Update flake.lock

Merge pull request '[nextcloud] upgrade to hub 26 summer/v35' (#206 ) from nextcloud_35 into master
Reviewed-on: #206 Reviewed-by: kalipso <kalipso@c3d2.de>
2026-10-29 04:02:52 +00:00 · 2026-10-27 17:24:36 +01:00 · 2026-10-26 10:49:59 +01:00 · 2026-10-25 00:55:25 +02:00 · 2026-10-23 00:21:38 +02:00 · 2026-10-22 21:14:34 +02:00
3 changed files with 44 additions and 54 deletions
@@ -88,11 +88,11 @@
        "uv2nix": "uv2nix"
      },
      "locked": {
-        "lastModified": 1786138873,
-        "narHash": "sha256-+G/hTquaK4AjYxNSJTpcZXUEKxFDv9lOn3x+lHHTWJw=",
+        "lastModified": 1786463371,
+        "narHash": "sha256-OgyMTerUYMCCRgxF3h0y9bzLa2FJ9m0SwSCtSDzj1Do=",
        "ref": "refs/heads/master",
-        "rev": "c5934d05c6f01c94c36221deb7ed4de03aa91ca1",
-        "revCount": 127,
+        "rev": "25ecbbf375f9e84c2de2753f2372c63f7207afe1",
+        "revCount": 128,
        "type": "git",
        "url": "https://git.dynamicdiscord.de/malobeo/gatekeeper"
      },
@@ -108,11 +108,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1787377438,
-        "narHash": "sha256-Sxu1NLTD/Ern6hFGLlZmtKCSct3YQXZI/lls8RE1XeM=",
+        "lastModified": 1792818383,
+        "narHash": "sha256-199i7ubVSXTMl+0AAlL7cVCXSjcI+jWByMcimYjeMX0=",
        "owner": "nix-community",
        "repo": "home-manager",
-        "rev": "65258d5c65a250189fde2e35f490d15e064c4c62",
+        "rev": "24f2190587513b9c2f73db112a17844ae912d965",
        "type": "github"
      },
      "original": {
@@ -149,11 +149,11 @@
        "spectrum": "spectrum"
      },
      "locked": {
-        "lastModified": 1788263502,
-        "narHash": "sha256-gyVqW5U9wy6A8voJNu6SiSYTKDplo/MDl31x7FszWlk=",
+        "lastModified": 1793225170,
+        "narHash": "sha256-G/iL0mroLP5etLwYs55uyOyffMS4t+gpyXF06haba4w=",
        "owner": "astro",
        "repo": "microvm.nix",
-        "rev": "974d315e504e666eac4920d712e3ff6804dc1502",
+        "rev": "c37d37a876a3c4bd7ff78fcc716b2e4fac770360",
        "type": "github"
      },
      "original": {
@@ -203,11 +203,11 @@
        "nixpkgs": "nixpkgs_2"
      },
      "locked": {
-        "lastModified": 1788335262,
-        "narHash": "sha256-3jBEq8avfzlrsY4UpW4d5TOmm7ocseZfnitEJhqauyc=",
+        "lastModified": 1793236063,
+        "narHash": "sha256-jGFe4xdrCw6xpgH2zgKwslACyt/NGuPwGILPEMFxmcQ=",
        "owner": "NixOS",
        "repo": "nixos-hardware",
-        "rev": "44d95795ee2d475b3d687325e26dcf4ca9104557",
+        "rev": "b6754c901c21478fd8450d62101e712b2a4f0d75",
        "type": "github"
      },
      "original": {
@@ -235,11 +235,11 @@
    },
    "nixpkgs-unstable": {
      "locked": {
-        "lastModified": 1788179007,
-        "narHash": "sha256-hn1oU2rue2SYK8dAr8+WNZWtbsz1S2W5mnHlSEuh3bo=",
+        "lastModified": 1793110635,
+        "narHash": "sha256-dhoW6VgFWlaodSY5jrBn+CF2FLmaUvDVgM7+C7T2+NM=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "34ab99075ac4f7e40cf037eef32cb1c360bb85e9",
+        "rev": "31ecbaca1bdefa45dffc409f0250bd8039ea0010",
        "type": "github"
      },
      "original": {
@@ -251,11 +251,11 @@
    },
    "nixpkgs_2": {
      "locked": {
-        "lastModified": 1767892417,
-        "narHash": "sha256-8bW3q88CEg2u4hSP66Vf4lpbLonHz7hqDNBMcCY7E9U=",
-        "rev": "3497aa5c9457a9d88d71fa93a4a8368816fbeeba",
+        "lastModified": 1789546076,
+        "narHash": "sha256-vWkSk5bbfTqdtMoSgD9FshACO8JCvXTFi+3cqEp0mH0=",
+        "rev": "b1b875982b17dabde9b4a37f3e229e74913e6db3",
        "type": "tarball",
-        "url": "https://releases.nixos.org/nixos/unstable/nixos-26.05pre924538.3497aa5c9457/nixexprs.tar.xz"
+        "url": "https://releases.nixos.org/nixos/unstable/nixos-26.11pre1074753.b1b875982b17/nixexprs.tar.xz"
      },
      "original": {
        "type": "tarball",
@@ -264,11 +264,11 @@
    },
    "nixpkgs_3": {
      "locked": {
-        "lastModified": 1792615934,
-        "narHash": "sha256-MlvRfa1O5Cqc2/a+gG+l9TSuowEoCKCmrJ1d9oAVm0I=",
+        "lastModified": 1793183032,
+        "narHash": "sha256-56mFMf8heLNfYhcgbrh4GpN5x+G9JOfTFXZC3n6w0qM=",
        "owner": "NixOS",
        "repo": "nixpkgs",
-        "rev": "da6dc0e7b26060f2f71ce3ef7088fb56ee44fa36",
+        "rev": "08d3a97586f6b6343b3b5e799980773629432610",
        "type": "github"
      },
      "original": {
@@ -354,11 +354,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1788337237,
-        "narHash": "sha256-gkSH8VUtCo6hnysNmb9DbTuDepH2t5pv+QWjP75xKAk=",
+        "lastModified": 1793052255,
+        "narHash": "sha256-Y/JIHTnMlOabDfyaSBubWGLDIVGihLEUuoMhFvQKaDo=",
        "owner": "Mic92",
        "repo": "sops-nix",
-        "rev": "fbf759290e0cb0a98dfc813a4eb7d53ad1dacb57",
+        "rev": "60182817ee048ac94b4c68ea76d5ef2e8aac730d",
        "type": "github"
      },
      "original": {
@@ -370,11 +370,11 @@
    "spectrum": {
      "flake": false,
      "locked": {
-        "lastModified": 1785761586,
-        "narHash": "sha256-MWOMVqJJERwjQGgRIv8d6rlEBqbLM3VZWxHkNKIIZNw=",
+        "lastModified": 1786032750,
+        "narHash": "sha256-+Ba/kIn5BjvV7PN8bWOo7RoqgTY/Yv2M7qeMf3wS2Ag=",
        "ref": "refs/heads/main",
-        "rev": "a7762d6f54b40560dd5255ce902e6e6a5d980fe9",
-        "revCount": 1416,
+        "rev": "77d2389874bb092b8dbf05ecc5b1030372e80e98",
+        "revCount": 1417,
        "type": "git",
        "url": "https://spectrum-os.org/git/spectrum"
      },
@@ -504,11 +504,11 @@
        "systems": "systems_3"
      },
      "locked": {
-        "lastModified": 1731533236,
-        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
+        "lastModified": 1791914995,
+        "narHash": "sha256-Zf/xfQEAasnwnmEfHqW/4hjDE/s44yn2hD4RuVIZRjA=",
        "owner": "numtide",
        "repo": "flake-utils",
-        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
+        "rev": "b7a79d3fea1e214f6d668d521cecec0c01e26544",
        "type": "github"
      },
      "original": {
@@ -6,6 +6,7 @@ let
  hosts = import ../hosts.nix {};
 in
 {
+  microvm.vcpu = 2;
  sops.defaultSopsFile = ./secrets.yaml;
  sops.secrets = {
    nextcloudAdminPass = {
@@ -39,7 +40,7 @@ in

  services.nextcloud = {
    enable = true;
-    package = pkgs.nextcloud33;
+    package = pkgs.nextcloud35;
    hostName = "cloud.malobeo.org";
    config.adminpassFile = config.sops.secrets.nextcloudAdminPass.path;
    maxUploadSize = "10G";
@@ -49,16 +50,10 @@ in
    configureRedis = true;
    caching = {
      redis = true;
-      apcu = true;
    };
    extraAppsEnable = true;
    extraApps = {
-      inherit (config.services.nextcloud.package.packages.apps) contacts calendar polls registration collectives forms;
-      deck = pkgs.fetchNextcloudApp {
-        sha256 = "sha256-Oc/J0Ey7f9aHhLBWoAXaDMe2t0eeEQKvpwY510qNpiI=";
-        url = "https://s3.g.megas4.com/ya5mczgkbk6bw7tcy2yr4bl2vdryfe76ok2dj/malo/deck33.tar.gz";
-        license = "agpl3Plus";
-      };
+      inherit (config.services.nextcloud.package.packages.apps) contacts calendar polls registration collectives forms deck;
    };
    settings = {
      trusted_domains = [ "cloud.malobeo.org" "cloud.hq.malobeo.org" ];
@@ -68,7 +63,6 @@ in
      "default_phone_region" = "DE";
    };
    phpOptions = {
-      "realpath_cache_size" = "0";
      "opcache.interned_strings_buffer" = "32";
    };
  };
@@ -1,12 +1,7 @@
-nextcloudAdminPass: ENC[AES256_GCM,data:es9hhtCcqBqPbV2L,iv:Kyq5kqao0uaMPs0GeRkJT9OWYSZfImBXngg51k0uQ0M=,tag:zN/u90/j4rmdo0HtY+cF9w==,type:str]
+nextcloudAdminPass: ENC[AES256_GCM,data:RsP8Q1FqS9qgYTNe+H/nDHwQwr0fvlQawCOJWZVoF2U=,iv:AqJ79m3GAUd6sczDByJlb+K3XxxEt3HS4fURd7kn0bY=,tag:n/GyRKrIwOcksDtewnnXZw==,type:str]
 sops:
-    kms: []
-    gcp_kms: []
-    azure_kv: []
-    hc_vault: []
    age:
-        - recipient: age1ljpdczmg5ctqyeezn739hv589fwhssjjnuqf7276fqun6kc62v3qmhkd0c
-          enc: |
+        - enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBPT3ZxNEpRVktDWG9BR0Rv
            ZUZQTkJwQ0pSblNvTkFOT3BBdjVaSzJhVzBvCnVWc2xRUjBnRFFXSDgxczRMSFMy
@@ -14,8 +9,8 @@ sops:
            aDd0UlpMR3RNd3BDMmhqNmxhTFRoUlkK6Pni+cswKIU94WkP/fg5fzSmx/fhXjjl
            mRG2o4ALCqcOxAxHBrKJppUCLjUgKG53wPF/jlIzkvbwHwnqVMfYsQ==
            -----END AGE ENCRYPTED FILE-----
-        - recipient: age1g084sl230x94mkd2wq92s03mw0e8mnpjdjfx9uzaxw6psm8neyzqqwpnqe
-          enc: |
+          recipient: age1ljpdczmg5ctqyeezn739hv589fwhssjjnuqf7276fqun6kc62v3qmhkd0c
+        - enc: |
            -----BEGIN AGE ENCRYPTED FILE-----
            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBRK2o2K2tPTFcvbXRkZ0lq
            bS9ZOUc3dG1JeERZYVNsc3k3RjcxQ0RsdkRJCkx1VFhBQXRDOElqakJ0eTd3NEJX
@@ -23,8 +18,9 @@ sops:
            VjBFeldXS1p0Zk1uSk02aHpJd3BPOHcKvCmnK/KttB4RgnID/fj2KOdjvNnV3EWU
            B9mW4yxbEqhoxtu+GFD3eR/8SvMPEsHl9xorT/ZygMG7hAzedSukWw==
            -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-26T20:00:50Z"
-    mac: ENC[AES256_GCM,data:qoY9SfpoU+8HfvD5v/1S6BOkbnZUmHIbtwr0tTSuPETjnFNgr1VVw9mnRatJKPYYFb9/rMZQWIqTY+iUIEkcTVyVXhd6ki5CHW+uxCeBIyMzq33rtEa/btkEUoii4iPieamBCIY21W0znE+edxfR04yRJtLxMICEbuW4Hjf6bwk=,iv:nG42fRgjpuIjPMYnn/6egEdzYolcUBsspaZ8zMv4888=,tag:C6apGoAvVLsWdLWSCwrx6w==,type:str]
+          recipient: age1g084sl230x94mkd2wq92s03mw0e8mnpjdjfx9uzaxw6psm8neyzqqwpnqe
+    lastmodified: "2026-10-22T19:07:13Z"
+    mac: ENC[AES256_GCM,data:HD1uqrxxfLrHGQfu7HFpuunpj/npPe35AvvFrhGFRUTtXLGRPDn5xeOiuHyT+qSs51lukE+hYhv/+u4xolb0SInOJtPTZ6suRcZ4maJ+9P0mgjs7OmI4e68CpGo0xuOg378WvlF15VQH2KCcVskEkO9UBTfOUmyNku1g4F6PeWw=,iv:cJaz6dYkspBlBY9aCaK2/zBDiVg7J7nCE+fnwNHz1Tw=,tag:5sKITZ8uD7JnRtwhaOPoGw==,type:str]
    pgp:
        - created_at: "2025-03-05T08:24:30Z"
          enc: |-
@@ -65,4 +61,4 @@ sops:
            -----END PGP MESSAGE-----
          fp: aef8d6c7e4761fc297cda833df13aebb1011b5d4
    unencrypted_suffix: _unencrypted
-    version: 3.8.1
+    version: 3.13.3
Author	SHA1	Message	Date
malobot	2ab3c9e670	Update flake.lock Hydra callback / on_push (pull_request) Skipped Details Hydra callback / on_pr (pull_request) Failing after 1h17m34s Details	2026-10-29 04:02:52 +00:00
ahtlon	0862da3576	Merge pull request '[nextcloud] upgrade to hub 26 summer/v35' (#206 ) from nextcloud_35 into master Hydra callback / on_pr (push) Skipped Details Hydra callback / on_push (push) Skipped Details Check flake syntax / flake-check (push) Successful in 11m38s Details Reviewed-on: #206 Reviewed-by: kalipso <kalipso@c3d2.de>	2026-10-27 17:24:36 +01:00
ahtlon	9c884e553c	[nextcloud] increase cpu count for nextcloud microvm Hydra callback / on_push (pull_request) Skipped Details Hydra callback / on_pr (pull_request) Successful in 2m9s Details Check flake syntax / flake-check (push) Successful in 12m14s Details	2026-10-26 10:49:59 +01:00
ahtlon	fcb9642023	[nextcloud] upgrade to hub 26 summer/v35 Hydra callback / on_push (pull_request) Skipped Details Hydra callback / on_pr (pull_request) Successful in 7m14s Details Check flake syntax / flake-check (push) Successful in 17m41s Details	2026-10-25 00:55:25 +02:00
ahtlon	ce09e8003e	Merge pull request 'Upgrade nextcloud to v34' (#205 ) from nextcloud_upgrade_34 into master Hydra callback / on_pr (push) Skipped Details Hydra callback / on_push (push) Skipped Details Check flake syntax / flake-check (push) Successful in 24m58s Details Reviewed-on: #205	2026-10-23 00:21:38 +02:00
ahtlon	cbcf5a0c5b	[nextcloud] use default deck app Hydra callback / on_pr (pull_request) Successful in 6m15s Details Hydra callback / on_push (pull_request) Skipped Details Check flake syntax / flake-check (push) Successful in 20m51s Details With thanks to https://github.com/nextcloud/deck/pull/7765	2026-10-22 21:14:34 +02:00
ahtlon	52b43a9b2b	[Nextcloud] upgrade to 34	2026-10-22 21:14:34 +02:00
ahtlon	5c373880fd	[Nextcloud] Update admin pass	2026-10-22 21:14:34 +02:00
kalipso	f7533dff9d	Merge pull request 'Fix PHP critical RCE' (#204 ) from php_fix into master Hydra callback / on_pr (push) Skipped Details Hydra callback / on_push (push) Skipped Details Check flake syntax / flake-check (push) Successful in 26m29s Details	2026-10-22 12:07:32 +02:00