Weekly flake update: 2026-03-27 11:35 UTC

config/base.nix

@@ -71,14 +71,6 @@
   nixpkgs.config = {
     allowUnfree = true;
     allowUnfreePredicate = pkg: builtins.elem (lib.getName pkg) [ "corefonts" ];
-    permittedInsecurePackages = [
-      "aspnetcore-runtime-wrapped-6.0.36"
-      "aspnetcore-runtime-6.0.36"
-      "dotnet-runtime-6.0.36"
-      "dotnet-sdk-wrapped-6.0.428"
-      "dotnet-sdk-6.0.428"
-      "mbedtls-2.28.10"
-    ];
   };
   nix = {
     nixPath = [ "nixpkgs=${inputs.nixpkgs}" ];

flake.lock

@@ -503,11 +503,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1774274588,
-        "narHash": "sha256-dnHvv5EMUgTzGZmA+3diYjQU2O6BEpGLEOgJ1Qe9LaY=",
+        "lastModified": 1774559029,
+        "narHash": "sha256-deix7yg3j6AhjMPnFDCmWB3f83LsajaaULP5HH2j34k=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "cf9686ba26f5ef788226843bc31fda4cf72e373b",
+        "rev": "a0bb0d11514f92b639514220114ac8063c72d0a3",
         "type": "github"
       },
       "original": {
@@ -594,11 +594,11 @@
         "xdph": "xdph"
       },
       "locked": {
-        "lastModified": 1774270522,
-        "narHash": "sha256-v3+29zRU210u9LB4eDc4iLE9+jN4xsRgmZKyOjufoaw=",
+        "lastModified": 1774561136,
+        "narHash": "sha256-R/PNW48UnEwUIUr9QXMT6KY/laufI4ikiz7Druxpglg=",
         "owner": "hyprwm",
         "repo": "Hyprland",
-        "rev": "64a2e4e26388f017fd9198a6d70424f1f251a5a0",
+        "rev": "2fde538e0fa5663ac99f631fcfee6742e09368f6",
         "type": "github"
       },
       "original": {
@@ -888,11 +888,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1774233978,
-        "narHash": "sha256-rT9wnIfbI1gjl0gq4nN8/5ZvFWn+K6QLwlyy6Gx8FDc=",
+        "lastModified": 1774579928,
+        "narHash": "sha256-HgDoK1Z1koMnEf1aX2FK02xwHmKsOmVR6dGhJOFZA9Y=",
         "owner": "fufexan",
         "repo": "nix-gaming",
-        "rev": "4a583dd427ccf7d912282909a2702a6a547d8560",
+        "rev": "34f157cab59fc5fec17f7cef7a0f563d303b3fc9",
         "type": "github"
       },
       "original": {
@@ -967,11 +967,11 @@
     },
     "nixpkgs-small": {
       "locked": {
-        "lastModified": 1774244481,
-        "narHash": "sha256-4XfMXU0DjN83o6HWZoKG9PegCvKvIhNUnRUI19vzTcQ=",
+        "lastModified": 1774514157,
+        "narHash": "sha256-lwwrvZUpnuZDlVUAq2PyOoVAqtaNtwlzN3je5rU0Kk0=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "4590696c8693fea477850fe379a01544293ca4e2",
+        "rev": "a593dd828e01ff1d2cac72f1b8ff7006ea26f1c5",
         "type": "github"
       },
       "original": {
@@ -983,11 +983,11 @@
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1774106199,
-        "narHash": "sha256-US5Tda2sKmjrg2lNHQL3jRQ6p96cgfWh3J1QBliQ8Ws=",
+        "lastModified": 1774386573,
+        "narHash": "sha256-4hAV26quOxdC6iyG7kYaZcM3VOskcPUrdCQd/nx8obc=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "6c9a78c09ff4d6c21d0319114873508a6ec01655",
+        "rev": "46db2e09e1d3f113a13c0d7b81e2f221c63b8ce9",
         "type": "github"
       },
       "original": {
@@ -999,11 +999,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1774244481,
-        "narHash": "sha256-4XfMXU0DjN83o6HWZoKG9PegCvKvIhNUnRUI19vzTcQ=",
+        "lastModified": 1774388614,
+        "narHash": "sha256-tFwzTI0DdDzovdE9+Ras6CUss0yn8P9XV4Ja6RjA+nU=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "4590696c8693fea477850fe379a01544293ca4e2",
+        "rev": "1073dad219cb244572b74da2b20c7fe39cb3fa9e",
         "type": "github"
       },
       "original": {
@@ -1042,11 +1042,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1774302711,
-        "narHash": "sha256-TmcR/PV0pf2vrAC7JtmINZTAEG6PpCs2vOIp5FQEEY0=",
+        "lastModified": 1774602479,
+        "narHash": "sha256-kNKE7ipfCTNSApWzDMvOWcrM/+EFdztUyb3Czr8pThI=",
         "owner": "nix-community",
         "repo": "nur",
-        "rev": "7a80aff234248c25617f875d0a3e64f39080e536",
+        "rev": "b0f07268a8d1f633b4514a9c6c0814f3a4f7d229",
         "type": "github"
       },
       "original": {

hosts/miniserver/configuration.nix

@@ -31,7 +31,6 @@
       (buildMachine "workstation" 8 40)
       (buildMachine "server" 6 17)
     ];
-  nixpkgs.config.permittedInsecurePackages = [ "openssl-1.1.1w" ];
   networking = {
     hostName = "miniserver";
     firewall = {

hosts/server/configuration.nix

@@ -48,6 +48,7 @@ in
       supportedFeatures = config.my.nix.features;
     }
   ];
+  nixpkgs.config.permittedInsecurePackages = [ "mbedtls-2.28.10" ];
   sops.secrets = {
     "server/private" = lib.mkIf config.my.secureHost {
       sopsFile = ../../secrets/wireguard.yaml;

modules/servers/nextcloud.nix

@@ -49,10 +49,6 @@ in
         owner = config.users.users.nextcloud.name;
         inherit (config.users.users.nextcloud) group;
       };
-      nixpkgs.config.permittedInsecurePackages = [
-        "nodejs-14.21.3"
-        "openssl-1.1.1v"
-      ];
       users = {
         groups.nextcloud = {
           inherit gid;

modules/servers/paperless.nix

@@ -24,7 +24,7 @@ in
       settings = {
         PAPERLESS_ACCOUNT_DEFAULT_HTTP_PROTOCOL = "http";
         PAPERLESS_URL = "http://${config.my.ips.server}:${builtins.toString port}";
-        PAPERLESS_DBENGINE = "postgress";
+        PAPERLESS_DBENGINE = "postgresql";
         PAPERLESS_DBNAME = "paperless";
         PAPERLESS_DBHOST = config.my.postgresSocket;
         PAPERLESS_TIME_ZONE = config.my.timeZone;