flake.lock

@@ -160,16 +160,16 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1718208800,
+        "lastModified": 1716361217,
-        "narHash": "sha256-US1tAChvPxT52RV8GksWZS415tTS7PV42KTc2PNDBmc=",
+        "narHash": "sha256-mzZDr00WUiUXVm1ujBVv6A0qRd8okaITyUp4ezYRgc4=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "cc54fb41d13736e92229c21627ea4f22199fee6b",
+        "rev": "46397778ef1f73414b03ed553a3368f0e7e33c2f",
         "type": "github"
       },
       "original": {
         "owner": "nixos",
-        "ref": "nixos-24.05",
+        "ref": "nixos-23.11",
         "repo": "nixpkgs",
         "type": "github"
       }

flake.nix

@@ -1,6 +1,6 @@
 {
   inputs = {
-    nixpkgs.url = "github:nixos/nixpkgs/nixos-24.05";
+    nixpkgs.url = "github:nixos/nixpkgs/nixos-23.11";
     nixpkgs-unstable.url = "github:nixos/nixpkgs/nixos-unstable";
     sops-nix.url = "github:Mic92/sops-nix";
     sops-nix.inputs.nixpkgs.follows = "nixpkgs";

hosts/tomate/configuration.nix

@@ -50,13 +50,13 @@
   services.xserver.enable = true;
 
   # Enable the KDE Plasma Desktop Environment.
-  services.displayManager.sddm.enable = true;
+  services.xserver.displayManager.sddm.enable = true;
   services.xserver.desktopManager.plasma5.enable = true;
 
   # Configure keymap in X11
   services.xserver = {
-    xkb.layout = "de";
+    layout = "de";
-    xkb.variant = "";
+    xkbVariant = "";
   };
 
   # Configure console keymap
@@ -90,7 +90,7 @@
 
   services.avahi = {
     enable = true;
-    nssmdns4 = true;
+    nssmdns = true;
     openFirewall = true;
     publish = {
       enable = true;

modules/core/bacula.nix

@@ -26,10 +26,7 @@
       mailcommand = "${pkgs.bacula}/bin/bsmtp -f \"Bacula <bacula@${config.networking.domain}>\" -s \"Bacula report" %r"
       mail = root+backup = all, !skipped
     '';
-    director."abel-dir" = {
+    director."abel-dir".password = "@${config.sops.secrets."bacula/password".path}";
-      password = "@${config.sops.secrets."bacula/password".path}";
-      tls.enable = false;
-    };
   };
   environment.etc."bacula/bconsole.conf".text = ''
     Director {

modules/core/base.nix

@@ -1,5 +1,6 @@
 { pkgs, config, ... }: {
   nix = {
+    package = pkgs.nixUnstable; # or versioned attributes like nix_2_4
     extraOptions = ''
       experimental-features = nix-command flakes
     '';

modules/mail/dovecot2.nix

@@ -100,7 +100,7 @@ in
     # set to satisfy the sieveScripts check, will be overridden by userdb lookups anyways
     mailUser = "vmail";
     mailGroup = "vmail";
-    sieve.scripts = {
+    sieveScripts = {
       before = pkgs.writeText "spam.sieve" ''
         require "fileinto";
 

modules/nextcloud.nix

@@ -30,7 +30,7 @@ in
       database.createLocally = true;
 
       # enable HEIC image preview
-      settings.enabledPreviewProviders = [
+      extraOptions.enabledPreviewProviders = [
         "OC\\Preview\\BMP"
         "OC\\Preview\\GIF"
         "OC\\Preview\\JPEG"

modules/web/ese.nix

@@ -5,7 +5,7 @@ let
 in
 {
   sops.secrets."directus_env" = { };
-  environment.systemPackages = [ pkgs.nodejs_22 ];
+  environment.systemPackages = [ pkgs.nodejs_21 ];
   virtualisation.oci-containers = {
     containers.directus-ese = {
       image = "directus/directus:latest";