nixos 24.11

flake.lock: Update
Flake lock file updates: • Updated input 'nixos-hardware': 'github:NixOS/nixos-hardware/c6c90887f84c02ce9ebf33b95ca79ef45007bf88?narHash=sha256-PVQW9ovo0CJbhuhCsrhFJGGdD1euwUornspKpBIgdok%3D' (2024-12-02) → 'github:NixOS/nixos-hardware/cceee0a31d2f01bcc98b2fbd591327c06a4ea4f9?narHash=sha256-fc6jTzIwCIVWTX50FtW6AZpuukuQWSEbPiyg6ZRGWFY%3D' (2024-12-03) • Updated input 'nixpkgs-unstable': 'github:NixOS/nixpkgs/ac35b104800bff9028425fec3b6e8a41de2bbfff?narHash=sha256-t4BBVpwG9B4hLgc6GUBuj3cjU7lP/PJfpTHuSqE%2Bcrk%3D' (2024-12-01) → 'github:NixOS/nixpkgs/55d15ad12a74eb7d4646254e13638ad0c4128776?narHash=sha256-M1%2BuCoV5igihRfcUKrr1riygbe73/dzNnzPsmaLCmpo%3D' (2024-12-03) • Updated input 'secrets': 'git+ssh://git@git.caspervk.net/caspervk/nixos-secrets.git?ref=refs/heads/master&rev=245ebe93e48c88b73fe3c46046b5717d21ac1a23' (2024-12-03) → 'git+ssh://git@git.caspervk.net/caspervk/nixos-secrets.git?ref=refs/heads/master&rev=3a98deadbce4005e49c80dc208794caab9b404d3' (2024-12-03)
2024-12-04 00:34:25 +01:00 · 2024-12-04 00:33:08 +01:00
19 changed files with 97 additions and 121 deletions
--- a/README.md
+++ b/README.md
@ -137,7 +137,7 @@ nixos-install --no-root-passwd --flake .#omega
 ### Upgrading
 Nixpkgs uses `stateVersion` so sparingly that auditing the entire nixpkgs repo
 is [easy
-enough](https://sourcegraph.com/search?q=context:global+repo:%5Egithub%5C.com/NixOS/nixpkgs%24+lang:Nix+stateVersion+AND+24.05&patternType=keyword&sm=0).
+enough](https://sourcegraph.com/search?q=context:global+repo:%5Egithub%5C.com/NixOS/nixpkgs%24+lang:Nix+stateVersion+AND+24.11&patternType=keyword&sm=0).
 Important changes to home-manager is available at
 <https://nix-community.github.io/home-manager/release-notes.xhtml> and
 <https://github.com/nix-community/home-manager/blob/master/modules/misc/news.nix>.
--- a/flake.lock
+++ b/flake.lock
@ -64,16 +64,16 @@
        ]
      },
      "locked": {
-        "lastModified": 1726989464,
-        "narHash": "sha256-Vl+WVTJwutXkimwGprnEtXc/s/s8sMuXzqXaspIGlwM=",
+        "lastModified": 1733050161,
+        "narHash": "sha256-lYnT+EYE47f5yY3KS/Kd4pJ6CO9fhCqumkYYkQ3TK20=",
        "owner": "nix-community",
        "repo": "home-manager",
-        "rev": "2f23fa308a7c067e52dfcc30a0758f47043ec176",
+        "rev": "62d536255879be574ebfe9b87c4ac194febf47c5",
        "type": "github"
      },
      "original": {
        "owner": "nix-community",
-        "ref": "release-24.05",
+        "ref": "release-24.11",
        "repo": "home-manager",
        "type": "github"
      }
@ -136,11 +136,11 @@
    },
    "nixos-hardware": {
      "locked": {
-        "lastModified": 1733139194,
-        "narHash": "sha256-PVQW9ovo0CJbhuhCsrhFJGGdD1euwUornspKpBIgdok=",
+        "lastModified": 1733217105,
+        "narHash": "sha256-fc6jTzIwCIVWTX50FtW6AZpuukuQWSEbPiyg6ZRGWFY=",
        "owner": "NixOS",
        "repo": "nixos-hardware",
-        "rev": "c6c90887f84c02ce9ebf33b95ca79ef45007bf88",
+        "rev": "cceee0a31d2f01bcc98b2fbd591327c06a4ea4f9",
        "type": "github"
      },
      "original": {
@ -152,16 +152,16 @@
    },
    "nixpkgs": {
      "locked": {
-        "lastModified": 1733016324,
-        "narHash": "sha256-8qwPSE2g1othR1u4uP86NXxm6i7E9nHPyJX3m3lx7Q4=",
+        "lastModified": 1733120037,
+        "narHash": "sha256-En+gSoVJ3iQKPDU1FHrR6zIxSLXKjzKY+pnh9tt+Yts=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "7e1ca67996afd8233d9033edd26e442836cc2ad6",
+        "rev": "f9f0d5c5380be0a599b1fb54641fa99af8281539",
        "type": "github"
      },
      "original": {
        "owner": "NixOS",
-        "ref": "nixos-24.05",
+        "ref": "nixos-24.11",
        "repo": "nixpkgs",
        "type": "github"
      }
@ -183,11 +183,11 @@
    },
    "nixpkgs-unstable": {
      "locked": {
-        "lastModified": 1733015953,
-        "narHash": "sha256-t4BBVpwG9B4hLgc6GUBuj3cjU7lP/PJfpTHuSqE+crk=",
+        "lastModified": 1733212471,
+        "narHash": "sha256-M1+uCoV5igihRfcUKrr1riygbe73/dzNnzPsmaLCmpo=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "ac35b104800bff9028425fec3b6e8a41de2bbfff",
+        "rev": "55d15ad12a74eb7d4646254e13638ad0c4128776",
        "type": "github"
      },
      "original": {
@ -214,11 +214,11 @@
    },
    "secrets": {
      "locked": {
-        "lastModified": 1733184969,
-        "narHash": "sha256-8sKs5Ence3XJifkez+bB/j9acKTEF/rFLmCenffJKiY=",
+        "lastModified": 1733268738,
+        "narHash": "sha256-JPyO3lnX3hOY/WZ1R8xoWWXgGmPtPg2dBdRKMbDINxw=",
        "ref": "refs/heads/master",
-        "rev": "245ebe93e48c88b73fe3c46046b5717d21ac1a23",
-        "revCount": 51,
+        "rev": "3a98deadbce4005e49c80dc208794caab9b404d3",
+        "revCount": 52,
        "type": "git",
        "url": "ssh://git@git.caspervk.net/caspervk/nixos-secrets.git"
      },
--- a/flake.nix
+++ b/flake.nix
@ -6,7 +6,7 @@
      url = "git+ssh://git@git.caspervk.net/caspervk/nixos-secrets.git";
    };
    nixpkgs = {
-      url = "github:NixOS/nixpkgs/nixos-24.05";
+      url = "github:NixOS/nixpkgs/nixos-24.11";
    };
    nixpkgs-unstable = {
      url = "github:NixOS/nixpkgs/nixos-unstable";
@ -32,7 +32,7 @@
      inputs.nixpkgs.follows = "nixpkgs"; # use the same nixpkgs as the system
    };
    home-manager = {
-      url = "github:nix-community/home-manager/release-24.05";
+      url = "github:nix-community/home-manager/release-24.11";
      inputs.nixpkgs.follows = "nixpkgs"; # use the same nixpkgs as the system
    };
    home-manager-unstable = {
@ -40,6 +40,7 @@
      inputs.nixpkgs.follows = "nixpkgs"; # use the same nixpkgs as the system
    };
    simple-nixos-mailserver = {
+      # TODO: upgrade to 24.11
      url = "gitlab:simple-nixos-mailserver/nixos-mailserver/nixos-24.05";
      inputs.nixpkgs.follows = "nixpkgs"; # use the same nixpkgs as the system
    };
--- a/hosts/alpha/default.nix
+++ b/hosts/alpha/default.nix
@ -29,7 +29,7 @@
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
-  system.stateVersion = "24.05"; # Did you read the comment?
+  system.stateVersion = "24.11"; # Did you read the comment?

  # This value determines the Home Manager release that your
  # configuration is compatible with. This helps avoid breakage
@ -38,5 +38,5 @@
  # You can update Home Manager without changing this value. See
  # the Home Manager release notes for a list of state version
  # changes in each release.
-  home-manager.users.caspervk.home.stateVersion = "24.05"; # Did you read the comment?
+  home-manager.users.caspervk.home.stateVersion = "24.11"; # Did you read the comment?
 }
--- a/hosts/delta/default.nix
+++ b/hosts/delta/default.nix
@ -25,7 +25,7 @@
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
-  system.stateVersion = "24.05"; # Did you read the comment?
+  system.stateVersion = "24.11"; # Did you read the comment?

  # This value determines the Home Manager release that your
  # configuration is compatible with. This helps avoid breakage
@ -34,5 +34,5 @@
  # You can update Home Manager without changing this value. See
  # the Home Manager release notes for a list of state version
  # changes in each release.
-  home-manager.users.caspervk.home.stateVersion = "24.05"; # Did you read the comment?
+  home-manager.users.caspervk.home.stateVersion = "24.11"; # Did you read the comment?
 }
--- a/hosts/mu/default.nix
+++ b/hosts/mu/default.nix
@ -27,7 +27,7 @@
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
-  system.stateVersion = "24.05"; # Did you read the comment?
+  system.stateVersion = "24.11"; # Did you read the comment?

  # This value determines the Home Manager release that your
  # configuration is compatible with. This helps avoid breakage
@ -36,5 +36,5 @@
  # You can update Home Manager without changing this value. See
  # the Home Manager release notes for a list of state version
  # changes in each release.
-  home-manager.users.caspervk.home.stateVersion = "24.05"; # Did you read the comment?
+  home-manager.users.caspervk.home.stateVersion = "24.11"; # Did you read the comment?
 }
--- a/hosts/omega/default.nix
+++ b/hosts/omega/default.nix
@ -26,7 +26,7 @@
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
-  system.stateVersion = "24.05"; # Did you read the comment?
+  system.stateVersion = "24.11"; # Did you read the comment?

  # This value determines the Home Manager release that your
  # configuration is compatible with. This helps avoid breakage
@ -35,5 +35,5 @@
  # You can update Home Manager without changing this value. See
  # the Home Manager release notes for a list of state version
  # changes in each release.
-  home-manager.users.caspervk.home.stateVersion = "24.05"; # Did you read the comment?
+  home-manager.users.caspervk.home.stateVersion = "24.11"; # Did you read the comment?
 }
--- a/hosts/omega/hardware.nix
+++ b/hosts/omega/hardware.nix
@ -54,8 +54,12 @@
  nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";

  # GPU
-  hardware.amdgpu.amdvlk = {
-    enable = true;
-    support32Bit.enable = true;
+  hardware.amdgpu = {
+    amdvlk = {
+      enable = true;
+      support32Bit.enable = true;
+      supportExperimental.enable = true;
+    };
+    opencl.enable = true;
  };
 }
--- a/hosts/sigma/default.nix
+++ b/hosts/sigma/default.nix
@ -39,7 +39,7 @@
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
-  system.stateVersion = "24.05"; # Did you read the comment?
+  system.stateVersion = "24.11"; # Did you read the comment?

  # This value determines the Home Manager release that your
  # configuration is compatible with. This helps avoid breakage
@ -48,5 +48,5 @@
  # You can update Home Manager without changing this value. See
  # the Home Manager release notes for a list of state version
  # changes in each release.
-  home-manager.users.caspervk.home.stateVersion = "24.05"; # Did you read the comment?
+  home-manager.users.caspervk.home.stateVersion = "24.11"; # Did you read the comment?
 }
--- a/hosts/sigma/matrix.nix
+++ b/hosts/sigma/matrix.nix
@ -51,16 +51,6 @@
    };
  };

-  # https://github.com/matrix-org/sliding-sync
-  services.matrix-sliding-sync = {
-    # Unlike matrix-synapse, sliding-sync has createDatabase=true by default,
-    # which means we don't have to configure the database in the postgres
-    # service manually.
-    enable = true;
-    settings.SYNCV3_SERVER = config.services.matrix-synapse.settings.public_baseurl;
-    environmentFile = config.age.secrets.matrix-sliding-sync-environment-file.path;
-  };
-
  services.postgresql = {
    ensureDatabases = [
      # matrix-synapse expects the database to have the options `LC_COLLATE`
@ -91,11 +81,4 @@
      }
    ];
  };
-
-  age.secrets.matrix-sliding-sync-environment-file = {
-    file = "${secrets}/secrets/matrix-sliding-sync-environment-file.age";
-    mode = "400";
-    owner = "root";
-    group = "root";
-  };
 }
--- a/hosts/sigma/postgresql.nix
+++ b/hosts/sigma/postgresql.nix
@ -5,6 +5,7 @@
  services.postgresql = {
    enable = true;
    # https://nixos.org/manual/nixos/stable/#module-services-postgres-upgrading
+    # https://wiki.nixos.org/wiki/PostgreSQL#Major_upgrades
    package = pkgs.postgresql_16;
  };

--- a/hosts/sigma/samba.nix
+++ b/hosts/sigma/samba.nix
@ -24,11 +24,11 @@
    # Disable discovery: don't reply to NetBIOS over IP name service requests
    # or participate in the browsing protocols which make up the Windows
    # “Network Neighborhood” view.
-    enableNmbd = false;
+    samba.enableNmbd = false;
    # Disable Samba’s winbindd, which provides a number of services to the Name
    # Service Switch capability found in most modern C libraries, to arbitrary
    # applications via PAM and ntlm_auth and to Samba itself.
-    enableWinbindd = false;
+    winbindd.enable = false;
    # https://www.samba.org/samba/docs/current/man-html/smb.conf.5.html
    extraConfig = ''
      # Only allow local access. This should also be enforced by the firewall.
@ -43,7 +43,7 @@
      # Allow Windows clients to run .exe's
      acl allow execute always = True
    '';
-    shares = {
+    services.samba.settings = {
      downloads = {
        path = "/srv/torrents/downloads";
        # Use the 'torrent' group for access for all users connecting
--- a/hosts/tor/default.nix
+++ b/hosts/tor/default.nix
@ -24,7 +24,7 @@
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
-  system.stateVersion = "24.05"; # Did you read the comment?
+  system.stateVersion = "24.11"; # Did you read the comment?

  # This value determines the Home Manager release that your
  # configuration is compatible with. This helps avoid breakage
@ -33,5 +33,5 @@
  # You can update Home Manager without changing this value. See
  # the Home Manager release notes for a list of state version
  # changes in each release.
-  home-manager.users.caspervk.home.stateVersion = "24.05"; # Did you read the comment?
+  home-manager.users.caspervk.home.stateVersion = "24.11"; # Did you read the comment?
 }
--- a/hosts/zeta/default.nix
+++ b/hosts/zeta/default.nix
@ -25,7 +25,7 @@
  # this value at the release version of the first install of this system.
  # Before changing this value read the documentation for this option
  # (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
-  system.stateVersion = "24.05"; # Did you read the comment?
+  system.stateVersion = "24.11"; # Did you read the comment?

  # This value determines the Home Manager release that your
  # configuration is compatible with. This helps avoid breakage
@ -34,5 +34,5 @@
  # You can update Home Manager without changing this value. See
  # the Home Manager release notes for a list of state version
  # changes in each release.
-  home-manager.users.caspervk.home.stateVersion = "24.05"; # Did you read the comment?
+  home-manager.users.caspervk.home.stateVersion = "24.11"; # Did you read the comment?
 }
--- a/modules/base/nix.nix
+++ b/modules/base/nix.nix
@ -28,7 +28,7 @@
      auto-optimise-store = true;

      # Enable flakes
-      experimental-features = ["nix-command" "flakes" "repl-flake"];
+      experimental-features = ["nix-command" "flakes"];

      # Timeout connections to the binary cache instead of waiting forever
      connect-timeout = 5;
--- a/modules/desktop/docker.nix
+++ b/modules/desktop/docker.nix
@ -7,9 +7,6 @@
    enable = true;
    # Automatically `docker system prune` weekly
    autoPrune.enable = true;
-    # Fix waiting for docker containers to exit on shutdown/reboot
-    # https://discourse.nixos.org/t/docker-hanging-on-reboot/18270/4
-    liveRestore = false;
  };

  # Being a member of the docker group is effectively equivalent to being root,
--- a/modules/desktop/foot.nix
+++ b/modules/desktop/foot.nix
@ -1,55 +1,53 @@
-{home-manager, ...}: {
+{...}: {
  # Terminal emulator
  # https://codeberg.org/dnkl/foot
-  home-manager.users.caspervk = {
-    programs.foot = {
-      enable = true;
-      # https://man.archlinux.org/man/foot.ini.5.en
-      settings = {
-        main = {
-          font = "monospace:size=10.25";
-          letter-spacing = "1";
-        };
-        scrollback = {
-          lines = 10000;
-        };
-        colors = {
-          # https://alacritty.org/config-alacritty.html
-          foreground = "d8d8d8";
-          background = "181818";
-          regular0 = "181818"; # black
-          regular1 = "ac4242"; # red
-          regular2 = "90a959"; # green
-          regular3 = "f4bf75"; # yellow
-          regular4 = "6a9fb5"; # blue
-          regular5 = "aa759f"; # magenta
-          regular6 = "75b5aa"; # cyan
-          regular7 = "d8d8d8"; # white
-          bright0 = "6b6b6b"; # black
-          bright1 = "c55555"; # red
-          bright2 = "aac474"; # green
-          bright3 = "feca88"; # yellow
-          bright4 = "82b8c8"; # blue
-          bright5 = "c28cb8"; # magenta
-          bright6 = "93d3c3"; # cyan
-          bright7 = "f8f8f8"; # white
-          dim0 = "0f0f0f"; # black
-          dim1 = "712b2b"; # red
-          dim2 = "5f6f3a"; # green
-          dim3 = "a17e4d"; # yellow
-          dim4 = "456877"; # blue
-          dim5 = "704d68"; # magenta
-          dim6 = "4d7770"; # cyan
-          dim7 = "8e8e8e"; # white
-        };
-        key-bindings = {
-          # HOW is this not the default?
-          scrollback-home = "Shift+Home";
-          scrollback-end = "Shift+End";
-          # Pipe last command's output to the clipboard. Requires fish
-          # integration, configured in modules/base/fish.nix.
-          pipe-command-output = "[wl-copy] Control+Shift+g";
-        };
+  programs.foot = {
+    enable = true;
+    # https://man.archlinux.org/man/foot.ini.5.en
+    settings = {
+      main = {
+        font = "monospace:size=10.25";
+        letter-spacing = "1";
+      };
+      scrollback = {
+        lines = 10000;
+      };
+      colors = {
+        # https://alacritty.org/config-alacritty.html
+        foreground = "d8d8d8";
+        background = "181818";
+        regular0 = "181818"; # black
+        regular1 = "ac4242"; # red
+        regular2 = "90a959"; # green
+        regular3 = "f4bf75"; # yellow
+        regular4 = "6a9fb5"; # blue
+        regular5 = "aa759f"; # magenta
+        regular6 = "75b5aa"; # cyan
+        regular7 = "d8d8d8"; # white
+        bright0 = "6b6b6b"; # black
+        bright1 = "c55555"; # red
+        bright2 = "aac474"; # green
+        bright3 = "feca88"; # yellow
+        bright4 = "82b8c8"; # blue
+        bright5 = "c28cb8"; # magenta
+        bright6 = "93d3c3"; # cyan
+        bright7 = "f8f8f8"; # white
+        dim0 = "0f0f0f"; # black
+        dim1 = "712b2b"; # red
+        dim2 = "5f6f3a"; # green
+        dim3 = "a17e4d"; # yellow
+        dim4 = "456877"; # blue
+        dim5 = "704d68"; # magenta
+        dim6 = "4d7770"; # cyan
+        dim7 = "8e8e8e"; # white
+      };
+      key-bindings = {
+        # HOW is this not the default?
+        scrollback-home = "Shift+Home";
+        scrollback-end = "Shift+End";
+        # Pipe last command's output to the clipboard. Requires fish
+        # integration, configured in modules/base/fish.nix.
+        pipe-command-output = "[wl-copy] Control+Shift+g";
      };
    };
  };
--- a/modules/desktop/programs.nix
+++ b/modules/desktop/programs.nix
@ -1,7 +1,5 @@
 {
-  home-manager,
  lib,
-  nixpkgs,
  pkgs,
  ...
 }: {
@ -13,7 +11,6 @@
    aspellDicts.da
    aspellDicts.en
    aspellDicts.en-computers
-    aspellDicts.en-science
    black
    element-desktop
    firefox-wayland
@ -50,16 +47,12 @@
      "steam"
      "steam-original"
      "steam-run"
+      "steam-unwrapped"
      "terraform"
    ];

  home-manager.users.caspervk = {
    home.sessionVariables = {
-      # The firefox-wayland package works with wayland without any further
-      # configuration, but tor-browser doesn't.
-      # TODO: remove when tor browser is based on firefox v121.
-      # https://www.mozilla.org/en-US/firefox/121.0/releasenotes/
-      MOZ_ENABLE_WAYLAND = 1;
      # https://wiki.archlinux.org/title/Sway#Java_applications
      _JAVA_AWT_WM_NONREPARENTING = 1;
      # https://wiki.nixos.org/wiki/Wayland
--- a/modules/desktop/sway.nix
+++ b/modules/desktop/sway.nix
@ -279,7 +279,6 @@
    home.pointerCursor = {
      package = pkgs.catppuccin-cursors.latteLight;
      name = "catppuccin-latte-light-cursors";
-      size = 24;
      gtk.enable = true;
      x11.enable = true;
    };