jory
5116faf0d3
- caddy: security headers (X-Content-Type-Options/X-XSS-Protection/ X-Frame-Options) on all vhosts + baseline CSP; strip SnappyMail upstream copies via header_down on mail.severijnse.eu - tlsa-updater: compute TLSA 3 1 1 from cert SPKI (SHA-256), sync _25/_465/_993, fail-safe placeholders; coredns zone updated - pre-commit: wire cachix/git-hooks.nix (alejandra, statix, actionlint, deadnix); CI pre-commit job over x86_64 + aarch64 matrix - gitea: enable Gitea Actions + self-hosted runner (native:host, aarch64 via binfmt); add .gitea/workflows/ci.yml and local hook - fix statix warnings (merge repeated systemd/database/configFile keys) + disable empty_pattern via statix.toml (nixpkgs standard) - Clean up unused lambda patterns across 38 .nix files via deadnix - Format whole repo with alejandra (27 files) - Remove .github/workflows/ci.yml (Gitea shadows .github; runner labels differ) - Fix CI nix-not-found: export /run/current-system/sw/bin in PATH - Trim aarch64 from pre-commit matrix (no QEMU binfmt deployed yet)
398 lines
10 KiB
JSON
398 lines
10 KiB
JSON
{
|
|
"nodes": {
|
|
"agenix": {
|
|
"inputs": {
|
|
"darwin": "darwin",
|
|
"home-manager": "home-manager",
|
|
"nixpkgs": [
|
|
"nixpkgs"
|
|
],
|
|
"systems": [
|
|
"systems"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1770165109,
|
|
"narHash": "sha256-9VnK6Oqai65puVJ4WYtCTvlJeXxMzAp/69HhQuTdl/I=",
|
|
"owner": "ryantm",
|
|
"repo": "agenix",
|
|
"rev": "b027ee29d959fda4b60b57566d64c98a202e0feb",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "ryantm",
|
|
"repo": "agenix",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"darwin": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"agenix",
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1744478979,
|
|
"narHash": "sha256-dyN+teG9G82G+m+PX/aSAagkC+vUv0SgUw3XkPhQodQ=",
|
|
"owner": "lnl7",
|
|
"repo": "nix-darwin",
|
|
"rev": "43975d782b418ebf4969e9ccba82466728c2851b",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "lnl7",
|
|
"ref": "master",
|
|
"repo": "nix-darwin",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"disko": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"nixos-24-05"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1781152676,
|
|
"narHash": "sha256-RxWs5ND31KzTG7wvMM+PMfUjyNpmIEr999lqNARaM5o=",
|
|
"owner": "nix-community",
|
|
"repo": "disko",
|
|
"rev": "ff8702b4de27f72b4c78573dfb89ec74e36abdf1",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "nix-community",
|
|
"repo": "disko",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"flake-compat": {
|
|
"locked": {
|
|
"lastModified": 1767039857,
|
|
"narHash": "sha256-vNpUSpF5Nuw8xvDLj2KCwwksIbjua2LZCqhV1LNRDns=",
|
|
"owner": "edolstra",
|
|
"repo": "flake-compat",
|
|
"rev": "5edf11c44bc78a0d334f6334cdaf7d60d732daab",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "edolstra",
|
|
"repo": "flake-compat",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"flake-compat_2": {
|
|
"flake": false,
|
|
"locked": {
|
|
"lastModified": 1767039857,
|
|
"narHash": "sha256-vNpUSpF5Nuw8xvDLj2KCwwksIbjua2LZCqhV1LNRDns=",
|
|
"owner": "NixOS",
|
|
"repo": "flake-compat",
|
|
"rev": "5edf11c44bc78a0d334f6334cdaf7d60d732daab",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "NixOS",
|
|
"repo": "flake-compat",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"flake-parts": {
|
|
"inputs": {
|
|
"nixpkgs-lib": [
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1775087534,
|
|
"narHash": "sha256-91qqW8lhL7TLwgQWijoGBbiD4t7/q75KTi8NxjVmSmA=",
|
|
"owner": "hercules-ci",
|
|
"repo": "flake-parts",
|
|
"rev": "3107b77cd68437b9a76194f0f7f9c55f2329ca5b",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "hercules-ci",
|
|
"repo": "flake-parts",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"flake-utils": {
|
|
"inputs": {
|
|
"systems": [
|
|
"systems"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1731533236,
|
|
"narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
|
|
"owner": "numtide",
|
|
"repo": "flake-utils",
|
|
"rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "numtide",
|
|
"repo": "flake-utils",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"git-hooks-nix": {
|
|
"inputs": {
|
|
"flake-compat": "flake-compat_2",
|
|
"nixpkgs": [
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1783008725,
|
|
"narHash": "sha256-jGiy6+sxjNWXSjp25uoJuNfyH9zBK1PEDY0lVoL4ibQ=",
|
|
"owner": "cachix",
|
|
"repo": "git-hooks.nix",
|
|
"rev": "bca82caa46d5ec0f5d422c61fb1e30bc51313cbe",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "cachix",
|
|
"repo": "git-hooks.nix",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"helium": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"nixpkgs"
|
|
],
|
|
"utils": "utils"
|
|
},
|
|
"locked": {
|
|
"lastModified": 1777607620,
|
|
"narHash": "sha256-GGMDVvqo1PwAB6/7yZg651VzexqECdliZCKXlM0UDwI=",
|
|
"owner": "schembriaiden",
|
|
"repo": "helium-browser-nix-flake",
|
|
"rev": "10105224eea589de8f0b3292f4e4bca3d52f1ee2",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "schembriaiden",
|
|
"repo": "helium-browser-nix-flake",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"home-manager": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"agenix",
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1745494811,
|
|
"narHash": "sha256-YZCh2o9Ua1n9uCvrvi5pRxtuVNml8X2a03qIFfRKpFs=",
|
|
"owner": "nix-community",
|
|
"repo": "home-manager",
|
|
"rev": "abfad3d2958c9e6300a883bd443512c55dfeb1be",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "nix-community",
|
|
"repo": "home-manager",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"import-tree": {
|
|
"locked": {
|
|
"lastModified": 1773693634,
|
|
"narHash": "sha256-BtZ2dtkBdSUnFPPFc+n0kcMbgaTxzFNPv2iaO326Ffg=",
|
|
"owner": "vic",
|
|
"repo": "import-tree",
|
|
"rev": "c41e7d58045f9057880b0d85e1152d6a4430dbf1",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "vic",
|
|
"repo": "import-tree",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"nix-index-db": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1777181277,
|
|
"narHash": "sha256-yVJbd07ortDRAttDFmDV5p220aOLTHgVAx//0nW/xW8=",
|
|
"owner": "Mic92",
|
|
"repo": "nix-index-database",
|
|
"rev": "b8eb7acee0f7604fe1bf6a5b3dcf5254369180fa",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "Mic92",
|
|
"repo": "nix-index-database",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"nixos-24-05": {
|
|
"locked": {
|
|
"lastModified": 1735563628,
|
|
"narHash": "sha256-OnSAY7XDSx7CtDoqNh8jwVwh4xNL/2HaJxGjryLWzX8=",
|
|
"owner": "NixOS",
|
|
"repo": "nixpkgs",
|
|
"rev": "b134951a4c9f3c995fd7be05f3243f8ecd65d798",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "NixOS",
|
|
"ref": "nixos-24.05",
|
|
"repo": "nixpkgs",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"nixpkgs": {
|
|
"locked": {
|
|
"lastModified": 1777268161,
|
|
"narHash": "sha256-bxrdOn8SCOv8tN4JbTF/TXq7kjo9ag4M+C8yzzIRYbE=",
|
|
"owner": "NixOS",
|
|
"repo": "nixpkgs",
|
|
"rev": "1c3fe55ad329cbcb28471bb30f05c9827f724c76",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "NixOS",
|
|
"ref": "nixos-unstable",
|
|
"repo": "nixpkgs",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"nixpkgs-unstable": {
|
|
"locked": {
|
|
"lastModified": 1783522502,
|
|
"narHash": "sha256-iffAls3iaNTyJC2faYcUXSI+Gp02cDjYl+MygxKl2GI=",
|
|
"owner": "NixOS",
|
|
"repo": "nixpkgs",
|
|
"rev": "0bb7ec54c8483066ec9d7720e780a5caa71f8612",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "NixOS",
|
|
"ref": "nixos-unstable",
|
|
"repo": "nixpkgs",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"root": {
|
|
"inputs": {
|
|
"agenix": "agenix",
|
|
"disko": "disko",
|
|
"flake-compat": "flake-compat",
|
|
"flake-parts": "flake-parts",
|
|
"flake-utils": "flake-utils",
|
|
"git-hooks-nix": "git-hooks-nix",
|
|
"helium": "helium",
|
|
"import-tree": "import-tree",
|
|
"nix-index-db": "nix-index-db",
|
|
"nixos-24-05": "nixos-24-05",
|
|
"nixpkgs": "nixpkgs",
|
|
"nixpkgs-unstable": "nixpkgs-unstable",
|
|
"sops-nix": "sops-nix",
|
|
"systems": "systems_2",
|
|
"zen-browser": "zen-browser"
|
|
}
|
|
},
|
|
"sops-nix": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"nixos-24-05"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1783174389,
|
|
"narHash": "sha256-aCWC8ngycU7OdJrU2+Je3qf+1a2ykuBvpPhZT/9tXMc=",
|
|
"owner": "Mic92",
|
|
"repo": "sops-nix",
|
|
"rev": "f1406619a3884cd5c47992a70b8b35c9c0fcb4c9",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "Mic92",
|
|
"repo": "sops-nix",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"systems": {
|
|
"locked": {
|
|
"lastModified": 1681028828,
|
|
"narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
|
|
"owner": "nix-systems",
|
|
"repo": "default",
|
|
"rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "nix-systems",
|
|
"repo": "default",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"systems_2": {
|
|
"locked": {
|
|
"lastModified": 1689347949,
|
|
"narHash": "sha256-12tWmuL2zgBgZkdoB6qXZsgJEH9LR3oUgpaQq2RbI80=",
|
|
"owner": "nix-systems",
|
|
"repo": "default-linux",
|
|
"rev": "31732fcf5e8fea42e59c2488ad31a0e651500f68",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "nix-systems",
|
|
"repo": "default-linux",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"utils": {
|
|
"inputs": {
|
|
"systems": "systems"
|
|
},
|
|
"locked": {
|
|
"lastModified": 1731533236,
|
|
"narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
|
|
"owner": "numtide",
|
|
"repo": "flake-utils",
|
|
"rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "numtide",
|
|
"repo": "flake-utils",
|
|
"type": "github"
|
|
}
|
|
},
|
|
"zen-browser": {
|
|
"inputs": {
|
|
"nixpkgs": [
|
|
"nixpkgs"
|
|
]
|
|
},
|
|
"locked": {
|
|
"lastModified": 1777612697,
|
|
"narHash": "sha256-h+tXBNMDrsKbD1UnYw0IeSIT4RalHtIJ1GLOviib7/8=",
|
|
"owner": "youwen5",
|
|
"repo": "zen-browser-flake",
|
|
"rev": "f9f70d14f9a57c7962c5cfe589461c1391044448",
|
|
"type": "github"
|
|
},
|
|
"original": {
|
|
"owner": "youwen5",
|
|
"repo": "zen-browser-flake",
|
|
"type": "github"
|
|
}
|
|
}
|
|
},
|
|
"root": "root",
|
|
"version": 7
|
|
}
|