fix acme-fixperms failing

Flake lock file updates:

• Updated input 'master':
    'github:NixOS/nixpkgs/5ae93f6f5ff16ca8f173c8b3a6ca5e9cc2ee7ac7?narHash=sha256-ceM2MamH8jGQohsllsiaiQSgNsl4u/Bl/CrYcJDqiTA%3D' (2025-01-26)
  → 'github:NixOS/nixpkgs/f4505608dbb00b3e4be2e6aca4654fcdeffac9db?narHash=sha256-1H7l7juo%2B2vKKTIct/aMri7xaYsmQuyRPRKC2zqgH2M%3D' (2025-01-27)
• Updated input 'nvim-flake':
    'github:Gerg-L/nvim-flake/1e32bf60f2ea33680822a2f3fafcc8f0921e2515?narHash=sha256-2FFHET5/R3/3SAu%2BSuhIpbOFf%2B5pIcvGrI6aoc1M30A%3D' (2025-01-26)
  → 'github:Gerg-L/nvim-flake/aeea8d1bc0e67b389734aab6a9953fc3c96c7817?narHash=sha256-rsl3k0YuvHxONb/r59qWizbU5k1YhRAwu%2BzuztRiXfM%3D' (2025-01-27)
• Updated input 'nvim-flake/neovim-nightly':
    'github:nix-community/neovim-nightly-overlay/8a11d160b76ea8dc76ac3356140010e38fef0ab5?narHash=sha256-fohNScp0mg8eUugIoqcLhy7tnUJ7CxhcVomizNqj5b8%3D' (2025-01-25)
  → 'github:nix-community/neovim-nightly-overlay/76c58ab72d04df8ba83357c2df3c2842371c8356?narHash=sha256-WM5sSMwECm3Q88yj79dIk8KfiXuwq1Q3GHO1DPGFIyE%3D' (2025-01-26)
• Updated input 'nvim-flake/neovim-nightly/neovim-src':
    'github:neovim/neovim/c6d2cbf8f51abfa0c9d244ef384a15b0b69e16c6?narHash=sha256-7bgefXUOc5AVXSZ4E%2B0YzJKW4c%2BtDj1ttmDoZN1BhPs%3D' (2025-01-24)
  → 'github:neovim/neovim/b8e947ed4ed04f9aeef471f579451bbf2bb2993d?narHash=sha256-HQQ9g1jbh2KcVXiubxBpTS8P%2BKgTMVFbGPgGnXYtTSI%3D' (2025-01-25)
• Updated input 'spicetify-nix':
    'github:Gerg-L/spicetify-nix/b65b84d6b8e9cd59af6524f05a1972fbe6fecce5?narHash=sha256-yQGyYTEDJreafvnHQvTvCHxmmqy77mrUyzJV1zr3XN0%3D' (2025-01-26)
  → 'github:Gerg-L/spicetify-nix/c54e245b9af38b432cb17cc918f3128c44abdf21?narHash=sha256-BSE7KclfVdQzu8SnYnFrgfGBWND6MqWZ7jW6mz%2BaySk%3D' (2025-01-27)
• Added input 'spicetify-nix/systems':
    'github:nix-systems/default/da67096a3b9bf56a91d16901293e51ba5b49a27e?narHash=sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768%3D' (2023-04-09)
• Updated input 'stable':
    'github:NixOS/nixpkgs/035f8c0853c2977b24ffc4d0a42c74f00b182cd8?narHash=sha256-YnHJJ19wqmibLQdUeq9xzE6CjrMA568KN/lFPuSVs4I%3D' (2025-01-23)
  → 'github:NixOS/nixpkgs/4e96537f163fad24ed9eb317798a79afc85b51b7?narHash=sha256-GFzPxJzTd1rPIVD4IW%2BGwJlyGwBDV1Tj5FLYwDQQ9sM%3D' (2025-01-26)
• Updated input 'unstable':
    'github:NixOS/nixpkgs/825479c345a7f806485b7f00dbe3abb50641b083?narHash=sha256-nU6AezEX4EuahTO1YopzueAXfjFfmCHylYEFCagduHU%3D' (2025-01-24)
  → 'github:NixOS/nixpkgs/852ff1d9e153d8875a83602e03fdef8a63f0ecf8?narHash=sha256-Zf0hSrtzaM1DEz8//%2BXs51k/wdSajticVrATqDrfQjg%3D' (2025-01-26)

.github/dependabot.yml

@@ -3,7 +3,7 @@ updates:
 - package-ecosystem: github-actions
   directory: "/"
   schedule:
-    interval: daily
+    interval: weekly
     time: "04:00"
   open-pull-requests-limit: 10
   reviewers:

.github/workflows/flake-update.yml

@@ -2,7 +2,7 @@ name: flake-update
 on:
   workflow_dispatch: 
   schedule:
-    - cron: '0 5 * * *' 
+    - cron: '0 5 * * 0' 
 
 jobs:
   lockfile:

flake.lock

@@ -42,11 +42,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1737334938,
+        "lastModified": 1737589030,
-        "narHash": "sha256-oqUk3TpNovAFjS386PGNeSq5A6tU4jhE/MoZYxIbTqI=",
+        "narHash": "sha256-vEomFIFl2nXUJQC0fuSKexUYqufhebbkyx+hF2l1bX8=",
         "owner": "Gerg-L",
         "repo": "fetch-rs",
-        "rev": "6fa8c9649a37954c0e9dbe23058d1f275935affa",
+        "rev": "b9b2e406412a6f416d6ac2c6fab24ac79cb78d15",
         "type": "github"
       },
       "original": {
@@ -248,11 +248,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1737301351,
+        "lastModified": 1737465171,
-        "narHash": "sha256-2UNmLCKORvdBRhPGI8Vx0b6l7M8/QBey/nHLIxOl4jE=",
+        "narHash": "sha256-R10v2hoJRLq8jcL4syVFag7nIGE7m13qO48wRIukWNg=",
         "owner": "cachix",
         "repo": "git-hooks.nix",
-        "rev": "15a87cedeb67e3dbc8d2f7b9831990dffcf4e69f",
+        "rev": "9364dc02281ce2d37a1f55b6e51f7c0f65a75f17",
         "type": "github"
       },
       "original": {
@@ -372,11 +372,11 @@
         "rust-overlay": "rust-overlay"
       },
       "locked": {
-        "lastModified": 1737299073,
+        "lastModified": 1737639419,
-        "narHash": "sha256-hOydnO9trHDo3qURqLSDdmE/pHNWDzlhkmyZ/gcBX2s=",
+        "narHash": "sha256-AEEDktApTEZ5PZXNDkry2YV2k6t0dTgLPEmAZbnigXU=",
         "owner": "nix-community",
         "repo": "lanzaboote",
-        "rev": "64d20cb2afaad8b73f4e38de41d27fb30a782bb5",
+        "rev": "a65905a09e2c43ff63be8c0e86a93712361f871e",
         "type": "github"
       },
       "original": {
@@ -387,11 +387,11 @@
     },
     "master": {
       "locked": {
-        "lastModified": 1737520781,
+        "lastModified": 1738062650,
-        "narHash": "sha256-oqUsEe0gOaUPye4GVHSTFzXFJ9nJKXAukGJPZX9Sulk=",
+        "narHash": "sha256-7zzGA17LnRQltAf1lNqqmpxhgmgTaVgDLgn1lygfy3o=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "a993849e624d6fb2126b242765a9f87c8b164bb1",
+        "rev": "8fe793656cf86f14e1549568eae010761660459f",
         "type": "github"
       },
       "original": {
@@ -403,11 +403,11 @@
     },
     "mnw": {
       "locked": {
-        "lastModified": 1735150973,
+        "lastModified": 1737682369,
-        "narHash": "sha256-OJhcCAoaMMXeD6o4qI/hxBCNELJp4dN8D5LJZc8w8XA=",
+        "narHash": "sha256-g9s/XvCLViSaaekyCgQrRAbsltkksrrdMH/jDrgc+5E=",
         "owner": "gerg-l",
         "repo": "mnw",
-        "rev": "40cd0b006cc48dffd0f8698ad7f54cf1d56779a6",
+        "rev": "23e63d54cec2a42552512c3205e4617f25205cb8",
         "type": "github"
       },
       "original": {
@@ -427,11 +427,11 @@
         "treefmt-nix": "treefmt-nix"
       },
       "locked": {
-        "lastModified": 1737444129,
+        "lastModified": 1737961008,
-        "narHash": "sha256-RDwsCYHgjFf6iTi5JSfpOAnuQenDh8VFKU01XluVWM8=",
+        "narHash": "sha256-GYzjvr6qsy1KQY0jdtkTloeKAAsF1Ls5jpPved3l1PY=",
         "owner": "nix-community",
         "repo": "neovim-nightly-overlay",
-        "rev": "ac8238031094d5242da26947bfc7174369c12e33",
+        "rev": "af9d81d77c8b81856a2d56048c8cb48e98bb929e",
         "type": "github"
       },
       "original": {
@@ -443,11 +443,11 @@
     "neovim-src": {
       "flake": false,
       "locked": {
-        "lastModified": 1737414984,
+        "lastModified": 1737934383,
-        "narHash": "sha256-A1ITJgtOOwhSC5wB/jfBV9ZuAftroeYRYFqA+aFKgac=",
+        "narHash": "sha256-aMMwHoHpaKbCaPoDd18N9gCCzA/IRPTrrRQmAWFQO54=",
         "owner": "neovim",
         "repo": "neovim",
-        "rev": "855a2a75e6f7d08376c221a46e0179e5c76176ec",
+        "rev": "1759b7844a2d468310b6d0ceca899fec6f2d4b84",
         "type": "github"
       },
       "original": {
@@ -489,11 +489,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1737257306,
+        "lastModified": 1737861961,
-        "narHash": "sha256-lEGgpA4kGafc76+Amnz+gh1L/cwUS2pePFlf22WEyh8=",
+        "narHash": "sha256-LIRtMvAwLGb8pBoamzgEF67oKlNPz4LuXiRPVZf+TpE=",
         "owner": "nix-community",
         "repo": "nix-index-database",
-        "rev": "744d330659e207a1883d2da0141d35e520eb87bd",
+        "rev": "79b7b8eae3243fc5aa9aad34ba6b9bbb2266f523",
         "type": "github"
       },
       "original": {
@@ -638,11 +638,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1737370608,
+        "lastModified": 1737879851,
-        "narHash": "sha256-hFA6SmioeqvGW/XvZa9bxniAeulksCOcj3kokdNT/YE=",
+        "narHash": "sha256-H+FXIKj//kmFHTTW4DFeOjR7F1z2/3eb2iwN6Me4YZk=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "300081d0cc72df578b02d914df941b8ec62240e6",
+        "rev": "5d3221fd57cc442a1a522a15eb5f58230f45a304",
         "type": "github"
       },
       "original": {
@@ -663,11 +663,11 @@
         "systems": "systems"
       },
       "locked": {
-        "lastModified": 1737519635,
+        "lastModified": 1738027094,
-        "narHash": "sha256-rsgBbVZnumOBospz7Ha3XtegrBXjmJhxzL3LltGGhVU=",
+        "narHash": "sha256-nNqG9PeLwpJYNJh+OBYTp5FeLX9gDtvhLHyKt5+e0to=",
         "owner": "Gerg-L",
         "repo": "nvim-flake",
-        "rev": "266ccb5c86a32d7b399823f16ed45c9b3b808135",
+        "rev": "800a954d141922a08dcaaeef28de48c4f57bcf85",
         "type": "github"
       },
       "original": {
@@ -757,7 +757,7 @@
         "spicetify-nix": "spicetify-nix",
         "stable": "stable",
         "suckless": "suckless",
-        "systems": "systems_2",
+        "systems": "systems_3",
         "unstable": "unstable"
       }
     },
@@ -825,14 +825,15 @@
         "flake-compat": "flake-compat_6",
         "nixpkgs": [
           "unstable"
-        ]
+        ],
+        "systems": "systems_2"
       },
       "locked": {
-        "lastModified": 1737519350,
+        "lastModified": 1738062977,
-        "narHash": "sha256-OW4xWGC+gWwAYoZtmXhuoX6WV+RFpadoev/uOPzYEpU=",
+        "narHash": "sha256-zW1zK0jl5mU27WawATAeFOiALa/NjBnN2KRa+3TU01k=",
         "owner": "Gerg-L",
         "repo": "spicetify-nix",
-        "rev": "7212e19f7866c4f494b8cb45c1b20564b7e16c05",
+        "rev": "b81153eab0ef97b43a9bd25707a2ebdf8572ee62",
         "type": "github"
       },
       "original": {
@@ -843,11 +844,11 @@
     },
     "stable": {
       "locked": {
-        "lastModified": 1737299813,
+        "lastModified": 1737885640,
-        "narHash": "sha256-Qw2PwmkXDK8sPQ5YQ/y/icbQ+TYgbxfjhgnkNJyT1X8=",
+        "narHash": "sha256-GFzPxJzTd1rPIVD4IW+GwJlyGwBDV1Tj5FLYwDQQ9sM=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "107d5ef05c0b1119749e381451389eded30fb0d5",
+        "rev": "4e96537f163fad24ed9eb317798a79afc85b51b7",
         "type": "github"
       },
       "original": {
@@ -907,6 +908,21 @@
         "type": "github"
       }
     },
+    "systems_3": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
     "treefmt-nix": {
       "inputs": {
         "nixpkgs": [
@@ -916,11 +932,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1737103437,
+        "lastModified": 1737483750,
-        "narHash": "sha256-uPNWcYbhY2fjY3HOfRCR5jsfzdzemhfxLSxwjXYXqNc=",
+        "narHash": "sha256-5An1wq5U8sNycOBBg3nsDDgpwBmR9liOpDGlhliA6Xo=",
         "owner": "numtide",
         "repo": "treefmt-nix",
-        "rev": "d1ed3b385f8130e392870cfb1dbfaff8a63a1899",
+        "rev": "f2cc121df15418d028a59c9737d38e3a90fbaf8f",
         "type": "github"
       },
       "original": {
@@ -931,11 +947,11 @@
     },
     "unstable": {
       "locked": {
-        "lastModified": 1737469691,
+        "lastModified": 1737885589,
-        "narHash": "sha256-nmKOgAU48S41dTPIXAq0AHZSehWUn6ZPrUKijHAMmIk=",
+        "narHash": "sha256-Zf0hSrtzaM1DEz8//+Xs51k/wdSajticVrATqDrfQjg=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "9e4d5190a9482a1fb9d18adf0bdb83c6e506eaab",
+        "rev": "852ff1d9e153d8875a83602e03fdef8a63f0ecf8",
         "type": "github"
       },
       "original": {

flake.nix

@@ -27,6 +27,7 @@
       ref = "2cb0ddfe4eb216fab6d826c1056743c152722720";
       inputs.nixpkgs.follows = "stable";
     };
+    #other
     nixos-generators = {
       type = "github";
       owner = "nix-community";
@@ -63,6 +64,11 @@
       repo = "nix-janitor";
       inputs.nixpkgs.follows = "unstable";
     };
+    systems = {
+      type = "github";
+      owner = "nix-systems";
+      repo = "default";
+    };
     #my own packages
     spicetify-nix = {
       type = "github";
@@ -94,12 +100,6 @@
       repo = "reboot-bot";
       inputs.nixpkgs.follows = "unstable";
     };
-    systems = {
-      type = "github";
-      owner = "nix-systems";
-      repo = "default";
-    };
-
   };
   outputs =
     inputs:

nixosConfigurations/gerg-desktop/boot.nix

@@ -40,6 +40,8 @@ in
         };
       };
       systemd = {
+        # For linuxManualConfig to work:
+        strip = lib.mkForce false;
         network = {
           enable = true;
           networks.enp11s0 = {
@@ -95,13 +97,12 @@ in
       timeout = lib.mkForce 5;
       efi.efiSysMountPoint = "/efi22";
     };
-
     kernelPackages = pkgs.linuxPackagesFor (
       let
-        version = "6.10.11";
+        version = "6.12.11";
         src = pkgs.fetchurl {
           url = "mirror://kernel/linux/kernel/v${builtins.head (lib.splitVersion version)}.x/linux-${version}.tar.xz";
-          hash = "sha256-+02gRvjBhRWfRTfe2IejCsxp2RxVWg/3+rxFIPWaMJY=";
+          hash = "sha256-R1Fy/b2HoVPxI6V5Umcudzvbba9bWKQX0aXkGfz+7Ek=";
         };
       in
       (pkgs.linuxManualConfig {

nixosConfigurations/gerg-desktop/main.nix

@@ -24,6 +24,7 @@
       "steam"
       "steam-unwrapped"
       "steam-run"
+      "hplip"
     ];
     packages = {
       inherit (pkgs)
@@ -178,6 +179,17 @@
     };
   };
 
+  # printing
+  services.avahi = {
+    enable = true;
+    nssmdns4 = true;
+    openFirewall = true;
+  };
+  services.printing = {
+    enable = true;
+    drivers = [ pkgs.hplipWithPlugin ];
+  };
+
   #user managment
   sops.secrets.gerg.neededForUsers = true;
 

nixosConfigurations/gerg-desktop/services/nginx.nix

@@ -28,7 +28,15 @@
       };
     };
 
-    systemd.tmpfiles.rules = [ "L+ /var/lib/acme - - - - /persist/services/acme" ];
+    fileSystems."/var/lib/acme" = {
+      device = "/persist/services/acme";
+      fsType = "none";
+      options = [ "bind" ];
+      depends = [
+        "/persist"
+        "/var"
+      ];
+    };
 
     users.users.${config.services.nginx.user}.extraGroups = [ "acme" ];
 

nixosConfigurations/gerg-desktop/zfs.nix

@@ -1,7 +1,6 @@
 {
   config,
   lib,
-  pkgs,
 }:
 {
   #link some stuff
@@ -23,7 +22,6 @@
     supportedFilesystems.ntfs = true;
 
     zfs = {
-      package = pkgs.zfs_unstable;
       devNodes = "/dev/disk/by-id/";
       forceImportAll = true;
     };

nixosModules/misc.nix

@@ -24,7 +24,6 @@
         nix-output-monitor # nom nom nom nom;
         nix-tree # view packages
         pciutils # lspci
-        nixos-rebuild-ng
         ;
       nix-janitor = pkgs.symlinkJoin {
         name = "nix-janitor";
@@ -82,6 +81,6 @@
     # Useless with flakes (without configuring)
     programs.command-not-found.enable = false;
 
-    system.switch.enableNg = true;
+    system.rebuild.enableNg = true;
   };
 }

packages/lint/package.nix

@@ -14,13 +14,7 @@ writeShellApplication {
     fd
   ];
   text = ''
-    if [ -z "''${1:-""}" ] || [ "$1" == "." ]; then
+    fd "$@" -t f -e nix -x statix fix -- '{}'
-      fd '.*\.nix' . -x statix fix -- {} \;
+    fd "$@" -t f -e nix -X deadnix -e -- '{}' \; -X nixfmt '{}'
-      fd '.*\.nix' . -X deadnix -e -- {} \; -X nixfmt {} \;
-    else
-      statix fix -- "$1"
-      deadnix -e "$1"
-      nixfmt "$1"
-    fi
   '';
 }