flake: update lock

flake.lock

@@ -7,11 +7,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1700814205,
-        "narHash": "sha256-lWqDPKHRbQfi+zNIivf031BUeyciVOtwCwTjyrhDB5g=",
+        "lastModified": 1702814678,
+        "narHash": "sha256-zDtO0jV2QLoddUJinLlTQrQqCUW3dPiIWOSYgg98T7E=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "aeb2232d7a32530d3448318790534d196bf9427a",
+        "rev": "1488651d02c1a7a15e284210f0d380a62d8d8cef",
         "type": "github"
       },
       "original": {
@@ -23,11 +23,11 @@
     },
     "nixos-unstable": {
       "locked": {
-        "lastModified": 1701718080,
-        "narHash": "sha256-6ovz0pG76dE0P170pmmZex1wWcQoeiomUZGggfH9XPs=",
+        "lastModified": 1702312524,
+        "narHash": "sha256-gkZJRDBUCpTPBvQk25G0B7vfbpEYM5s5OZqghkjZsnE=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "2c7f3c0fb7c08a0814627611d9d7d45ab6d75335",
+        "rev": "a9bf124c46ef298113270b1f84a164865987a91c",
         "type": "github"
       },
       "original": {
@@ -39,11 +39,11 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1702141067,
-        "narHash": "sha256-Xus22U0FymdODEv4dmwXjztyOftu7A+rYxU50UFMvjM=",
+        "lastModified": 1702940657,
+        "narHash": "sha256-EpnUOrhKWGE4SDcFm7PoaDeY7O12Ai2WB0DAPRncg00=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "f33536f3403c64bfd8f54f002b88cc2f568e10a9",
+        "rev": "7f6b54798131526ea0aa0d969706773ca453a645",
         "type": "github"
       },
       "original": {

flake.nix

@@ -30,11 +30,6 @@
           inherit system;
 
           config.allowUnfree = true;
-
-          config.permittedInsecurePackages = [
-            "openssl-1.1.1t"
-            "openssl-1.1.1u"
-          ];
         };
 
       wrapUtils = { pkgs, unstablePkgs, system }:

hosts/architect/default.nix

@@ -44,6 +44,7 @@ in
     ./plex.nix
     ./headscale.nix
     ./llm.nix
+    ./photoprism.nix
   ];
 
   architect = {

hosts/architect/nextcloud.nix

@@ -47,7 +47,7 @@ in
       enable = true;
       hostName = domain;
       https = true;
-      package = pkgs.unstablePkgs.nextcloud27;
+      package = pkgs.nextcloud28;
       datadir = "/services/nextcloud";
       configureRedis = true;
       caching = {

hosts/architect/nzbget.nix

@@ -1,4 +1,4 @@
-{ config, lib, ... }:
+{ config, ... }:
 
 let
   domain = "htnzb.giugl.io";
@@ -9,12 +9,14 @@ in
     group = "media";
   };
 
-  architect.vhost.${domain} = {
+  architect.vhost.${domain} = with config.architect.networks; {
     dnsInterfaces = [ "tailscale" "lan" ];
 
     locations."/" = {
       port = 6789;
       allowLan = true;
+
+      allow = [ tailscale.net ];
     };
   };
 

hosts/architect/photoprism.nix

@@ -6,7 +6,7 @@ in
 {
   services.photoprism = {
     enable = true;
-    package = pkgs.photoprism;
+    package = pkgs.unstablePkgs.photoprism;
     originalsPath = "/var/lib/private/photoprism/originals";
     address = "0.0.0.0";
     settings = {

hosts/architect/prowlarr.nix

@@ -1,4 +1,4 @@
-{ config, lib, ... }:
+{ config, ... }:
 
 let
   domain = "htpro.giugl.io";
@@ -6,13 +6,18 @@ in
 {
   services.prowlarr.enable = true;
 
-  architect.vhost.${domain} = {
+  architect.vhost.${domain} = with config.architect.networks; {
     dnsInterfaces = [ "tailscale" ];
 
     locations."/" = {
       port = 9696;
       allowLan = true;
+
+      allow = [
+        tailscale.net
+      ];
     };
+
   };
 
   users.groups.media.members = [ "prowlarr" ];