chore: update flake

modules/home/common/gpg-agent.nix

@@ -36,16 +36,20 @@ in
       ];
     };
 
+    systemd.user.tmpfiles.rules = [
+      "d ${homeDir}/.gnupg 0700 ${mainUser} users - -"
+    ];
+
     # assure correct permissions
-    systemd.user.tmpfiles.settings."30-gpgagent".rules = {
-      "${homeDir}/.gnupg" = {
-        d = {
-          group = "users";
-          user = mainUser;
-          mode = "0700";
-        };
-      };
-    };
+    # systemd.user.tmpfiles.settings."30-gpgagent".rules = {
+    #   "${homeDir}/.gnupg" = {
+    #     d = {
+    #       group = "users";
+    #       user = mainUser;
+    #       mode = "0700";
+    #     };
+    #   };
+    # };
   };
 
 }

modules/nixos/server/adguardhome.nix

@@ -59,7 +59,7 @@ in
           ];
           dhcp.enabled = false;
         };
-        filtering.rewrites = map
+        filtering.rewrites = (map
           (domain: {
             inherit domain;
             # FIXME: change to homeWebProxy once that is setup
@@ -67,7 +67,13 @@ in
             # answer = globals.hosts.${webProxy}.wanAddress4;
             enabled = true;
           })
-          homeDomains;
+          homeDomains) ++ [
+          {
+            domain = "smb.${globals.domains.main}";
+            answer = globals.networks.home-lan.vlans.services.hosts.storage.ipv4;
+            enabled = true;
+          }
+        ];
         filters = [
           {
             name = "AdGuard DNS filter";

modules/nixos/server/ankisync.nix

@@ -37,7 +37,7 @@ in
     };
 
     environment.persistence."/state" = lib.mkIf config.swarselsystems.isMicroVM {
-      directories = [{ directory = "/var/lib/private/${serviceName}"; }];
+      directories = [{ directory = "/var/lib/private/anki-sync-server"; }];
     };
 
     services.anki-sync-server = {

modules/nixos/server/homebox.nix

@@ -41,13 +41,6 @@ in
       directories = [{ directory = "/var/lib/${serviceName}"; user = serviceUser; group = serviceGroup; }];
     };
 
-    systemd.services.homebox = {
-      environment = {
-        TMPDIR = "/var/lib/homebox/.tmp";
-        HOME = "/var/lib/homebox";
-      };
-    };
-
     services.${serviceName} = {
       enable = true;
       package = pkgs.bisect.homebox;

modules/nixos/server/koillection.nix

@@ -6,7 +6,7 @@ let
 
   postgresUser = config.systemd.services.postgresql.serviceConfig.User; # postgres
   postgresPort = config.services.postgresql.settings.port; # 5432
-  containerRev = "sha256:96693e41a6eb2aae44f96033a090378270f024ddf4e6095edf8d57674f21095d";
+  containerRev = "sha256:bb8ad2b6891441d8ec5c3169b684b71574f3bb3e9afb345bad2f91d833d60340";
 
   inherit (config.swarselsystems) sopsFile;
 in

modules/nixos/server/mpd.nix

@@ -38,13 +38,14 @@ in
 
     services.${serviceName} = {
       enable = true;
-      musicDirectory = "/storage/Music";
+      openFirewall = true;
+      settings = {
+        music_directory = "/storage/Music";
+        bind_to_address = "any";
+        port = servicePort;
+      };
       user = serviceUser;
       group = serviceGroup;
-      network = {
-        port = servicePort;
-        listenAddress = "any";
-      };
       credentials = [
         {
           passwordFile = config.sops.secrets.mpd-pw.path;

modules/nixos/server/nfs.nix

@@ -19,22 +19,7 @@ in
     services = {
       # add a user with sudo smbpasswd -a <user>
       samba = {
-        # package = pkgs.samba4Full;
         package = pkgs.samba4;
-        # extraConfig = ''
-        #   workgroup = WORKGROUP
-        #   server role = standalone server
-        #   dns proxy = no
-
-        #   pam password change = yes
-        #   map to guest = bad user
-        #   create mask = 0664
-        #   force create mode = 0664
-        #   directory mask = 0775
-        #   force directory mode = 0775
-        #   follow symlinks = yes
-        # '';
-
         enable = true;
         openFirewall = true;
         settings.Eternor = {

modules/nixos/server/restic.nix

@@ -1,8 +1,7 @@
 { lib, pkgs, config, ... }:
 let
   inherit (config.swarselsystems) sopsFile;
-
-  targets = config.swarselsystems.server.restic.targets;
+  inherit (config.swarselsystems.server.restic) targets;
 in
 {
   options.swarselmodules.server.restic = lib.mkEnableOption "enable restic backups on server";