all: welcome to 23.05

hosts/box/configuration.nix

@@ -20,7 +20,6 @@
   boot.loader.grub = {
     enable = true;
     device = "nodev";
-    version = 2;
     efiSupport = true;
     enableCryptodisk = true;
     efiInstallAsRemovable = true;
@@ -86,9 +85,6 @@
   networking.useDHCP = false;
   networking.interfaces.wlp3s0.useDHCP = true;
 
-  # Set your time zone.
-  time.timeZone = "Australia/Brisbane";
-
   # Enable the OpenSSH daemon.
   services.openssh.enable = true;
   networking.firewall.allowedTCPPorts = [ 22 ];

hosts/cube/configuration.nix

@@ -8,11 +8,9 @@
     ];
 
   boot.loader.grub.enable = true;
-  boot.loader.grub.version = 2;
   boot.loader.grub.device = "/dev/vda"; # or "nodev" for efi only
 
   networking.hostName = "cube"; # Define your hostname.
-  time.timeZone = "Australia/Brisbane";
 
   networking.useDHCP = false;
   networking.interfaces.ens3.useDHCP = true;

hosts/curve/configuration.nix

@@ -1,7 +1,6 @@
 {
   imports = [ ./hardware-configuration.nix ];
   boot.loader.grub.enable = true;
-  boot.loader.grub.version = 2;
   # Define on which hard drive you want to install Grub.
   boot.loader.grub.device = "/dev/sda"; # or "nodev" for efi only
 
@@ -28,8 +27,6 @@
   networking.hostName = "curve";
   #networking.wireless.enable = true;  # Enables wireless support via wpa_supplicant.
 
-  time.timeZone = "Australia/Brisbane";
-
   # Select internationalisation properties.
   i18n.defaultLocale = "en_US.UTF-8";
   # console = {

hosts/helix/configuration.nix

@@ -8,7 +8,6 @@
 
   # Use the GRUB 2 boot loader.
   boot.loader.grub.enable = true;
-  boot.loader.grub.version = 2;
   boot.loader.grub.device = "/dev/vda"; # or "nodev" for efi only
 
   networking.hostName = "helix"; # Define your hostname.
@@ -22,8 +21,6 @@
 
   # Enable the OpenSSH daemon.
   services.openssh.enable = true;
-  services.openssh.passwordAuthentication = false;
-  services.openssh.permitRootLogin = "no";
   sound.enable = false;
 
   # Define a user account. Don't forget to set a password with ‘passwd’.

hosts/lituus/configuration.nix

@@ -8,7 +8,6 @@
 
   # Use the GRUB 2 boot loader.
   boot.loader.grub.enable = true;
-  boot.loader.grub.version = 2;
   boot.loader.grub.device = "/dev/vda"; # or "nodev" for efi only
 
   networking.hostName = "lituus"; # Define your hostname.

hosts/profiles/core/default.nix

@@ -42,6 +42,8 @@ in
     openFirewall = lib.mkDefault false;
   };
 
+  time.timeZone = "Canada/Pacific";
+
   # programs.gnupg.agent.enable = true;
   # programs.gnupg.agent.pinentryFlavor = "curses";
 

hosts/profiles/desktop/default.nix

@@ -44,6 +44,7 @@ in
       packages = [ pkgs.dconf ];
     };
   };
+  programs.dconf.enable = true;
 
   security.pam.services.Default.enableGnomeKeyring = true;
   security.pam.services.Login.enableGnomeKeyring = true;
@@ -63,7 +64,7 @@ in
   environment.systemPackages = with pkgs; [
     unstable.sublime-music
     unstable.nheko
-    unstable.tootle
+    unstable.tuba
     unstable.newsflash
     unstable.liferea
 

hosts/profiles/gitea/default.nix

@@ -6,16 +6,18 @@
 
   services.gitea = {
     enable = true;
-    package = pkgs.unstable.forgejo;
+    package = pkgs.forgejo;
     appName = "Sealight Git Forge";
-    domain = "git.sealight.xyz";
-    rootUrl = "https://git.sealight.xyz";
-    httpPort = 3001;
     database = {
       type = "postgres";
       passwordFile = "/run/agenix/gitea-dbpass";
     };
     settings = {
+      server = {
+        DOMAIN = "git.sealight.xyz";
+        ROOT_URL = "https://git.sealight.xyz";
+        HTTP_PORT = 3001;
+      };
       metrics = {
         ENABLED = true;
       };

hosts/profiles/gonic/default.nix

@@ -1,12 +1,12 @@
 { config, lib, pkgs, ... }:
 {
-  services.gonic.enable = true;
-  services.gonic.settings = ''
+  mossnet.gonic.enable = true;
+  mossnet.gonic.settings = ''
     music-path /mnt/two/music/
     podcast-path /data/podcasts
     cache-path /data/cache
   '';
-  services.gonic.group = "audio";
-  services.gonic.user = "headphones";
+  mossnet.gonic.user = "headphones";
+  mossnet.gonic.group = "audio";
   networking.firewall.allowedTCPPorts = [ 4747 ];
 }

hosts/profiles/kuberenetes/default.nix

@@ -3,9 +3,9 @@
 {
   # k3s
   networking.firewall.allowedTCPPorts = [ 6443 ];
-  services.k3s.enable = false;
+  services.k3s.enable = true;
   services.k3s.role = "server";
-  services.k3s.clusterInit = true;
+  services.k3s.clusterInit = false;
   # services.k3s.extraFlags = toString [
   #   "--kubelet-arg=v=4" # Optionally add additional args to k3s
   # ];

hosts/profiles/monitoring/default.nix

@@ -37,9 +37,10 @@
       ensureUsers = [{
         name = "grafana";
         ensurePermissions = {
-          "DATABASE wallabag" = "SELECT";
-          "DATABASE ulogger" = "SELECT";
-          "DATABASE photoprism" = "SELECT";
+          "ALL TABLES IN SCHEMA public" = "SELECT";
+          "DATABASE wallabag" = "CONNECT";
+          "DATABASE ulogger" = "CONNECT";
+          "DATABASE photoprism" = "CONNECT";
         };
       }];
     };

hosts/profiles/music/default.nix

@@ -39,13 +39,14 @@
     alsa.support32Bit = true;
     pulse.enable = true;
     jack.enable = true;
-    config = {
-      pipewire."context.properties"."default.clock.rate" = "48000";
-      pipewire-pulse."stream.properties"."resample.quality" = 15;
-      client."stream.properties"."resample.quality" = 15;
-      client-rt."stream.properties"."resample.quality" = 15;
-      #jack."context.modules" = [];
-    };
+    # Deprecated as of 23.05
+    # config = {
+    #   pipewire."context.properties"."default.clock.rate" = "48000";
+    #   pipewire-pulse."stream.properties"."resample.quality" = 15;
+    #   client."stream.properties"."resample.quality" = 15;
+    #   client-rt."stream.properties"."resample.quality" = 15;
+    #   #jack."context.modules" = [];
+    # };
     #media-session.config.bluez-monitor.properties = {
     #  "bluez5.headset-roles" = [ "hsp_hs" "hsp_ag" ];
     #  "bluez5.codecs" = [ "aac" "ldac" "aptx_hd" ];

hosts/profiles/server/default.nix

@@ -2,8 +2,8 @@
 {
   services.openssh = {
     enable = true;
-    passwordAuthentication = false;
-    permitRootLogin = "no";
+    settings.PasswordAuthentication = false;
+    settings.PermitRootLogin = "no";
   };
   networking.firewall.allowedTCPPorts = [ 80 443 22 ]; # ssh and website
   security.sudo.wheelNeedsPassword = false; # needed for deploy-rs

hosts/users/anish/default.nix

@@ -1,6 +1,7 @@
 { pkgs, ... }:
 
 {
+  programs.zsh.enable = true;
   users.users.anish = {
     description = "Personal user for Anish";
     hashedPassword = "$y$j9T$y3DPt/dWaPE.gRazQqw1w0$1RMH5sl/Nu8kW3ZMywYCPRniHD/jF5qRh0VKrdJ.bV2";