flake.lock: Update

Flake lock file updates:

• Updated input 'disko':
    'github:nix-community/disko/dea314155a9b8a4de242bdd4c005ba8a5dce8385' (2024-04-23)
  → 'github:nix-community/disko/285e26465a0bae510897ca04da26ce6307c652b4' (2024-04-26)
• Updated input 'microvm':
    'github:astro/microvm.nix/6a4f822a817180be03fcdceb654088d002c9ec5e' (2024-04-18)
  → 'github:astro/microvm.nix/ac28e21ac336dbe01b1f1bcab01fd31db3855e40' (2024-04-25)
• Updated input 'nixos':
    'github:SuperSandro2000/nixpkgs/c6ca8b1e28e3430ad61ec1227936227b1d5f27fc' (2024-04-24)
  → 'github:SuperSandro2000/nixpkgs/f269fa3a51a0eabb916d7120e23a38b07d9a3df3' (2024-04-25)
• Updated input 'nixos-hardware':
    'github:nixos/nixos-hardware/797f8d8082c7cc3259cba7275c699d4991b09ecc' (2024-04-23)
  → 'github:nixos/nixos-hardware/53db5e1070d07e750030bf65f1b9963df8f0c678' (2024-04-27)
• Updated input 'nixos-modules':
    'github:SuperSandro2000/nixos-modules/ca1b011888a64355c9a4f675efadb4fd7d2ea9c1' (2024-04-24)
  → 'github:SuperSandro2000/nixos-modules/5f4f228708e8c5e6cbf420d75120a9597d0a8e4d' (2024-04-26)
• Updated input 'nixos-unstable':
    'github:SuperSandro2000/nixpkgs/8f5e30989d498659993a3de2e2747f4bcd930ab1' (2024-04-24)
  → 'github:SuperSandro2000/nixpkgs/79bc61a6d6765a99b373f278a64596a64673be36' (2024-04-27)
• Updated input 'openwrt-imagebuilder':
    'github:astro/nix-openwrt-imagebuilder/bf62b9a6a04ccb0a15ba97d12a1a06736a4e8e4e' (2024-04-24)
  → 'github:astro/nix-openwrt-imagebuilder/41d87230288b55827b2719283fb761b83ff42e45' (2024-04-27)
• Updated input 'zentralwerk':
    'git+https://gitea.c3d2.de/zentralwerk/network.git?ref=refs/heads/master&rev=793547d0ca24853d4bbc826894d0fc0510ba07cb' (2024-04-24)
  → 'git+https://gitea.c3d2.de/zentralwerk/network.git?ref=refs/heads/master&rev=848cf110ed4f71cac7b18d7b52378c1e42194187' (2024-04-28)

config/default.nix

@@ -126,7 +126,8 @@
     nameservers = with hostRegistry.dnscache; [
       ip4
       ip6
-      "9.9.9.9"
+      # "9.9.9.9" # often fails to resolve nix-cache.hq.c3d2.de over tcp
+      "1.1.1.1"
     ];
     useHostResolvConf = lib.mkIf (!config.services.resolved.enable) true;
   };

flake.lock

@@ -225,11 +225,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1713875178,
-        "narHash": "sha256-FFJ4dojuziC6HLxugW+2YJ1P+m5veDq0WZSpZRSm/SY=",
+        "lastModified": 1714103775,
+        "narHash": "sha256-kcBiIrmqzt3bNTr2GMBfAyA+on8BEKO1iKzzDFQZkjI=",
         "owner": "nix-community",
         "repo": "disko",
-        "rev": "dea314155a9b8a4de242bdd4c005ba8a5dce8385",
+        "rev": "285e26465a0bae510897ca04da26ce6307c652b4",
         "type": "github"
       },
       "original": {
@@ -371,11 +371,11 @@
         "spectrum": "spectrum"
       },
       "locked": {
-        "lastModified": 1713463636,
-        "narHash": "sha256-IPdnR0Rs7XoffnCn6rExYDlft/GHD/UFgQ11lTVEK48=",
+        "lastModified": 1714072181,
+        "narHash": "sha256-MOxTGzM8lgq8uo6zAy6e4ZUdzUpF/eSQPBXeH5G5BtE=",
         "owner": "astro",
         "repo": "microvm.nix",
-        "rev": "6a4f822a817180be03fcdceb654088d002c9ec5e",
+        "rev": "ac28e21ac336dbe01b1f1bcab01fd31db3855e40",
         "type": "github"
       },
       "original": {
@@ -432,11 +432,11 @@
     },
     "nixos": {
       "locked": {
-        "lastModified": 1713959385,
-        "narHash": "sha256-aBsSKMz0H1uMdLnn7/sZ7z9OLPodQMxzpKQy8z2zDrw=",
+        "lastModified": 1714074321,
+        "narHash": "sha256-vFFRYf2xta2B+0RthuiOGTRffhdT2yphUOuZu8VmuVo=",
         "owner": "SuperSandro2000",
         "repo": "nixpkgs",
-        "rev": "c6ca8b1e28e3430ad61ec1227936227b1d5f27fc",
+        "rev": "f269fa3a51a0eabb916d7120e23a38b07d9a3df3",
         "type": "github"
       },
       "original": {
@@ -448,11 +448,11 @@
     },
     "nixos-hardware": {
       "locked": {
-        "lastModified": 1713864415,
-        "narHash": "sha256-/BPDMJEkrsFAFOsQWhwm31wezlgshPFlLBn34KEUdVA=",
+        "lastModified": 1714201532,
+        "narHash": "sha256-nk0W4rH7xYdDeS7k1SqqNtBaNrcgIBYNmOVc8P2puEY=",
         "owner": "nixos",
         "repo": "nixos-hardware",
-        "rev": "797f8d8082c7cc3259cba7275c699d4991b09ecc",
+        "rev": "53db5e1070d07e750030bf65f1b9963df8f0c678",
         "type": "github"
       },
       "original": {
@@ -471,11 +471,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1713993336,
-        "narHash": "sha256-x+tkNDUCS9pLytmDPi1jemV4V17ZlXqqFsXbgFLPbcI=",
+        "lastModified": 1714118571,
+        "narHash": "sha256-lD/9CSYtKAfrOIHngHQLxIMjpiq6Wi9LCsFC2zoArXw=",
         "owner": "SuperSandro2000",
         "repo": "nixos-modules",
-        "rev": "ca1b011888a64355c9a4f675efadb4fd7d2ea9c1",
+        "rev": "5f4f228708e8c5e6cbf420d75120a9597d0a8e4d",
         "type": "github"
       },
       "original": {
@@ -486,11 +486,11 @@
     },
     "nixos-unstable": {
       "locked": {
-        "lastModified": 1713963757,
-        "narHash": "sha256-l7WNMeblSJMVNwAuj9l/2CrBiOquKcCgWSNAvkKngks=",
+        "lastModified": 1714256028,
+        "narHash": "sha256-mWMAZaYMtv3M0+2lOzXHOoERKG78cD1Ro/R+qxU+VDo=",
         "owner": "SuperSandro2000",
         "repo": "nixpkgs",
-        "rev": "8f5e30989d498659993a3de2e2747f4bcd930ab1",
+        "rev": "79bc61a6d6765a99b373f278a64596a64673be36",
         "type": "github"
       },
       "original": {
@@ -571,11 +571,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1713955338,
-        "narHash": "sha256-V9DfgUeFttkXrzzWCm2FxEpKZW0EliPVOdFnLD6GEm4=",
+        "lastModified": 1714214267,
+        "narHash": "sha256-u0bFKTk8EBtZfHlxb3k+Qw9isqIHRUsKQYwBeINF6tY=",
         "owner": "astro",
         "repo": "nix-openwrt-imagebuilder",
-        "rev": "bf62b9a6a04ccb0a15ba97d12a1a06736a4e8e4e",
+        "rev": "41d87230288b55827b2719283fb761b83ff42e45",
         "type": "github"
       },
       "original": {
@@ -951,11 +951,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1713988692,
-        "narHash": "sha256-/3oqQpTC2rbMjXUksSj5RIvos/XiycgWWgKIpNZEFTc=",
+        "lastModified": 1714264157,
+        "narHash": "sha256-/O/XJcp5npOD+qFGidkFJhahfhYuA6/y6BCb67iHB54=",
         "ref": "refs/heads/master",
-        "rev": "793547d0ca24853d4bbc826894d0fc0510ba07cb",
-        "revCount": 2019,
+        "rev": "848cf110ed4f71cac7b18d7b52378c1e42194187",
+        "revCount": 2025,
         "type": "git",
         "url": "https://gitea.c3d2.de/zentralwerk/network.git"
       },

hosts/mail/default.nix

@@ -21,7 +21,10 @@
       organizationName = "Netzbiotop Dresden e.V.";
     };
     debug = true;
-    domains = [ "netzbiotop.org" ];
+    domains = [
+      "c3d2.social"
+      "netzbiotop.org"
+    ];
     dkimKeyBits = 2048;
     dkimSelector = "default";
     dkimSigning = true;
@@ -46,7 +49,7 @@
         userFilter = ldapFilter;
       };
       postfix = {
-        filter = ldap.searchFilterWithGroupFilter "mail-users" "(isMemberOf=cn=%d-mail-users,ou=groups,dc=c3d2,dc=de)";
+        filter = ldap.groupFilter "mail-users";
         mailAttribute = "uid";
         # uidAttribute = "uid";
       };

hosts/server9/secrets.yaml

@@ -5,9 +5,9 @@ ceph:
     osd.7:
         keyfile: ENC[AES256_GCM,data:yUDQ8bwnK7a++XFAVRJscbIxuBsLgef9ueGG6qujWNUyrmAZGvCMdg==,iv:MuLAqz5vcM92IuHEC/OeexSmXMdVYiwZgoxunlM0GHs=,tag:pR/JXDJSF1px7dzelpySeg==,type:str]
 restic:
-    password: ENC[AES256_GCM,data:aXF6nWIIoakT6zKyHdRGPFiszMiknZyM1hnzZu9h4q9OdcdajojkeP0659dRx+OfdEU0U/GuhqY5ErO1hBL0ge7eK+w3wvC8GUoka/NxmAODI4limXmMLz+SDsP2Y7FevEAAn9oJ8bD1Nd24Mhf9ihs02yyQcgY2S6G5z8AVNwZVBrf9JOhKn42zBDIvGsL3AADfSY0b4OhdGtDdxDtuXnCC82KaWB2L3vAt2Yp7lKMaGU2CiCyXpfET4SE5ds79DM1PZA7CYu/5edJFA0hadzQBciWsTxgF3nf/D1342h7aTrsRvt4R+ztkSeBbgXSX+DPl+/zrJCVwOisEV3KC58sjFdJWWI2VeAlZf4s2uHJSQBWDBlJpC55/HW0ZAg3a0DxXAGGw/Q1I9AE5nJkQoj2ZM70EnDN7rUgKGyLTiG0qSX/hgSNUaLGp3Jr5c0qpFbQCAPlUxuuMj7CBxWu2bOPQ5XLX8UOLfXdMQBGZvDzoQOPsihOZfy4eOP7cXoTFrn4qBznomeEJOYloxhYvALXskeX/+7NjBKsRjAd/gT3baRdio65dqfG2CnQlmSd3Cvo9d44srZabTL1IvBQC4n2ecP9MPtdFvMIDgfrxG8Iphw5nRz6yRWTqI2H4hd0qaj+ErtdaS5ANGH6i8DogkrBOnLCKRts1XcuY4MAtgP+ncThGfWMEOKR18w0McmdXlCZ/TYge+vadP6oqJWrw/K2zZT60pWasaLXaBcKZImyQh3g61oCQrDhNoxoXonwTNR2STqRCqDGm62I3+bk+xJ/1bmYs+rL9b+J3rYpy1Nn96nnBUF0/l5C7eKiiudxYCMWlTgS470EHxQuW13pwBb/oUpa9I444yX3nAAkf8c1MayXJ/ib7GyMx4Bzmx/gswHl/M6r7oSD+Xp45PQ6/p9qbqiz5ajyQlwWY9EPVSfReYBNxterO8U+gR9U/vwKAiZAT+ZdaoBfyNFS9gjdMc9HzS2WnmzdPlCrlB3QUmxE5JiOfGppbowbiwSQebUOX2mLdsroeg6XtxUowrQFdcNgVwgzaMu8S6JkcdnRCpRFS3h1ynworxRhN3LmOd7OKPKQLUZdP3KDGZBLYy9VuJfUXj5gE9FytgVMPliiy5UJ9uxm8MvucHkbRMFmBEzRUjKmMJNRG4Jtgu5vKqp6cekQQ+mTy31seSuWM7YCXvUD1a/ZGIHfzpdeXxlSZI3ksmwdqHy4BOcYFzCX1/NdnNcGmFcUyEpqTe2WiuCCL7Nv2hVJypYC/6z1YfCUbrg==,iv:KC+EBNmkH1r/EZMe8hee8Awn/+P2JRDWEktSGfsBuEo=,tag:IK9kPR9RL0S40xJXxSXVZg==,type:str]
+    password: ENC[AES256_GCM,data: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,iv:T23GpbDj1OEV8PTMmswLM1EvD0z//MkhLAtXLw5q7hM=,tag:o/RXrQnXbAPzgFP7fzfqow==,type:str]
     #ENC[AES256_GCM,data:PHm96Uz+irAo1jFg8CISWCkQNnXwmCDjBMcMFF0wl513tYYbUvLgxFXqiEDvQZlG9HTB,iv:QK9amqrVzWqzeYhELFWMpoo67uTNfouqMKK0/9Cd4+A=,tag:Y2Ds/bEz/L3FN8C4aq/Trw==,type:comment]
-    htpasswd: ENC[AES256_GCM,data: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,iv:phsevyD90kreqScr3DsLjDO0/QhZvH/4n8WdPhgSSb8=,tag:DZqMXHO4o+GUZRRYth/dAw==,type:str]
+    htpasswd: ENC[AES256_GCM,data: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,iv:JdMbWgSVyMsryaPRPI3mmzPB/lwsKzTqpuMH6zF4Hmg=,tag:bWKh3uY4+1q5sep8nkMXNA==,type:str]
 sops:
     kms: []
     gcp_kms: []
@@ -32,8 +32,8 @@ sops:
             cjNaNGNGNVRFU0VCYUp2V3RrY3JHM0UKHyu9ugwq1UJc01UXNKTp16R8mZCs1cSn
             kpCNZTBID4lWHTV5lCJ1qtgS5zzjZTzIBm0l7XiwPXBXXhxe9YL9Lw==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-01-10T23:29:21Z"
-    mac: ENC[AES256_GCM,data:z/EMEvn8IEeJDSpVeSmPAG5o/9uX+m+xCP4CyXo2ScbCmz1XBBBzJMmswsVDpMqoODvNLVBs7zsBlE5TuGHyEj8SHPezEyE3kO7NEMCCvsJK8RhXk91VAG+bh68jUgctS0yzR9vKY/WPO1xwKmiKzCaT+2X0RCv5VZbP2DXlBmY=,iv:IFMvblhohl4qOas82N65TSurNSJrq8D2WNp7PzjneOs=,tag:E7l5fOy8VbEgJeniDjyhOg==,type:str]
+    lastmodified: "2024-04-27T21:55:28Z"
+    mac: ENC[AES256_GCM,data:4ruLaXYc2DeS5Oid8UM3cux9sEfIZUqnMP2f9kDTbeiiycBNf16HZucWJ1O+PtjZoPNztPpwwKRCGk6GKT/Fxq9VHf7l40jZipJVpLGTF2CSAMmz0oVSgGZwegnVcE1yj1r1YJYCBzPsAPNWcRbib6GCIlXC4b+9IJDFW/j9WCc=,iv:pF5vkcNd8xd5xujXXJuQcW7ZKUd/ZYjSsVZvG9b3Fq8=,tag:lySjx22Cb60lSeKCIw1J+Q==,type:str]
     pgp:
         - created_at: "2023-08-08T22:43:55Z"
           enc: |

modules/baremetal.nix

@@ -72,6 +72,10 @@
     services = {
       # just assume there are ssd's everywhere
       fstrim.enable = true;
+      resolved.extraConfig = /* systemd */ ''
+        # don't cache NXDOMAIN which often happened for nix-cache.hq.c3d2.de after a restart
+        Cache=no-negative
+      '';
       smartd.enable = true;
     };