update to 24.05

systems/fatteh/configuration.nix

@@ -26,14 +26,14 @@ in {
     retiolum-rsa = {
       file = ../../secrets/fatteh-retiolum-privateKey-rsa.age;
       mode = "400";
-      owner = "tinc.retiolum";
-      group = "tinc.retiolum";
+      owner = "tinc-retiolum";
+      group = "tinc-retiolum";
     };
     retiolum-ed25519 = {
       file = ../../secrets/fatteh-retiolum-privateKey-ed25519.age;
       mode = "400";
-      owner = "tinc.retiolum";
-      group = "tinc.retiolum";
+      owner = "tinc-retiolum";
+      group = "tinc-retiolum";
     };
     restic.file = ../../secrets/restic.age;
     syncthing-cert.file = ../../secrets/fatteh-syncthing-cert.age;

systems/ful/configuration.nix

@@ -39,14 +39,14 @@ in {
     retiolum-rsa = {
       file = ../../secrets/ful-retiolum-privateKey-rsa.age;
       mode = "400";
-      owner = "tinc.retiolum";
-      group = "tinc.retiolum";
+      owner = "tinc-retiolum";
+      group = "tinc-retiolum";
     };
     retiolum-ed25519 = {
       file = ../../secrets/ful-retiolum-privateKey-ed25519.age;
       mode = "400";
-      owner = "tinc.retiolum";
-      group = "tinc.retiolum";
+      owner = "tinc-retiolum";
+      group = "tinc-retiolum";
     };
     root.file = ../../secrets/ful-root.age;
     restic.file = ../../secrets/restic.age;

systems/ful/hledger.nix

@@ -5,11 +5,7 @@
 }: {
   services.hledger-web = {
     enable = true;
-    capabilities = {
-      add = true;
-      view = true;
-      manage = false;
-    };
+    allow = "edit";
     serveApi = false; # serve only the JSON API
     baseUrl = "https://ledger.kmein.de";
     journalFiles = [

systems/ful/radio.nix

@@ -126,6 +126,7 @@ in {
 
   systemd.services.radio = {
     environment.TMPDIR = liquidsoapDirectory;
+    wants = ["network-online.target"];
     serviceConfig = {
       RuntimeMaxSec = "${toString (5 * 60 * 60)}s";
       Restart = "always";

systems/kabsa/configuration.nix

@@ -31,21 +31,21 @@ in {
     retiolum-rsa = {
       file = ../../secrets/kabsa-retiolum-privateKey-rsa.age;
       mode = "400";
-      owner = "tinc.retiolum";
-      group = "tinc.retiolum";
+      owner = "tinc-retiolum";
+      group = "tinc-retiolum";
     };
     retiolum-ed25519 = {
       file = ../../secrets/kabsa-retiolum-privateKey-ed25519.age;
       mode = "400";
-      owner = "tinc.retiolum";
-      group = "tinc.retiolum";
+      owner = "tinc-retiolum";
+      group = "tinc-retiolum";
     };
     restic.file = ../../secrets/restic.age;
     syncthing-cert.file = ../../secrets/kabsa-syncthing-cert.age;
     syncthing-key.file = ../../secrets/kabsa-syncthing-key.age;
   };
 
-  environment.systemPackages = [pkgs.minecraft pkgs.zeroad];
+  environment.systemPackages = [pkgs.zeroad];
 
   networking = {
     hostName = "kabsa";

systems/makanek/configuration.nix

@@ -88,14 +88,14 @@ in {
     retiolum-rsa = {
       file = ../../secrets/makanek-retiolum-privateKey-rsa.age;
       mode = "400";
-      owner = "tinc.retiolum";
-      group = "tinc.retiolum";
+      owner = "tinc-retiolum";
+      group = "tinc-retiolum";
     };
     retiolum-ed25519 = {
       file = ../../secrets/makanek-retiolum-privateKey-ed25519.age;
       mode = "400";
-      owner = "tinc.retiolum";
-      group = "tinc.retiolum";
+      owner = "tinc-retiolum";
+      group = "tinc-retiolum";
     };
     restic.file = ../../secrets/restic.age;
   };

systems/makanek/monitoring/loki.nix

@@ -21,14 +21,13 @@
     max_chunk_age = "1h"; # All chunks will be flushed when they hit this age, default is 1h
     chunk_target_size = 1048576; # Loki will attempt to build chunks up to 1.5MB, flushing first if chunk_idle_period or max_chunk_age is reached first
     chunk_retain_period = "30s"; # Must be greater than index read cache TTL if using an index cache (Default index read cache TTL is 5m)
-    max_transfer_retries = 0; # Chunk transfers disabled
   };
   schema_config.configs = [
     {
       from = "2020-10-24";
-      store = "boltdb-shipper";
+      store = "tsdb";
       object_store = "filesystem";
-      schema = "v11";
+      schema = "v13";
       index = {
         prefix = "index_";
         period = "24h";
@@ -36,23 +35,21 @@
     }
   ];
   storage_config = {
-    boltdb_shipper = {
-      active_index_directory = "/tmp/loki/boltdb-shipper-active";
-      cache_location = "/tmp/loki/boltdb-shipper-cache";
+    tsdb_shipper = {
+      active_index_directory = "/tmp/loki/tsdb-shipper-active";
+      cache_location = "/tmp/loki/tsdb-shipper-cache";
       cache_ttl = "24h"; # Can be increased for faster performance over longer query periods, uses more disk space
-      shared_store = "filesystem";
     };
     filesystem.directory = "/tmp/loki/chunks";
   };
   compactor = {
     working_directory = "/tmp/loki/boltdb-shipper-compactor";
-    shared_store = "filesystem";
   };
   limits_config = {
     reject_old_samples = true;
     reject_old_samples_max_age = "168h";
+    allow_structured_metadata = false;
   };
-  chunk_store_config.max_look_back_period = "0s";
   table_manager = {
     retention_deletes_enabled = false;
     retention_period = "0s";

systems/makanek/nextcloud.nix

@@ -47,7 +47,7 @@ in {
 
   services.nextcloud = {
     enable = true;
-    package = pkgs.nextcloud27;
+    package = pkgs.nextcloud29;
 
     https = true;
 

systems/manakish/configuration.nix

@@ -21,14 +21,14 @@ in {
     retiolum-rsa = {
       file = ../../secrets/manakish-retiolum-privateKey-rsa.age;
       mode = "400";
-      owner = "tinc.retiolum";
-      group = "tinc.retiolum";
+      owner = "tinc-retiolum";
+      group = "tinc-retiolum";
     };
     retiolum-ed25519 = {
       file = ../../secrets/manakish-retiolum-privateKey-ed25519.age;
       mode = "400";
-      owner = "tinc.retiolum";
-      group = "tinc.retiolum";
+      owner = "tinc-retiolum";
+      group = "tinc-retiolum";
     };
     syncthing-cert.file = ../../secrets/manakish-syncthing-cert.age;
     syncthing-key.file = ../../secrets/manakish-syncthing-key.age;

systems/tabula/configuration.nix

@@ -18,14 +18,14 @@ in {
     retiolum-rsa = {
       file = ../../secrets/tabula-retiolum-privateKey-rsa.age;
       mode = "400";
-      owner = "tinc.retiolum";
-      group = "tinc.retiolum";
+      owner = "tinc-retiolum";
+      group = "tinc-retiolum";
     };
     retiolum-ed25519 = {
       file = ../../secrets/tabula-retiolum-privateKey-ed25519.age;
       mode = "400";
-      owner = "tinc.retiolum";
-      group = "tinc.retiolum";
+      owner = "tinc-retiolum";
+      group = "tinc-retiolum";
     };
   };
 

systems/tahina/configuration.nix

@@ -18,14 +18,14 @@ in {
     retiolum-rsa = {
       file = ../../secrets/tahina-retiolum-privateKey-rsa.age;
       mode = "400";
-      owner = "tinc.retiolum";
-      group = "tinc.retiolum";
+      owner = "tinc-retiolum";
+      group = "tinc-retiolum";
     };
     retiolum-ed25519 = {
       file = ../../secrets/tahina-retiolum-privateKey-ed25519.age;
       mode = "400";
-      owner = "tinc.retiolum";
-      group = "tinc.retiolum";
+      owner = "tinc-retiolum";
+      group = "tinc-retiolum";
     };
   };
 

systems/zaatar/configuration.nix

@@ -35,14 +35,14 @@ in {
     retiolum-rsa = {
       file = ../../secrets/zaatar-retiolum-privateKey-rsa.age;
       mode = "400";
-      owner = "tinc.retiolum";
-      group = "tinc.retiolum";
+      owner = "tinc-retiolum";
+      group = "tinc-retiolum";
     };
     retiolum-ed25519 = {
       file = ../../secrets/zaatar-retiolum-privateKey-ed25519.age;
       mode = "400";
-      owner = "tinc.retiolum";
-      group = "tinc.retiolum";
+      owner = "tinc-retiolum";
+      group = "tinc-retiolum";
     };
     restic = {
       file = ../../secrets/restic.age;