flake.lock: Update

Flake lock file updates: • Updated input 'agenix': 'github:ryantm/agenix/f6291c5935fdc4e0bef208cfc0dcab7e3f7a1c41' (2024-08-10) → 'github:ryantm/agenix/e600439ec4c273cf11e06fe4d9d906fb98fa097c' (2025-01-15) • Updated input 'catppuccin': 'github:catppuccin/nix/8eada392fd6571a747e1c5fc358dd61c14c8704e' (2025-01-05) → 'github:catppuccin/nix/1e3fe44bc13809f62c2ef0aa864a304a6c8ebea4' (2025-03-14) • Removed input 'catppuccin/catppuccin-v1_1' • Removed input 'catppuccin/catppuccin-v1_2' • Removed input 'catppuccin/home-manager' • Removed input 'catppuccin/home-manager/nixpkgs' • Removed input 'catppuccin/home-manager-stable' • Removed input 'catppuccin/home-manager-stable/nixpkgs' • Updated input 'catppuccin/nixpkgs': 'github:NixOS/nixpkgs/d3c42f187194c26d9f0309a8ecc469d6c878ce33' (2024-12-17) → 'github:NixOS/nixpkgs/10069ef4cf863633f57238f179a0297de84bd8d3' (2025-03-06) • Removed input 'catppuccin/nixpkgs-stable' • Removed input 'catppuccin/nuscht-search' • Removed input 'catppuccin/nuscht-search/flake-utils' • Removed input 'catppuccin/nuscht-search/flake-utils/systems' • Removed input 'catppuccin/nuscht-search/ixx' • Removed input 'catppuccin/nuscht-search/ixx/flake-utils' • Removed input 'catppuccin/nuscht-search/ixx/nixpkgs' • Removed input 'catppuccin/nuscht-search/nixpkgs' • Updated input 'disko': 'github:nix-community/disko/f720e64ec37fa16ebba6354eadf310f81555cc07' (2025-01-12) → 'github:nix-community/disko/0d8c6ad4a43906d14abd5c60e0ffe7b587b213de' (2025-03-12) • Updated input 'emacs-overlay': 'github:nix-community/emacs-overlay/244a2ab1459c72bac32a2db088549f8bc6d7a836' (2025-01-13) → 'github:nix-community/emacs-overlay/5d6c484290f0754ce745ea6f7e2b7d037bdc7b76' (2025-03-14) • Updated input 'emacs-overlay/nixpkgs': 'github:NixOS/nixpkgs/130595eba61081acde9001f43de3248d8888ac4a' (2025-01-10) → 'github:NixOS/nixpkgs/6607cf789e541e7873d40d3a8f7815ea92204f32' (2025-03-13) • Updated input 'emacs-overlay/nixpkgs-stable': 'github:NixOS/nixpkgs/1dab772dd4a68a7bba5d9460685547ff8e17d899' (2025-01-10) → 'github:NixOS/nixpkgs/cdd2ef009676ac92b715ff26630164bb88fec4e0' (2025-03-13) • Updated input 'flakeParts': 'github:hercules-ci/flake-parts/b905f6fc23a9051a6e1b741e1438dbfc0634c6de' (2025-01-06) → 'github:hercules-ci/flake-parts/f4330d22f1c5d2ba72d3d22df5597d123fdb60a9' (2025-03-07) • Updated input 'flakeParts/nixpkgs-lib': 'e9b5173191.tar.gz?narHash=sha256-CewEm1o2eVAnoqb6Ml%2BQi9Gg/EfNAxbRx1lANGVyoLI%3D' (2025-01-01) → 'github:nix-community/nixpkgs.lib/147dee35aab2193b174e4c0868bd80ead5ce755c' (2025-03-02) • Updated input 'git-hooks-nix': 'github:cachix/git-hooks.nix/a5a961387e75ae44cc20f0a57ae463da5e959656' (2025-01-03) → 'github:cachix/git-hooks.nix/b5a62751225b2f62ff3147d0a334055ebadcd5cc' (2025-03-07) • Updated input 'homeManager': 'github:nix-community/home-manager/9616d81f98032d1ee9bec68ab4b6a8c833add88c' (2025-01-13) → 'github:nix-community/home-manager/4e12151c9e014e2449e0beca2c0e9534b96a26b4' (2025-03-14) • Updated input 'impermanence': 'github:nix-community/impermanence/c64bed13b562fc3bb454b48773d4155023ac31b7' (2025-01-12) → 'github:nix-community/impermanence/4b3e914cdf97a5b536a889e939fb2fd2b043a170' (2025-01-25) • Updated input 'lanzaboote': 'github:nix-community/lanzaboote/93e6f0d77548be8757c11ebda5c4235ef4f3bc67' (2024-12-23) → 'github:nix-community/lanzaboote/d8099586d9a84308ffedac07880e7f07a0180ff4' (2025-03-08) • Updated input 'lanzaboote/crane': 'github:ipetkov/crane/ef80ead953c1b28316cc3f8613904edc2eb90c28' (2024-11-08) → 'github:ipetkov/crane/75390a36cd0c2cdd5f1aafd8a9f827d7107f2e53' (2025-03-05) • Updated input 'lanzaboote/flake-compat': 'github:edolstra/flake-compat/0f9255e01c2351cc7d116c072cb317785dd33b33' (2023-10-04) → 'github:edolstra/flake-compat/ff81ac966bb2cae68946d5ed5fc4994f96d0ffec' (2024-12-04) • Updated input 'lanzaboote/flake-parts': 'github:hercules-ci/flake-parts/506278e768c2a08bec68eb62932193e341f55c90' (2024-11-01) → 'github:hercules-ci/flake-parts/3876f6b87db82f33775b1ef5ea343986105db764' (2025-03-01) • Updated input 'lanzaboote/pre-commit-hooks-nix': 'github:cachix/pre-commit-hooks.nix/cd1af27aa85026ac759d5d3fccf650abe7e1bbf0' (2024-11-11) → 'github:cachix/pre-commit-hooks.nix/42b1ba089d2034d910566bf6b40830af6b8ec732' (2025-03-02) • Removed input 'lanzaboote/pre-commit-hooks-nix/nixpkgs-stable' • Updated input 'lanzaboote/rust-overlay': 'github:oxalica/rust-overlay/0be641045af6d8666c11c2c40e45ffc9667839b5' (2024-11-18) → 'github:oxalica/rust-overlay/38e9826bc4296c9daf18bc1e6aa299f3e932a403' (2025-03-06) • Updated input 'lix': 'git+https://git@git.lix.systems/lix-project/lix?ref=refs/heads/main&rev=38dd196b03f4163ae3bbb2a1910b8f0f141ca0e2' (2025-01-12) → 'git+https://git@git.lix.systems/lix-project/lix?ref=refs/heads/main&rev=af15a446ea88a2244e3c5a50eab776c33ab3bd80' (2025-03-14) • Updated input 'lix-module': 'git+https://git.lix.systems/lix-project/nixos-module?ref=refs/heads/main&rev=c374ebf5548c7b6d4bf884369a5b6879cfc916ea' (2024-12-06) → 'git+https://git.lix.systems/lix-project/nixos-module?ref=refs/heads/main&rev=a6da43f8193d9e329bba1795c42590c27966082e' (2025-03-13) • Updated input 'mobile-nixos': 'github:NixOS/mobile-nixos/72a0601f36a1b424e8b72f17ff53509b990ee060' (2025-01-11) → 'github:NixOS/mobile-nixos/8956d72cf8fa9110dcc5fcbc537adee45a8014f5' (2025-03-04) • Updated input 'nixosHardware': 'github:NixOS/nixos-hardware/8870dcaff63dfc6647fb10648b827e9d40b0a337' (2025-01-09) → 'github:NixOS/nixos-hardware/e1f12151258b12c567f456d8248e4694e9390613' (2025-03-12) • Updated input 'treefmt-nix': 'github:numtide/treefmt-nix/13c913f5deb3a5c08bb810efd89dc8cb24dd968b' (2025-01-06) → 'github:numtide/treefmt-nix/3d0579f5cc93436052d94b73925b48973a104204' (2025-02-17)
Use aciceri.dev domains for VPNs too
2025-03-14 15:01:09 +00:00 · 2025-03-14 15:56:29 +01:00 · 2025-03-14 15:56:05 +01:00 · 2025-03-14 15:55:58 +01:00 · 2025-03-14 15:54:48 +01:00 · 2025-03-14 10:00:25 +01:00
17 changed files with 120 additions and 126 deletions
--- a/flake.lock
+++ b/flake.lock
@ -26,11 +26,11 @@
        "nixpkgs": "nixpkgs_2"
      },
      "locked": {
-        "lastModified": 1741732420,
+        "lastModified": 1741914590,
-        "narHash": "sha256-szO/TCc+UrjEtxi4K3GyoAv5/DKDkUeRtpTZTJY+zI4=",
+        "narHash": "sha256-R8Bxh/AMD6nvmQrC43DkUkuwDmTWlyvNAzJ0Riq5w5U=",
        "owner": "catppuccin",
        "repo": "nix",
-        "rev": "a3f70463fb5e3df32d2d52a2705606db03843de2",
+        "rev": "1e3fe44bc13809f62c2ef0aa864a304a6c8ebea4",
        "type": "github"
      },
      "original": {
@ -122,11 +122,11 @@
        "nixpkgs-stable": "nixpkgs-stable"
      },
      "locked": {
-        "lastModified": 1741771598,
+        "lastModified": 1741945480,
-        "narHash": "sha256-nEfO1JskMvwDa0cf13LHdQO/QCM1ioCr8nU+ZOIO+ug=",
+        "narHash": "sha256-D80QGijmeVxm/4fJVd53dP8MHCLcn+JjtgniaGKIXvg=",
        "owner": "nix-community",
        "repo": "emacs-overlay",
-        "rev": "04d8748de599621ca0ae7f9766c489adf45d63de",
+        "rev": "5d6c484290f0754ce745ea6f7e2b7d037bdc7b76",
        "type": "github"
      },
      "original": {
@ -387,11 +387,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1741791118,
+        "lastModified": 1741955947,
-        "narHash": "sha256-4Y427uj0eql4yRU5rely3EcOlB9q457UDbG9omPtXiA=",
+        "narHash": "sha256-2lbURKclgKqBNm7hVRtWh0A7NrdsibD0EaWhahUVhhY=",
        "owner": "nix-community",
        "repo": "home-manager",
-        "rev": "18780912345970e5b546b1b085385789b6935a83",
+        "rev": "4e12151c9e014e2449e0beca2c0e9534b96a26b4",
        "type": "github"
      },
      "original": {
@ -464,11 +464,11 @@
    "lix": {
      "flake": false,
      "locked": {
-        "lastModified": 1741730072,
+        "lastModified": 1741957871,
-        "narHash": "sha256-bHsQBdUz2l+DKXcNrCgul1fdMo8MO2YaJo+Lp84GL00=",
+        "narHash": "sha256-BSim3favVai9y7eMaFWNNDbIJ0mdRp5TMcJvHWdjC1s=",
        "ref": "refs/heads/main",
-        "rev": "85a140accb5592c9b5a73f5ea2156f5b0c853d1c",
+        "rev": "af15a446ea88a2244e3c5a50eab776c33ab3bd80",
-        "revCount": 17639,
+        "revCount": 17649,
        "type": "git",
        "url": "https://git@git.lix.systems/lix-project/lix"
      },
@ -489,11 +489,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1738176840,
+        "lastModified": 1741894565,
-        "narHash": "sha256-NG3IRvRs3u3btVCN861FqHvgOwqcNT/Oy6PBG86F5/E=",
+        "narHash": "sha256-2FD0NDJbEjUHloVrtEIms5miJsj1tvQCc/0YK5ambyc=",
        "ref": "refs/heads/main",
-        "rev": "621aae0f3cceaffa6d73a4fb0f89c08d338d729e",
+        "rev": "a6da43f8193d9e329bba1795c42590c27966082e",
-        "revCount": 133,
+        "revCount": 136,
        "type": "git",
        "url": "https://git.lix.systems/lix-project/nixos-module"
      },
@ -569,11 +569,11 @@
    },
    "nixosHardware": {
      "locked": {
-        "lastModified": 1741790591,
+        "lastModified": 1741792691,
-        "narHash": "sha256-sZvDvHJ97HuSePn9Pve5gStXWAws+lNGbLSzQt3bpS4=",
+        "narHash": "sha256-f0BVt1/cvA0DQ/q3rB+HY4g4tKksd03ZkzI4xehC2Ew=",
        "owner": "NixOS",
        "repo": "nixos-hardware",
-        "rev": "d25dac1bd5eed6fbf67eb79d1f15d624e5a2c032",
+        "rev": "e1f12151258b12c567f456d8248e4694e9390613",
        "type": "github"
      },
      "original": {
@ -647,11 +647,11 @@
    },
    "nixpkgs-stable": {
      "locked": {
-        "lastModified": 1741600792,
+        "lastModified": 1741862977,
-        "narHash": "sha256-yfDy6chHcM7pXpMF4wycuuV+ILSTG486Z/vLx/Bdi6Y=",
+        "narHash": "sha256-prZ0M8vE/ghRGGZcflvxCu40ObKaB+ikn74/xQoNrGQ=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "ebe2788eafd539477f83775ef93c3c7e244421d3",
+        "rev": "cdd2ef009676ac92b715ff26630164bb88fec4e0",
        "type": "github"
      },
      "original": {
@ -695,11 +695,11 @@
    },
    "nixpkgs_4": {
      "locked": {
-        "lastModified": 1741513245,
+        "lastModified": 1741851582,
-        "narHash": "sha256-7rTAMNTY1xoBwz0h7ZMtEcd8LELk9R5TzBPoHuhNSCk=",
+        "narHash": "sha256-cPfs8qMccim2RBgtKGF+x9IBCduRvd/N5F4nYpU0TVE=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "e3e32b642a31e6714ec1b712de8c91a3352ce7e1",
+        "rev": "6607cf789e541e7873d40d3a8f7815ea92204f32",
        "type": "github"
      },
      "original": {
--- a/hosts/default.nix
+++ b/hosts/default.nix
@ -116,7 +116,6 @@
            owner = "grafana";
            group = "forgejo";
          };
          "firefly-app-key".owner = "firefly-iii";
          "matrix-registration-shared-secret".owner = "matrix-synapse";
        };
      };
--- a/hosts/kirk/default.nix
+++ b/hosts/kirk/default.nix
@ -35,6 +35,7 @@
      "prometheus-exporters"
      "promtail"
      "syncthing"
      "zerotier"
    ]
    ++ [ ./disko.nix ];
--- a/hosts/picard/default.nix
+++ b/hosts/picard/default.nix
@ -41,6 +41,7 @@
      "adb"
      "prometheus-exporters"
      "promtail"
      "zerotier"
    ]
    ++ [ ./disko.nix ];
--- a/hosts/sisko/default.nix
+++ b/hosts/sisko/default.nix
@ -11,13 +11,10 @@
      "wireguard-server"
      "mediatomb"
      "transmission"
      # "hercules-ci"
      "home-assistant"
      "adguard-home"
      "cloudflare-dyndns"
      "sisko-proxy"
      "invidious"
      "searx"
      "sisko-share"
      "forgejo"
      "prometheus"
@ -32,8 +29,9 @@
      "syncthing"
      "atticd"
      "jellyfin"
      "firefly"
      "matrix"
      "radarr"
      "zerotier"
    ]
    ++ [
      ./disko.nix
--- a/modules/adguard-home/default.nix
+++ b/modules/adguard-home/default.nix
@ -1,3 +1,4 @@
 { config, ... }:
 {
  services.adguardhome = {
    enable = true;
@ -15,4 +16,13 @@
  environment.persistence."/persist".directories = [
    "/var/lib/AdGuardHome"
  ];
  services.nginx.virtualHosts."adguard.sisko.wg.aciceri.dev" = {
    forceSSL = true;
    useACMEHost = "aciceri.dev";
    locations."/" = {
      proxyPass = "http://localhost:${builtins.toString config.services.adguardhome.port}";
    };
    serverAliases = [ "adguard.sisko.zt.aciceri.dev" ];
  };
 }
--- a/modules/cloudflare-dyndns/default.nix
+++ b/modules/cloudflare-dyndns/default.nix
@ -8,15 +8,8 @@
      "aciceri.dev"
      "git.aciceri.dev"
      "home.aciceri.dev"
      "torrent.aciceri.dev"
      "search.aciceri.dev"
      "invidious.aciceri.dev"
      "vpn.aciceri.dev"
      "photos.aciceri.dev"
      "status.aciceri.dev"
      "jelly.aciceri.dev"
      "firefly.aciceri.dev"
      "import.firefly.aciceri.dev"
      "matrix.aciceri.dev"
    ];
    apiTokenFile = config.age.secrets.cloudflare-dyndns-api-token.path;
--- a/modules/grafana/default.nix
+++ b/modules/grafana/default.nix
@ -7,7 +7,7 @@ in
    enable = true;
    settings = {
      server = {
-        domain = "status.aciceri.dev";
+        domain = "status.sisko.aciceri.dev";
        http_addr = "127.0.0.1";
        http_port = 2342;
        root_url = "https://${config.services.grafana.settings.server.domain}:443/";
@ -30,10 +30,11 @@ in
  ];
  services.nginx.virtualHosts = {
-    "status.aciceri.dev" = {
+    "status.sisko.wg.aciceri.dev" = {
-      enableACME = true;
+      useACMEHost = "aciceri.dev";
      forceSSL = true;
      locations."/".proxyPass = "http://127.0.0.1:${builtins.toString cfg.settings.server.http_port}";
      serverAliases = [ "status.sisko.zt.aciceri.dev" ];
    };
  };
 }
--- a/modules/jellyfin/default.nix
+++ b/modules/jellyfin/default.nix
@ -15,7 +15,7 @@
    "jelly.aciceri.dev" = {
      enableACME = true;
      forceSSL = true;
-      locations."/".proxyPass = "http://127.0.0.1:8096";
+      locations."/".proxyPass = "http://127.0.0.1:8096"; # FIXME hardcoded port
    };
  };
 }
--- a/modules/matrix/default.nix
+++ b/modules/matrix/default.nix
@ -7,7 +7,6 @@
 let
  clientConfig = {
    "m.homeserver".base_url = "https://matrix.aciceri.dev";
    # "org.matrix.msc3575.proxy".url = "https://syncv3.matrix.aciceri.dev";
  };
  serverConfig."m.server" = "matrix.aciceri.dev:443";
  mkWellKnown = data: ''
@ -21,7 +20,7 @@ in
  services.nginx.virtualHosts = {
    "aciceri.dev" = {
-      enableACME = true;
+      useACMEHost = "aciceri.dev";
      forceSSL = true;
      locations."= /.well-known/matrix/server".extraConfig = mkWellKnown serverConfig;
      locations."= /.well-known/matrix/client".extraConfig = mkWellKnown clientConfig;
@ -36,17 +35,6 @@ in
    };
  };
  services.postgresql = {
    enable = true;
    # initialScript = pkgs.writeText "synapse-init.sql" ''
    #   CREATE ROLE "matrix-synapse" WITH LOGIN PASSWORD 'synapse';
    #   CREATE DATABASE "matrix-synapse" WITH OWNER "matrix-synapse"
    # TEMPLATE template0
    # LC_COLLATE = "C"
    # LC_CTYPE = "C";
    # '';
  };
  systemd.tmpfiles.rules = [
    "d ${config.services.matrix-synapse.dataDir} 770 matrix-synapse matrix-synapse"
  ];
@ -79,28 +67,4 @@ in
    };
    extraConfigFiles = [ config.age.secrets.matrix-registration-shared-secret.path ];
  };
  # backup.paths = [
  #   config.services.matrix-synapse.dataDir
  #   "/var/backup/postgresql/matrix-synapse.sql.gz"
  # ];
  # services.postgresqlBackup = {
  #   enable = true;
  # databases = [ "matrix-synapse" ];
  # };
  # services.matrix-sliding-sync = {
  #   enable = true;
  #   environmentFile = config.age.secrets.matrix-sliding-sync-secret.path;
  #   settings = {
  #     SYNCV3_SERVER = "http://localhost:8008";
  #   };
  # };
  # services.nginx.virtualHosts."syncv3.matrix.aciceri.dev" = {
  #   enableACME = true;
  #   forceSSL = true;
  #   locations."/".proxyPass = config.services.matrix-sliding-sync.settings.SYNCV3_SERVER;
  # };
 }
--- a/modules/nginx-base/default.nix
+++ b/modules/nginx-base/default.nix
@ -1,7 +1,23 @@
 { config, ... }:
 {
  security.acme = {
    acceptTerms = true;
    defaults.email = "andrea.ciceri@autistici.org";
    certs = {
      "aciceri.dev" = {
        reloadServices = [ "nginx.service" ];
        domain = "aciceri.dev";
        extraDomainNames = [
          "*.sisko.zt.aciceri.dev"
          "*.sisko.wg.aciceri.dev"
        ];
        dnsProvider = "cloudflare";
        # dnsResolver = "1.1.1.1:53";
        dnsPropagationCheck = true;
        group = config.services.nginx.group;
        environmentFile = config.age.secrets.cloudflare-dyndns-api-token.path;
      };
    };
  };
  networking.firewall.allowedTCPPorts = [
@ -11,6 +27,7 @@
  services.nginx = {
    enable = true;
    statusPage = true;
    recommendedGzipSettings = true;
    recommendedOptimisation = true;
    recommendedProxySettings = true;
--- a/modules/paperless/default.nix
+++ b/modules/paperless/default.nix
@ -25,14 +25,15 @@
  imports = [ ../nginx-base ];
-  services.nginx.virtualHosts."paper.aciceri.dev" = {
+  services.nginx.virtualHosts."paper.sisko.wg.aciceri.dev" = {
    forceSSL = true;
-    enableACME = true;
+    useACMEHost = "aciceri.dev";
    locations."/" = {
      proxyPass = "http://localhost:${builtins.toString config.services.paperless.port}";
    };
    extraConfig = ''
      client_max_body_size 50000M;
    '';
    serverAliases = [ "paper.sisko.zt.aciceri.dev" ];
  };
 }
--- a/modules/radarr/default.nix
+++ b/modules/radarr/default.nix
@ -0,0 +1,14 @@
 {
  services.radarr = {
    enable = true;
  };
  services.nginx.virtualHosts."radarr.sisko.wg.aciceri.dev" = {
    forceSSL = true;
    useACMEHost = "aciceri.dev";
    locations."/" = {
      proxyPass = "http://localhost:7878"; # FIXME hardcoded port
    };
    serverAliases = [ "radarr.sisko.zt.aciceri.dev" ];
  };
 }
--- a/modules/sisko-proxy/default.nix
+++ b/modules/sisko-proxy/default.nix
@ -15,26 +15,17 @@
        proxy_set_header    Connection  $connection_upgrade;
      '';
    };
-    "torrent.aciceri.dev" = {
+    "home.sisko.aciceri.dev" = {
      forceSSL = true;
-      enableACME = true;
+      useACMEHost = "aciceri.dev";
      locations."/" = {
-        proxyPass = "http://localhost:${builtins.toString config.services.transmission.settings.rpc-port}";
+        proxyPass = "http://localhost:${builtins.toString config.services.home-assistant.config.http.server_port}";
-      };
+        proxyWebsockets = true;
    };
    "search.aciceri.dev" = {
      forceSSL = true;
      enableACME = true;
      locations."/" = {
        proxyPass = "http://localhost:8888";
      };
    };
    "invidious.aciceri.dev" = {
      forceSSL = true;
      enableACME = true;
      locations."/" = {
        proxyPass = "http://localhost:${builtins.toString config.services.invidious.port}";
      };
      extraConfig = ''
        proxy_set_header    Upgrade     $http_upgrade;
        proxy_set_header    Connection  $connection_upgrade;
      '';
    };
    "photos.aciceri.dev" = {
      extraConfig = ''
--- a/modules/transmission/default.nix
+++ b/modules/transmission/default.nix
@ -8,6 +8,8 @@
      download-dir = "/mnt/hd/torrent";
      incomplete-dir = "/mnt/hd/torrent/.incomplete";
      download-queue-enabled = false;
      rpc-bind-address = "0.0.0.0";
      peer-port = 51413; # Forward both TCP and UDP on router traffic from router
      rpc-whitelist-enabled = false;
@ -46,4 +48,13 @@
  environment.persistence."/persist".directories = [
    config.services.transmission.home
  ];
  services.nginx.virtualHosts."torrent.sisko.wg.aciceri.dev" = {
    forceSSL = true;
    useACMEHost = "aciceri.dev";
    locations."/" = {
      proxyPass = "http://localhost:${builtins.toString config.services.transmission.settings.rpc-port}";
    };
    serverAliases = [ "torrent.sisko.zt.aciceri.dev" ];
  };
 }
--- a/modules/zerotier/default.nix
+++ b/modules/zerotier/default.nix
@ -0,0 +1,6 @@
 {
  services.zerotierone = {
    enable = true;
    joinNetworks = [ "632ea29085af0cb4" ];
  };
 }
--- a/secrets/cloudflare-dyndns-api-token.age
+++ b/secrets/cloudflare-dyndns-api-token.age
@ -1,30 +1,17 @@
 age-encryption.org/v1
 -> ssh-rsa /AagBw
-K5GB/dRGaRFYq0dxuUFPubpdceMq6jOGSWuFuKgtRbtvC+P7qd8g56AZYTyo97jZ
+qbtCO62bJ2e8tUAZHoGTjyrbvp/nkh4XUeLJDeuZNVsUWuvmAyrdb43V4x8cZprl
-oAsl8bF3wifrPN73SzCoGba1lCmpDZLCPllNd5RZL1bcAGBj9eDAA1zihYnnO7s+
+90ac8YG6xCZ8Jjq8KYV/CtS08HSDLR09om673lrQ5huUYu1kWVUatmH2102mQYyi
-r8L8JSJ/P76AZ3JRhylU0KjgkX1TnVSIsJ/wCQGbdw+KrTuam/3zjzLXEptn2U26
+tlRNx8MtYWlrEgh2cw1E24DJhzUILvW13yHfLyYH052Xaj+uXFRj/c7AyYSoOgzQ
-oQ4AuzWVGWtyrAKyJfRDWQQUGDwgXMB1h+7XZMm3G1eu6Wm7vuFEQLjaocFE9tO0
+IrfFU5yncmC6IMiO5/S9TGFLpq8zL983JzeZuYKdYXW+MiWaD15nxzsQQIgXI6YH
-8lnU3IEzXtn1NrutmiIJSoDyGk/PeRdvu2fZWY9oKRxkCA2q0fOca9ArcAP7Wr8a
+K8GYXcugB8O1FisjKw8edYr3bRbHYNNSK1U+v7Wu0ge9f/FXLv2eDKQszcKPxUCJ
-+/2usaZ/wsc2fzqDQU2XoFutIU0qwvX6DtDmfb8RhMNrkj2HiR2MluYo+NqQqMOJ
+XLHi1A6PyHmGlAvYfbj7Dns7KW4DoMmg+Low6VQ6yORbPlN1bbEcjq0qE6f+e6TJ
-7kMS22yE1Z6akvpeHo1GZ15HczQatIXXSr4DFGlF7CG0ASNbjR+2Qzws+EmZ2WGX
+QQT7617PkmL1KVw2EryIql5Cq7ConTNQaaj1118mjBpW91b64vOXOmWZfOzNo+M1
-Ad8D9aq5DYOr9xvUdZn66NwyFyyo7FRMoXRFNL01sxJUBpu1wVkKECa8DK0GTIzz
+Cbsb98Q0VyK2dXDMwPNXW1dKxDb1TGOrPCg9jIwGASco98MTeHFV3/G2F8n7aKYZ
-u+qRWtD9WxJkAodW1NmE2F08HIy//exP0L/L6laAjIrDZTle12Nrk6n9ke1UUBIo
+8erixoeKQjyZtNxW2Phq5Wmhjif22qmfJ/+wWvB43CSzLf/79Zcf6Y/qrdqwjzED
-zU0RdY9HT+DAqScViGdbitv4Z+GYNWWkZfpW8O56S+B/0rmZZ6UQ8VB8GopUecBt
+fI3NhbAlZVsywBXQnTpuZlN1CE+lR5h0QtJVDy4CWhj/SbucCWL7hmtG3CW8Covq
-E14rynpvnd2A6+WlUWcft2Uwl1i7jL3IARO1F3LTsS4
+sa0CJMCtfX71m+h8F3v9oXxlg7Mh8j9c9dHGIbzAYFQ
-> ssh-rsa QHr3/A
+-> ssh-ed25519 +vdRnA 0FOXCOJg0HIZ2yeW3PKHHOQxtJN6d2L1z6qtW74vxXw
-Kh/yF7CW7lKTsn6JK4vX2SNyiH66JdB+oVYTFdc2efJYTXVLuj7ITK8EMP3dV267
+6xthzPbBs09E4iTgki8bxSvp/WhnO6AqrfL8ZEfYrBI
-+D4UM3jcn8wOTeTjXIo8P01IOspGxslfC4J+Yol8K+1JA2BjB0diwzhQbkOEyxJ6
+--- eH5jp9jn2nUTrUHVdGK6WF+cyms4icim/UjLByNsUOw
-R0uymJYXjtl8Cjx2mlyNMybG8QZYypPhdKosBRn/KELxInGsWHm4MV3XQ+w2fr9Q
+2ÉØ>eæ†o\îþj¸ïr…ö<E280A6><C3B6>Y·¶3eŸù¯ê<>@qþ.s‹%>yz[9Å/á”„å²!Bµº.lÁKºç4â\ñ* ôN=OÖt˜W°]êÿ›é¾½Õ‰‰¸ˆš6cRö^|H+¹è¤ç~Ô<>‚ù< ¸ðîÓ¸µ§ƒO*ÁŒT€=uïM~šµ_Jæ‚PÞ[±°ªŠ
 xHIKvz/8QabgzodHwFbMjp29B4MJUSIkl+uxyTULQMcoOCJ5Ip5BqA+VZsFRD8zV
 4dePanMQHPXIMnm3POZy3hq/M4FcwWkdJLvz3zyVDuW6mWdiOgA0k1AGpGIFTXeM
 bKclRUlgL9n7C/dEh5pcKLbEeh5HSf+2izn7PAA90zAQl8++2+iYMHEIQL/Ft6LH
 XnAsNR4rwnVdWu8BlyEhIPev1GgSp3wOc9eQ6TA16RO4ND1ItnLVauAmvDN4rUWI
 0wc9Utgwxy4MNhypRLnRXKc555pNpsL1aoA+vcbHfxW1MiW7zviIz2z/RXBR77ut
 x9kekkP+LEgMHWD4XCGidM2sMrKfKDDblb+YGKxRcdFlELQa0jHH1mcvU5YC4oY2
 IhYhWeEvyQOr21cP885Psu8IvSpaZVA0tOEdrEXNTa5+S495IGplp8YuxdjW6dz1
 trDcKVSXNsjqLtpl0CrPY8pSPRIEvUJgBcHUxB3+E/U
 -> ssh-ed25519 +vdRnA lCY+mIpl7nNGi4wD5Z2CJPlIpqTECUyOncW+FuKzqxs
 3g0+X5fVGjo+EnETlDlO1VQl83Loi4bEBHshRz1/q0A
 --- iUTAy7LeDZTABLGEMw/Bkc/qbujLcdpHdQ/TuodhmaM
 Ó¤ºþµ½;{Ö?‡®Ã`t™Ö8<C396>+—‡þtÿý0m0Áç¾Ü¼ùì”ÊAÓ£m¨x}ÁŒZ2žóÀ„¾N±Ö2
 xå<‡IVüæ#W„ôúŠLÅÚ¿
Author	SHA1	Message	Date
Seven of Nine	3a23b4cec9	flake.lock: Update Some checks failed EVAL aarch64-linux.sisko Details BUILD aarch64-linux.sisko Details UPLOAD aarch64-linux.sisko Details DOWNLOAD aarch64-linux.sisko Details CACHIX aarch64-linux.sisko Details ATTIC aarch64-linux.sisko Details / test (push) Successful in 20m42s Details Flake lock file updates: • Updated input 'agenix': 'github:ryantm/agenix/f6291c5935fdc4e0bef208cfc0dcab7e3f7a1c41' (2024-08-10) → 'github:ryantm/agenix/e600439ec4c273cf11e06fe4d9d906fb98fa097c' (2025-01-15) • Updated input 'catppuccin': 'github:catppuccin/nix/8eada392fd6571a747e1c5fc358dd61c14c8704e' (2025-01-05) → 'github:catppuccin/nix/1e3fe44bc13809f62c2ef0aa864a304a6c8ebea4' (2025-03-14) • Removed input 'catppuccin/catppuccin-v1_1' • Removed input 'catppuccin/catppuccin-v1_2' • Removed input 'catppuccin/home-manager' • Removed input 'catppuccin/home-manager/nixpkgs' • Removed input 'catppuccin/home-manager-stable' • Removed input 'catppuccin/home-manager-stable/nixpkgs' • Updated input 'catppuccin/nixpkgs': 'github:NixOS/nixpkgs/d3c42f187194c26d9f0309a8ecc469d6c878ce33' (2024-12-17) → 'github:NixOS/nixpkgs/10069ef4cf863633f57238f179a0297de84bd8d3' (2025-03-06) • Removed input 'catppuccin/nixpkgs-stable' • Removed input 'catppuccin/nuscht-search' • Removed input 'catppuccin/nuscht-search/flake-utils' • Removed input 'catppuccin/nuscht-search/flake-utils/systems' • Removed input 'catppuccin/nuscht-search/ixx' • Removed input 'catppuccin/nuscht-search/ixx/flake-utils' • Removed input 'catppuccin/nuscht-search/ixx/nixpkgs' • Removed input 'catppuccin/nuscht-search/nixpkgs' • Updated input 'disko': 'github:nix-community/disko/f720e64ec37fa16ebba6354eadf310f81555cc07' (2025-01-12) → 'github:nix-community/disko/0d8c6ad4a43906d14abd5c60e0ffe7b587b213de' (2025-03-12) • Updated input 'emacs-overlay': 'github:nix-community/emacs-overlay/244a2ab1459c72bac32a2db088549f8bc6d7a836' (2025-01-13) → 'github:nix-community/emacs-overlay/5d6c484290f0754ce745ea6f7e2b7d037bdc7b76' (2025-03-14) • Updated input 'emacs-overlay/nixpkgs': 'github:NixOS/nixpkgs/130595eba61081acde9001f43de3248d8888ac4a' (2025-01-10) → 'github:NixOS/nixpkgs/6607cf789e541e7873d40d3a8f7815ea92204f32' (2025-03-13) • Updated input 'emacs-overlay/nixpkgs-stable': 'github:NixOS/nixpkgs/1dab772dd4a68a7bba5d9460685547ff8e17d899' (2025-01-10) → 'github:NixOS/nixpkgs/cdd2ef009676ac92b715ff26630164bb88fec4e0' (2025-03-13) • Updated input 'flakeParts': 'github:hercules-ci/flake-parts/b905f6fc23a9051a6e1b741e1438dbfc0634c6de' (2025-01-06) → 'github:hercules-ci/flake-parts/f4330d22f1c5d2ba72d3d22df5597d123fdb60a9' (2025-03-07) • Updated input 'flakeParts/nixpkgs-lib': '`e9b5173191`.tar.gz?narHash=sha256-CewEm1o2eVAnoqb6Ml%2BQi9Gg/EfNAxbRx1lANGVyoLI%3D' (2025-01-01) → 'github:nix-community/nixpkgs.lib/147dee35aab2193b174e4c0868bd80ead5ce755c' (2025-03-02) • Updated input 'git-hooks-nix': 'github:cachix/git-hooks.nix/a5a961387e75ae44cc20f0a57ae463da5e959656' (2025-01-03) → 'github:cachix/git-hooks.nix/b5a62751225b2f62ff3147d0a334055ebadcd5cc' (2025-03-07) • Updated input 'homeManager': 'github:nix-community/home-manager/9616d81f98032d1ee9bec68ab4b6a8c833add88c' (2025-01-13) → 'github:nix-community/home-manager/4e12151c9e014e2449e0beca2c0e9534b96a26b4' (2025-03-14) • Updated input 'impermanence': 'github:nix-community/impermanence/c64bed13b562fc3bb454b48773d4155023ac31b7' (2025-01-12) → 'github:nix-community/impermanence/4b3e914cdf97a5b536a889e939fb2fd2b043a170' (2025-01-25) • Updated input 'lanzaboote': 'github:nix-community/lanzaboote/93e6f0d77548be8757c11ebda5c4235ef4f3bc67' (2024-12-23) → 'github:nix-community/lanzaboote/d8099586d9a84308ffedac07880e7f07a0180ff4' (2025-03-08) • Updated input 'lanzaboote/crane': 'github:ipetkov/crane/ef80ead953c1b28316cc3f8613904edc2eb90c28' (2024-11-08) → 'github:ipetkov/crane/75390a36cd0c2cdd5f1aafd8a9f827d7107f2e53' (2025-03-05) • Updated input 'lanzaboote/flake-compat': 'github:edolstra/flake-compat/0f9255e01c2351cc7d116c072cb317785dd33b33' (2023-10-04) → 'github:edolstra/flake-compat/ff81ac966bb2cae68946d5ed5fc4994f96d0ffec' (2024-12-04) • Updated input 'lanzaboote/flake-parts': 'github:hercules-ci/flake-parts/506278e768c2a08bec68eb62932193e341f55c90' (2024-11-01) → 'github:hercules-ci/flake-parts/3876f6b87db82f33775b1ef5ea343986105db764' (2025-03-01) • Updated input 'lanzaboote/pre-commit-hooks-nix': 'github:cachix/pre-commit-hooks.nix/cd1af27aa85026ac759d5d3fccf650abe7e1bbf0' (2024-11-11) → 'github:cachix/pre-commit-hooks.nix/42b1ba089d2034d910566bf6b40830af6b8ec732' (2025-03-02) • Removed input 'lanzaboote/pre-commit-hooks-nix/nixpkgs-stable' • Updated input 'lanzaboote/rust-overlay': 'github:oxalica/rust-overlay/0be641045af6d8666c11c2c40e45ffc9667839b5' (2024-11-18) → 'github:oxalica/rust-overlay/38e9826bc4296c9daf18bc1e6aa299f3e932a403' (2025-03-06) • Updated input 'lix': 'git+https://git@git.lix.systems/lix-project/lix?ref=refs/heads/main&rev=38dd196b03f4163ae3bbb2a1910b8f0f141ca0e2' (2025-01-12) → 'git+https://git@git.lix.systems/lix-project/lix?ref=refs/heads/main&rev=af15a446ea88a2244e3c5a50eab776c33ab3bd80' (2025-03-14) • Updated input 'lix-module': 'git+https://git.lix.systems/lix-project/nixos-module?ref=refs/heads/main&rev=c374ebf5548c7b6d4bf884369a5b6879cfc916ea' (2024-12-06) → 'git+https://git.lix.systems/lix-project/nixos-module?ref=refs/heads/main&rev=a6da43f8193d9e329bba1795c42590c27966082e' (2025-03-13) • Updated input 'mobile-nixos': 'github:NixOS/mobile-nixos/72a0601f36a1b424e8b72f17ff53509b990ee060' (2025-01-11) → 'github:NixOS/mobile-nixos/8956d72cf8fa9110dcc5fcbc537adee45a8014f5' (2025-03-04) • Updated input 'nixosHardware': 'github:NixOS/nixos-hardware/8870dcaff63dfc6647fb10648b827e9d40b0a337' (2025-01-09) → 'github:NixOS/nixos-hardware/e1f12151258b12c567f456d8248e4694e9390613' (2025-03-12) • Updated input 'treefmt-nix': 'github:numtide/treefmt-nix/13c913f5deb3a5c08bb810efd89dc8cb24dd968b' (2025-01-06) → 'github:numtide/treefmt-nix/3d0579f5cc93436052d94b73925b48973a104204' (2025-02-17)	2025-03-14 15:01:09 +00:00
Andrea Ciceri	9677a6ca77	Use aciceri.dev domains for VPNs too Some checks failed EVAL aarch64-linux.sisko Details BUILD aarch64-linux.sisko Details UPLOAD aarch64-linux.sisko Details DOWNLOAD aarch64-linux.sisko Details CACHIX aarch64-linux.sisko Details ATTIC aarch64-linux.sisko Details / test (push) Successful in 2m9s Details	2025-03-14 15:56:29 +01:00
Andrea Ciceri	a8b1fed384	Unused secret	2025-03-14 15:56:05 +01:00
Andrea Ciceri	fb87eabdce	New cloudflare token	2025-03-14 15:55:58 +01:00
Andrea Ciceri	7717317840	Enable zerotier	2025-03-14 15:54:48 +01:00
Andrea Ciceri	5fb4292e1c	Enable `radarr` on `sisko` Some checks failed EVAL aarch64-linux.sisko Details BUILD aarch64-linux.sisko Details UPLOAD aarch64-linux.sisko Details DOWNLOAD aarch64-linux.sisko Details CACHIX aarch64-linux.sisko Details ATTIC aarch64-linux.sisko Details / test (push) Successful in 1m41s Details	2025-03-14 10:00:25 +01:00
Andrea Ciceri	9d8b575f3a	Disable transmission queue	2025-03-14 10:00:17 +01:00