322eb5f0cd80f153c4",
         "type": "github"
       },
       "original": {
@@ -416,7 +369,7 @@
     "root": {
       "inputs": {
         "agenix": "agenix",
-        "home-manager": "home-manager_2",
+        "home-manager": "home-manager",
         "home-manager-unstable": "home-manager-unstable",
         "impermanence": "impermanence",
         "jovian-nixos": "jovian-nixos",
@@ -436,11 +389,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1789889921,
-        "narHash": "sha256-aL/ogiN7qZCGeNovS1f9hX73jwYIKb4Pcq6AZm57WtY=",
+        "lastModified": 1792087235,
+        "narHash": "sha256-vQHkG9lwSHJI3MVnyilP50hWW3TNnBWFTbLIurWgPhI=",
         "owner": "oxalica",
         "repo": "rust-overlay",
-        "rev": "1fb104a12a8667045559b2575d6d448ae2fbd99b",
+        "rev": "87ffb7f777aef2e2647fd8fd718a5b3cbc825588",
         "type": "github"
       },
       "original": {
@@ -466,21 +419,6 @@
       }
     },
     "systems": {
-      "locked": {
-        "lastModified": 1681028828,
-        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
-        "owner": "nix-systems",
-        "repo": "default",
-        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nix-systems",
-        "repo": "default",
-        "type": "github"
-      }
-    },
-    "systems_2": {
       "locked": {
         "lastModified": 1689347949,
         "narHash": "sha256-12tWmuL2zgBgZkdoB6qXZsgJEH9LR3oUgpaQq2RbI80=",

hosts/desktop/default.nix

@@ -32,7 +32,10 @@
 
   myDesktop.syncthing.enable = true;
   myDesktop.syncthing.devices = {
-    "kubesync.home.opel-online.de" = {id = "JETVCDA-WUSQEDI-VSNPMTK-L756GSS-XZ7ZJOX-Y2HWLTQ-TD6K7ZI-LSWE5AH";};
+    "kubesync.home.opel-online.de" = {
+      addresses = ["tcp://kubesync.home.opel-online.de"];
+      id = "JETVCDA-WUSQEDI-VSNPMTK-L756GSS-XZ7ZJOX-Y2HWLTQ-TD6K7ZI-LSWE5AH";
+    };
     "lifebook.home.opel-online.de" = {id = "RKPZG3H-BDUZID3-DV26MKR-UOARIQC-JBCAFXP-J5QFM4H-5EGBSM5-VEGXHQ4";};
   };
   myDesktop.syncthing.folders = {

hosts/desktop/home.nix

@@ -10,8 +10,6 @@
   home.packages = with pkgs; [
     chromium
     thunderbird
-    streamlink
-    streamlink-twitch-gui-bin
     pulsemixer
     nitrokey-app
     kicad

hosts/fuji/home.nix

@@ -23,8 +23,6 @@
       # Applications
       chromium
       thunderbird
-      streamlink
-      streamlink-twitch-gui-bin
       pulsemixer
     ];
   };

hosts/lifebook/default.nix

@@ -26,7 +26,10 @@
 
   myDesktop.syncthing.enable = true;
   myDesktop.syncthing.devices = {
-    "kubesync.home.opel-online.de" = {id = "JETVCDA-WUSQEDI-VSNPMTK-L756GSS-XZ7ZJOX-Y2HWLTQ-TD6K7ZI-LSWE5AH";};
+    "kubesync.home.opel-online.de" = {
+      addresses = ["tcp://kubesync.home.opel-online.de"];
+      id = "JETVCDA-WUSQEDI-VSNPMTK-L756GSS-XZ7ZJOX-Y2HWLTQ-TD6K7ZI-LSWE5AH";
+    };
     "hades.home.opel-online.de" = {id = "3VPCBVW-RH7XKFM-TWJGQHC-ZRAQ575-CQKGGKP-NAB4VXE-KCKJFUT-AMCUQQA";};
   };
   myDesktop.syncthing.folders = {

hosts/lifebook/home.nix

@@ -11,8 +11,6 @@
     libreoffice
     chromium
     thunderbird
-    streamlink
-    streamlink-twitch-gui-bin
     intel-gpu-tools
     pulsemixer
   ];

hosts/steamdeck/home.nix

@@ -17,8 +17,6 @@
       libreoffice
       chromium
       thunderbird
-      streamlink
-      streamlink-twitch-gui-bin
       pulsemixer
     ];
   };

modules/desktop/default.nix

@@ -512,6 +512,16 @@ in {
         OVMF-cloud-hypervisor
         gvfs
         cloud-hypervisor
+        ansible
+        ansible-lint
+        age
+        kubectl
+        talosctl
+        sops
+        openssl
+        opentofu
+        fluxcd
+        libargon2
       ];
     })
 

modules/services/server/gitea.nix

@@ -64,6 +64,7 @@
       service = {
         REGISTER_EMAIL_CONFIRM = true;
         DISABLE_REGISTRATION = true;
+        ENABLE_NOTIFY_MAIL = true;
       };
       actions = {
         ENABLED = true;
@@ -73,10 +74,10 @@
       };
       mailer = {
         ENABLED = true;
-        PROTOCOL = smtps;
+        PROTOCOL = "smtp+starttls";
         SMTP_ADDR = "in-v3.mailjet.com";
         SMTP_PORT = "587";
-        FROM = "Gitea Service <postmaster@kabtop.de>";
+        FROM = "postmaster@kabtop.de";
         USER = "a2b181fe40c48b9550183a1c5bc2d516";
       };
     };

modules/services/server/nextcloud.nix

@@ -7,7 +7,7 @@
     enable = true;
     hostName = "cloud.kabtop.de";
     https = true;
-    package = pkgs.nextcloud33;
+    package = pkgs.nextcloud35;
     database.createLocally = false;
     notify_push.enable = false;
     enableImagemagick = true;
@@ -46,6 +46,13 @@
                'OC\Preview\HEIC',
              )";
       "maintenance_window_start" = "1";
+      mail_from_address = "postmaster";
+      mail_domain = "kabtop.de";
+      mail_smtpauth = true;
+      mail_smtpmode = "smtp";
+      mail_smtphost = "in-v3.mailjet.com";
+      mail_smtpname = "a2b181fe40c48b9550183a1c5bc2d516";
+      mail_smtpport = 587;
     };
     config = {
       dbtype = "pgsql";
@@ -59,6 +66,7 @@
     phpOptions = {
       "opcache.interned_strings_buffer" = "16";
     };
+    secretFile = config.age.secrets."services/nextcloud/secretsFile".path;
   };
 
   services.redis = {
@@ -88,6 +96,10 @@
     file = ../../../secrets/services/nextcloud/adminpassFile.age;
     owner = "nextcloud";
   };
+  age.secrets."services/nextcloud/secretsFile" = {
+    file = ../../../secrets/services/nextcloud/secretsFile.age;
+    owner = "nextcloud";
+  };
 
   systemd.services."nextcloud-setup" = {
     requires = ["postgresql.service"];

modules/services/server/postgresql.nix

@@ -10,7 +10,7 @@
   #  imports = [ ./postgresql_upgrade.nix ];
   services.postgresql = {
     enable = true;
-    package = pkgs.postgresql_16;
+    package = pkgs.postgresql_18;
     settings = {
       max_connections = 200;
       listen_addresses = "localhost";

modules/services/server/postgresql_upgrade.nix

@@ -8,7 +8,7 @@
     (let
       # XXX specify the postgresql package you'd like to upgrade to.
       # Do not forget to list the extensions you need.
-      newPostgres = pkgs.postgresql_16.withPackages (pp: [
+      newPostgres = pkgs.postgresql_18.withPackages (pp: [
         # pp.plv8
       ]);
       cfg = config.services.postgresql;

modules/wm/steam/default.nix

@@ -41,8 +41,4 @@
     enable = true;
     enable32Bit = true;
   };
-
-  environment.systemPackages = with pkgs; [
-    steamdeck-firmware
-  ];
 }

secrets/secrets.nix

@@ -70,6 +70,7 @@ in {
   "services/matrix/mautrix-signal.age".publicKeys = servers ++ users;
   "services/nextcloud/adminpassFile.age".publicKeys = servers ++ users;
   "services/nextcloud/dbpassFile.age".publicKeys = servers ++ users;
+  "services/nextcloud/secretsFile.age".publicKeys = servers ++ users;
   "services/gitea/databasePassword.age".publicKeys = servers ++ users;
   "services/gitea/mailerPassword.age".publicKeys = servers ++ users;
   "services/mealie/credentialsFile.age".publicKeys = servers ++ users;

secrets/services/nextcloud/secretsFile.age

@@ -0,0 +1,22 @@
+age-encryption.org/v1
+-> ssh-ed25519 WiIaQQ 7J6p571QopEw5nt8e67FeKAGglZ2TIVNGH0LsU1DOn0
+LQ4RKgZgTZX1jvcTlm/M1iVGg9fe5Li9TtIwgH4J8zU
+-> ssh-rsa VtjGpQ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+-> piv-p256 grR75w ApdgEfWiWfmjRnbUBU/2qtECmlcvOXR4eDH7HMTaVvca
+rvFi/JpfgB4FTXD/XTSizqFipUhfaot94oormhdvmj4
+-> piv-p256 RQguQQ A1lkoXj5da2EEV+W4OoSyIGK88sCD0Ouph43vDy1RI6J
+jAI713RF3ks+3DcOIcWh/fg0QOzhu0RG4FFTHqpaj24
+--- F7jJX1Nkg6iLJ/7x5sfdDcEYeJWzNjIJHzk2VWJrHMM
+½ô‹QÑXáäâew!�”xj©xoÏi[¢¶ª³ksО�SG¯¢º>ô¹ÛÂÕ=
+̼‰×:á´Tvÿ`ÉVt“nÉÂ:<ÄsØœXúþy‚