chore: uniformize on the same nixpkgs...

.gitea/workflows/demo.yaml

@@ -0,0 +1,19 @@
+name: Gitea Actions Demo
+run-name: ${{ gitea.actor }} is testing out Gitea Actions 🚀
+on: [push]
+
+jobs:
+  Explore-Gitea-Actions:
+    runs-on: native
+    steps:
+      - run: echo "🎉 The job was automatically triggered by a ${{ gitea.event_name }} event."
+      - run: echo "🐧 This job is now running on a ${{ runner.os }} server hosted by Gitea!"
+      - run: echo "🔎 The name of your branch is ${{ gitea.ref }} and your repository is ${{ gitea.repository }}."
+      - name: Check out repository code
+        uses: actions/checkout@v4
+      - run: echo "💡 The ${{ gitea.repository }} repository has been cloned to the runner."
+      - run: echo "🖥️ The workflow is now ready to test your code on the runner."
+      - name: List files in the repository
+        run: |
+          ls ${{ gitea.workspace }}
+      - run: echo "🍏 This job's status is ${{ job.status }}."

config/git-gitea.nix

@@ -40,6 +40,8 @@
         gnused
         wget
         devenv
+        nodejs
+        nix
       ];
       labels = [
         "native:host"

containers/git.nix

@@ -19,6 +19,12 @@ in
       importConfig = [
         ../config/git-gitea.nix
       ];
+      additional = {
+        nix.extraOptions = ''
+          extra-substituters = https://devenv.cachix.org https://nixpkgs-python.cachix.org
+          extra-trusted-public-keys = devenv.cachix.org-1:w1cLUi8dv3hnoSPGAuibQv+f9TZLr6cv/Hm9XgU50cw= nixpkgs-python.cachix.org-1:hxjI7pFxTyuTHn2NkvWCrAUcNZLNS3ZAvfYNuYifcEU=
+        '';
+      };
     };
     logging = {
       enable = true;

flake.lock

@@ -109,7 +109,9 @@
         "flake-parts": "flake-parts_2",
         "git-hooks": "git-hooks",
         "nix": "nix",
-        "nixpkgs": "nixpkgs"
+        "nixpkgs": [
+          "nixpkgs"
+        ]
       },
       "locked": {
         "lastModified": 1766415291,
@@ -259,7 +261,9 @@
     "generators": {
       "inputs": {
         "nixlib": "nixlib",
-        "nixpkgs": "nixpkgs_2"
+        "nixpkgs": [
+          "nixpkgs"
+        ]
       },
       "locked": {
         "lastModified": 1764234087,
@@ -427,17 +431,17 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1761313199,
+        "lastModified": 1766309749,
-        "narHash": "sha256-wCIACXbNtXAlwvQUo1Ed++loFALPjYUA3dpcUJiXO44=",
+        "narHash": "sha256-3xY8CZ4rSnQ0NqGhMKAy5vgC+2IVK0NoVEzDoOh4DA4=",
-        "owner": "cachix",
+        "owner": "NixOS",
-        "repo": "devenv-nixpkgs",
+        "repo": "nixpkgs",
-        "rev": "d1c30452ebecfc55185ae6d1c983c09da0c274ff",
+        "rev": "a6531044f6d0bef691ea18d4d4ce44d0daa6e816",
         "type": "github"
       },
       "original": {
-        "owner": "cachix",
+        "owner": "NixOS",
-        "ref": "rolling",
+        "ref": "nixos-unstable",
-        "repo": "devenv-nixpkgs",
+        "repo": "nixpkgs",
         "type": "github"
       }
     },
@@ -456,53 +460,6 @@
         "type": "github"
       }
     },
-    "nixpkgs_2": {
-      "locked": {
-        "lastModified": 1736657626,
-        "narHash": "sha256-FWlPMUzp0lkQBdhKlPqtQdqmp+/C+1MBiEytaYfrCTY=",
-        "owner": "NixOS",
-        "repo": "nixpkgs",
-        "rev": "2f9e2f85cb14a46410a1399aa9ea7ecf433e422e",
-        "type": "github"
-      },
-      "original": {
-        "owner": "NixOS",
-        "ref": "nixpkgs-unstable",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
-    "nixpkgs_3": {
-      "locked": {
-        "lastModified": 1766309749,
-        "narHash": "sha256-3xY8CZ4rSnQ0NqGhMKAy5vgC+2IVK0NoVEzDoOh4DA4=",
-        "owner": "NixOS",
-        "repo": "nixpkgs",
-        "rev": "a6531044f6d0bef691ea18d4d4ce44d0daa6e816",
-        "type": "github"
-      },
-      "original": {
-        "owner": "NixOS",
-        "ref": "nixos-unstable",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
-    "nixpkgs_4": {
-      "locked": {
-        "lastModified": 1728956102,
-        "narHash": "sha256-J8zo+UYNjHATsxn2/ROl8iaji2RgLm+sG7b3VcD36YM=",
-        "owner": "nixos",
-        "repo": "nixpkgs",
-        "rev": "3d85bae2431f20ab1ac5cf14d03d314dffe629af",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nixos",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
     "pyproject-build-systems": {
       "inputs": {
         "nixpkgs": [
@@ -560,7 +517,7 @@
         "devenv": "devenv",
         "flake-utils": "flake-utils_2",
         "generators": "generators",
-        "nixpkgs": "nixpkgs_3",
+        "nixpkgs": "nixpkgs",
         "terranix": "terranix"
       }
     },
@@ -627,7 +584,9 @@
     "terranix": {
       "inputs": {
         "flake-parts": "flake-parts_3",
-        "nixpkgs": "nixpkgs_4",
+        "nixpkgs": [
+          "nixpkgs"
+        ],
         "systems": "systems_4"
       },
       "locked": {

flake.nix

@@ -3,10 +3,22 @@
 
   inputs = {
     nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
-    flake-utils.url = "github:numtide/flake-utils";
+    flake-utils = {
-    generators.url = "github:nix-community/nixos-generators";
+      url = "github:numtide/flake-utils";
-    terranix.url = "github:terranix/terranix";
+      inputs.nixpkgs.follows = "nixpkgs";
-    devenv.url = "github:cachix/devenv";
+    };
+    generators = {
+      url = "github:nix-community/nixos-generators";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+    terranix = {
+      url = "github:terranix/terranix";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+    devenv = {
+      url = "github:cachix/devenv";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
     authentik-nix = {
       url = "github:nix-community/authentik-nix";
       inputs.nixpkgs.follows = "nixpkgs";

secrets/finances-app-key.age

@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 jxhkLg 3JBT4nbdrVBOYUXUINRYt8YGh8sqZZat7LzcJhYGLn8
+-> ssh-ed25519 jxhkLg siu1onWEkn06ZdVB5qkuOrlk+Fsr2SQ10s0ud2HsP3w
-TYo+mrMoJ72hNCKk1QwBolkfHrZLcPJ+qJCduEiSLoc
+UYkuj+XhDYUQWuMClqdc26n6xNLphhtpC1iNjigkb6U
--> ssh-ed25519 tqMvRA H+iE9AvWXZnP5U087KHF2sJqL//mrK5SuY/eBWwDviY
+-> ssh-ed25519 tqMvRA aR3BkyZt48dG6yl726hO1JmaYkazCOXR+QXnCH0GFFs
-JmWUSP/U10rTGU5YvkkhRnRzigt+uDfqxR7nRGu9TCg
+qMQG5Z69K3H5mY5V/IW+HnsUV4b34p/qFv0b+UFzOog
--> ssh-ed25519 UJuwpQ ReTDlCdRvWMnHbs54wTI7Ff9mZo5YaW0DTSSqQqOmQM
+-> ssh-ed25519 UJuwpQ 7juQeBBVw4rudAhL7tpw8hGp7TIbwMpy7QNLA5zUYFw
-xnPxNJG3GgIyWhoFU/ahTovsXeQt+tGBvs5ih0pZfPA
+Eycs/SIKthKAu64fPIuDhecrPo1txnivIyogcKcshT4
---- yWpDZ8BN12xrmh3vLx2D85cgTXLDp3KM+X/vFC2YsPU
+--- LhRKIUY4H5qQXnROC06jy/K1eS3q4+6H0NQhI03WFwM
-âfêqIxí‹ÍÜØ2›\g€¹IMÄGs@ <œ
çŸÀ>#=<!z!9®ÁXv»‰Ô´ÍðÃ7/¡ó£šáÁÜ«á?övÕæÑ1/-†Ç
+W2˜Uʺ;L<>p1n½'®¥,dkUØÏ;YQìªmÇ<6D>Ê”tÖ<74>1æ¶Ú™ë<E284A2>¢«œ?Á
/áì}ñW}„Ï—‡lâ_Þ?טç›èð"B™
7­¢

secrets/gitea-action-token.age

@@ -1,11 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 jxhkLg 6rjc6L3cw266S8ZB3dfWdi7ZbUJvUVDQxaI8wZ6sE2U
+-> ssh-ed25519 jxhkLg +nJfyxntIaggZaWMizEypE0ll5yfe0k5DqHeMmQBxRU
-6HjbTKYkGcZCCl9ZqDP14PRAboJqjZTJnR4ospWNsfs
+TIYZaF/gT00Z9EjBWq6cr6vJr35c+dHOR9guLKzm680
--> ssh-ed25519 tqMvRA itOaWaglrbLptCsjsXiE/zpKciB2Ok9niyUaa/OR7X0
+-> ssh-ed25519 tqMvRA 6P23pOjZiB0TGsG9oM6NWK8IwranIHEPk74uScEWvV4
-K56nAwMZH5mEDbO/xDT/XGFVMcpfcVQQXDowu9w4XEY
+lUE7CH4hHe9oJU3Fw8Dley81XWfkUWMNRwdq6JJLSFc
--> ssh-ed25519 FOCPAw 1aLbv8OtZ+INUfm1gR/m3zHEquktbYwHxLiEJMq5Dy0
+-> ssh-ed25519 UpdoSw Uuc0b1ogxc6kYMvYoV4foVV+Fx8YQWTBqeM6KsDfiDs
-AW6y+/iFaNtKmH7q4Y54maV0ej1avW0AZtOhsuC65+0
+4L1kpqir9owTX09913E2GLPQJBkdegwm53H87yl/WDY
---- YiaHJcgQ502Cy9PWLeEbwJN5AN5srB3ED/KYbxJ53xw
+--- UGe/Omeq2jrrSCXr9qjdEhhNE6Ir/d3q/gEesJ+cjgM
-&µ‚¡ã
+æš‹€HØÍÁ-$*jâ pƒîw<C3AE>œ€ía¨<61>`uÞ®_W9D¾®#ÀÖ©®<C2A9>-”Äz<µêM+þ›¾Ïÿ‹òVï$·»<C2B7>`«ÐüÜA¦)
-JR'«ÿVé-JÚMŸ=´~'[ÞJ ©
-q´û ôUõí§÷ÙÓÌ#U×jþ†’Ou0m…S¯ËûhQÛ$w29É­Ç

secrets/metrics-pve.age

@@ -1,9 +1,10 @@
 age-encryption.org/v1
--> ssh-ed25519 jxhkLg pZQSx8rPC75lbv07ARhHQ3gFQoE6g/KyC55fUBcgvG4
+-> ssh-ed25519 jxhkLg uJnDmE99mLaYH9pL+eHhoY8U0PHOz5ISj2fF8N0HCwY
-H1XAoyHg8aL+hYUqa2+DXIfQ4h3AbCtoOvOiJPaAVGg
++Nuk+39ZVdDVfypo5zPItI51Ep0ztYBVGEshYe4oJJk
--> ssh-ed25519 tqMvRA N3VmUrv5UCBrN+/SAFAdwKtj8hDsk5tm9RIDjyuPPic
+-> ssh-ed25519 tqMvRA 9A79nIinxtnfDR5IqU1DpFMLEmgD1ukquSQwy9xrgQw
-RWeO0gPtm22Q6+tDsAUCldifLmdW9FBTp7zl+Bi2v7k
+HvytTNHUPMCF/SrLu1GIMqAihmSnKGeXWU3XQbOEVTo
--> ssh-ed25519 hKRBdw R1ZLmNRfT5M4Nifn1UlACanK8HaXPxuX066G7tdlqCI
+-> ssh-ed25519 hKRBdw 1the4xRyYnb/JkSwhgx3ToUNfHdDJ529oBJQD/h2+wI
-DHCZj83+hKgBDkW2TZGhDmiTbkmo0QBH0BFXAdbwezs
+newJdp5+Q8ktGgCM4ismTRzAM9Fb8pbiIM6CmHcFZ4U
---- etcWgfzdqW9DypBbNy9YS+qROSxsznubGtYveUJzHE4
+--- EGRZ1p0FNtLwNsUz4HMmqVwg8RTvJGxRyTMlyraVubQ
-ísA[7a}´F’^öŒ°7nX“‘S70é~ö+<2B>éÛì¦h‹Ü.Ã6‹üÚ$¬R%—ˆV%ÿï8
»”·fp4~¬U鎉Â<E280B0>]É^÷ÚA—Ž×þI®V;dÛË<óY¬D£<6KMŠþ„:PY€<0F>-w‹§%÷
+ÆÛ²r¾À<EFBFBD>72Ï“£›†;k¦Ñm"›xxRQ;ø©%ÈZâIÙÈD*W߯o
+PÑHðÞ¿œÇϵvuS)<29>BÏÚ<C38F>NX¬ötBÈ	´[åäž2ö¿«}Ì

secrets/mqtt-exporter-environment.age

@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 jxhkLg oqT/hLbJ4tHt3GyEUwK0kPGqQNh0cu3YsSEFYNF3bG0
+-> ssh-ed25519 jxhkLg FSTFFz4Mm+x7AxDxwbxj+/lMb4Fkv+iZsyH2OEzSFUk
-gcJGPB9CZAputqkjA0UnRhDbKvsfibhjPKpnBDAZXzQ
+SSjo0GgqU6pvGHc0x1pF4SmYhsU6U2oPd7Y5gzJ0ymQ
--> ssh-ed25519 tqMvRA 7KPFjFLLfl/GHiCzeDhar9k6fJWVE77kCMHFVmNejUQ
+-> ssh-ed25519 tqMvRA GAnhEWv/rQUTFEkXpB6SwdTrDRYC2Qt779bOgmbgGH0
-KNg74PAk25e86ccLrSVTkw5e//eOGgdL2QowacgFAeM
+SYQNpeGfl2Tm3BMujTa7zSldKy2KgEtwERa4LPS6Yz0
--> ssh-ed25519 5VK9ng PHLPIOzTQX9cQlnuk9cdhtteWhf2iHF3tYlxtl+L9BM
+-> ssh-ed25519 5VK9ng ODLHF2pTlRAxAbenhcu8DOMek585/+DELiQLNbS5rxE
-0P+Df+M5Qa8PGmcsCprP9TqInRoUrq1N54IBIf92bsQ
+LGrDab6vZUfN3aKtLGPEI9xtY97i2PDu8w0J+jMaMOQ
---- GefDSUxddbMiCx94NHP1Gco9iHnQuF7E3wyT1E6FBu0
+--- 6zu2BQaxC/wqbqVYThd47VBVTCbhn8/3CobsymC/4tY
-°*ámÒɶF«õ‹§3‰Ë)Üção6
»sè³ÇêíŸdŽµ;ãoÞ¶VÝqÐŽ5(7šö	a)Ÿ:F,0¿¬
+<EFBFBD>+Qo÷,nTú‰r ©hu‘^HüêûëÕGõ3W—}î}¥ø¾èŸVZåÎ’÷ˆ”íbEîÌá=ùXÐ

secrets/mqtt-password-frigate.age

@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 jxhkLg mxHJnoxwoHsZ8EGvOW968a1ZtcAe/dycqlLuDPC4k3Y
+-> ssh-ed25519 jxhkLg RWH08YdNHhsdgZ9YZrAWqu5huQgj14jkeqVjpuN+lyQ
-cuKt+V7KM0n4FPCbxsp1/QJUsC0UFRL87Nx3JVvOZY8
+lMFUOLayKFT/CFJObzv+iBCNtD50Zkut3V613VpAZlw
--> ssh-ed25519 tqMvRA 4X4n8CCreKfKeNboCtV/uBBHSL50fx+RnSfFq9Jzq2Y
+-> ssh-ed25519 tqMvRA bw7k2SUQgI/0VuBLFb9DCcIhkMOkfi6y/F48VmioR2c
-fuW8I4VhOlDG86PjKz8RPDX8CH/xhmHiYH1IVy1qqk4
+J13aDSFG4MsSbws6fvOgw1yMj1SKPCtwhDGCJuqM9G8
--> ssh-ed25519 5VK9ng efen1poRKjRcg14LAqPWjdxnVQSiUdxJv89jqsQLvWE
+-> ssh-ed25519 5VK9ng fy3OVO8F4TtYtht0S3V6OFeqsVgC/0g21VrNDrYJSUk
-5MEJUWF9oOuGkNqiqI+j+GIEF+MsHayW70d0GO57ZKI
+ahlR/jiWB/M4ZIoVkuyByM9Z6v9ILv4a7d7NnY2Sb+0
---- ZzCzhIPy2YMVY18MDCLdmHes5HMcthAN8zbzJ7HtZ4E
+--- q3dyXg0DIpWfmLsEeAtwvp7rjZ221mO9yU5jwiu9+FQ
-ŽzqN™›]XY±Îp‰åežoÉ‚ñ±¦i*Qœ›Ô1üP
+%/7oàKð“5%„Í™0áãÕìx[vdWNsjUáîøÛ?
/

secrets/mqtt-password-ha.age

@@ -1,9 +1,9 @@
 age-encryption.org/v1
--> ssh-ed25519 jxhkLg scQNigFhHkp1smpOIb3vlH9IlBYpEJLsAteksgjxyGo
+-> ssh-ed25519 jxhkLg JUUIovAr7FZ7vkhABo8YLAgxbpkr0O6uyCbxBPQADBE
-wGL+Jijs4pij0p1GTeyup8nlAmFY4IhDBEYb+A61Ffk
+0LbgfLtBhMyB9Orj0HK3ZjkPYoDuHqLlo0nsMiHSLpg
--> ssh-ed25519 tqMvRA hbn1sqr3Huu3IRir1WgxfmpS1bp7w19k+W+hoWTMaEE
+-> ssh-ed25519 tqMvRA pYB48098noHg4YlkbpYJv453TbpI3LwNhbjEpjrP0B0
-7sa7egzPSJMLkVOZA8nHuH41JhA4PBI3KmPoFrfidVw
+zHMsrI6CzIIOKSncU8fs99U1Qjn+sEaaAvnULYHlau4
--> ssh-ed25519 5VK9ng 3IA/fR+66AROsXwUkJuODM2Drf2ahQUOu4V0sT9iPVg
+-> ssh-ed25519 5VK9ng A1t9lgjd6de3R2MoLmq6W88GRWdPZUnFermr/+IniQc
-sn/RcT/G2glMN1qQURueH4nXd8w+pDNaF79kommL5AA
+SOLpjw/a5iVfE0jspqPfTsyS/Kiu3aSs+gmBsGWOwhk
---- z+bXy1kwyxHtqX50RVJNwNZaofUvd7eJlpO9+R9Lhos
+--- WjIuYWhSKjjrjH9f/uzDbM16kuDJ31U2Q2kGKLOIiNQ
-Ø<EFBFBD>·RmAig«<pŽOïÈ.¬Ê Ttø—dF-[?'ãþM<C3BE>ÍäˆÈ¹‚åˆ8
+ÚÛXºÆ’K© ,ðv2…e[ î’1[ö8>(ØJPݧ>åRò›@Ÿôµ®ÿ|ý	w