chore: update flake, introduce dev input

modules/nixos/client/network.nix

@@ -1,4 +1,4 @@
-{ self, lib, config, ... }:
+{ self, lib, pkgs, config, ... }:
 let
   certsSopsFile = self + /secrets/certs/secrets.yaml;
   clientSopsFile = self + /secrets/${config.networking.hostName}/secrets.yaml;
@@ -81,6 +81,12 @@ in
       networkmanager = {
         enable = true;
         wifi.backend = "iwd";
+        plugins = [
+          # list of plugins: https://search.nixos.org/packages?query=networkmanager-
+          # docs https://networkmanager.dev/docs/vpn/
+          pkgs.networkmanager-openconnect
+          pkgs.networkmanager-openvpn
+        ];
         ensureProfiles = lib.mkIf (!config.swarselsystems.isPublic) {
           environmentFiles = [
             "${config.sops.templates."network-manager.env".path}"

modules/nixos/client/sway.nix

@@ -4,7 +4,7 @@
   config = lib.mkIf config.swarselsystems.modules.sway {
     programs.sway = {
       enable = true;
-      package = pkgs.swayfx;
+      package = pkgs.dev.swayfx;
       wrapperFeatures = {
         base = true;
         gtk = true;

modules/nixos/common/settings.nix

@@ -54,6 +54,7 @@ in
   config = lib.mkIf config.swarselsystems.modules.general
     (lib.recursiveUpdate
       {
+        sops.secrets.github-api-token = lib.mkIf (!minimal) { };
 
         nix = {
           package = pkgs.nixVersions.nix_2_28;
@@ -77,6 +78,8 @@ in
               patches = (o.patches or []) ++ ["${self}/nix/nix-plugins.patch"];
             })}/lib/nix/plugins
             extra-builtins-file = ${self + /nix/extra-builtins.nix}
+          '' + lib.optionalString (!minimal) ''
+            !include ${config.sops.secrets.github-api-token.path}
           '';
         };
 

modules/nixos/optional/work.nix

@@ -195,7 +195,7 @@ in
       govc
       terraform
       opentofu
-      terragrunt
+      dev.terragrunt
       graphviz
       azure-cli