24.11

did not test samba and headscale yet

https://github.com/juanfont/headscale/issues/2210#issuecomment-2480130747

modules/profiles/desktop/default.nix

@@ -145,6 +145,7 @@ in
           ffmpeg
           tinycc
           scrcpy
+          cheese
           arandr
           pandoc
           evince
@@ -163,6 +164,7 @@ in
           libheif
           mplayer
           tcpflow
+          nautilus
           smplayer
           inkscape
           chromium
@@ -209,10 +211,12 @@ in
           graphicsmagick
           magic-wormhole
           signal-desktop
+          gnome-calendar
           element-desktop
           netsurf-browser
           man-pages-posix
           git-filter-repo
+          gnome-calculator
           age-plugin-yubikey
           hunspellDicts.en_US
           python3Packages.ipython
@@ -225,11 +229,6 @@ in
           gcc_latest
           clang-tools
 
-          gnome.cheese
-          gnome.nautilus
-          gnome.gnome-calculator
-          gnome.gnome-calendar
-
           xorg.xev
           xorg.xeyes
           xorg.lndir

modules/services/gitea/default.nix

@@ -81,7 +81,7 @@
           route /static/assets/* {
             uri strip_prefix /static
             file_server * {
-              root ${pkgs.pkgs-unstable.compressDrvWeb pkgs.gitea.data { }}/public
+              root ${pkgs.compressDrvWeb pkgs.gitea.data { }}/public
               precompressed zstd br gzip
             }
           }

modules/services/headscale/default.nix

@@ -28,8 +28,8 @@
           server_url = "https://vpn.jakstys.lt";
           ip_prefixes = [ config.mj.services.headscale.subnetCIDR ];
           log.level = "warn";
-          dns_config = {
-            nameservers = [
+          dns = {
+            nameservers.global = [
               "1.1.1.1"
               "8.8.4.4"
             ];

modules/services/immich/default.nix

@@ -3,12 +3,10 @@
   lib,
   pkgs,
   myData,
-  nixpkgs-unstable,
   ...
 }:
 let
   cfg = config.mj.services.immich;
-  immich-package = pkgs.pkgs-unstable.immich;
   immich-user = config.services.immich.user;
   immich-group = config.services.immich.group;
   startScript = pkgs.writeShellApplication {
@@ -28,7 +26,7 @@ let
       exec setpriv \
         --ruid ${immich-user} \
         --inh-caps -all \
-        ${lib.getExe immich-package}
+        ${lib.getExe pkgs.immich}
     '';
   };
 in
@@ -38,12 +36,9 @@ in
     bindPaths = lib.mkOption { type = attrsOf str; };
   };
 
-  imports = [ "${nixpkgs-unstable}/nixos/modules/services/web-apps/immich.nix" ];
-
   config = lib.mkIf cfg.enable {
 
     services.immich = {
-      package = immich-package;
       enable = true;
       port = myData.ports.immich-server;
 

modules/services/jakstpub/default.nix

@@ -31,28 +31,32 @@ in
         '';
       };
 
-      samba = {
-        # https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Standalone_Server
-        enable = true;
-        securityType = "user";
-        enableNmbd = false;
-        enableWinbindd = false;
-        extraConfig = ''
-          map to guest = Bad User
-          guest account = jakstpub
-          server role = standalone server
-        '';
-        shares =
-          let
-            defaults = {
-              "public" = "yes";
-              "mangled names" = "no";
-              "guest ok" = "yes";
-              "force user" = "jakstpub";
-              "force group" = "jakstpub";
+      samba =
+        let
+          defaults = {
+            "public" = "yes";
+            "mangled names" = "no";
+            "guest ok" = "yes";
+            "force user" = "jakstpub";
+            "force group" = "jakstpub";
+          };
+        in
+        {
+          # https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Standalone_Server
+          enable = true;
+
+          nmbd.enable = false;
+          winbindd.enable = false;
+
+          settings = {
+            global = {
+              security = "user";
+
+              "map to guest" = "Bad User";
+              "guest account" = "jakstpub";
+              "server role" = "standalone server";
             };
-          in
-          {
+
             public = defaults // {
               "path" = cfg.dataDir;
               "writeable" = "yes";
@@ -66,7 +70,7 @@ in
               "read only" = "yes";
             };
           };
-      };
+        };
 
       samba-wsdd = {
         enable = true;