Upgrade to NixOS 26.05

configuration.nix

@@ -237,6 +237,11 @@ with pkgs;
       owner = "63026";
       group = "63026";
     };
+    secrets.grafana = {
+      file = secrets/grafana.age;
+      owner = "grafana";
+      group = "granafa";
+    };
     identityPaths = [ "/etc/ssh/id_ed25519" ];
   };
 

flake.nix

@@ -9,7 +9,7 @@
   };
 
   inputs = {
-    nixpkgs.url = "github:NixOS/nixpkgs/nixos-25.11";
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-26.05";
     determinate.url = "https://flakehub.com/f/DeterminateSystems/determinate/*";
     agenix = {
       url = "github:ryantm/agenix";

modules/monitoring.nix

@@ -82,10 +82,13 @@ with pkgs;
   # Grafana configuration
   services.grafana = {
     enable = true;
-    settings.server = {
+    settings = {
-      domain = "grafana.psydnd.org";
+      server = {
-      http_port = 9009;
+        domain = "grafana.psydnd.org";
-      http_addr = "127.0.0.1";
+        http_port = 9009;
+        http_addr = "127.0.0.1";
+      };
+      security.secret_key = config.age.secrets.grafana.path;
     };
   };
 

modules/networking.nix

@@ -135,10 +135,10 @@ in
   services.resolved = {
     enable = true;
     llmnr = "false";
-    extraConfig = ''
+    settings.Resolve = {
-      MulticastDNS=yes
+      MulticastDNS = true;
-      DNSStubListener=no
+      DNSStubListener = false;
-    '';
+    };
   };
 
   # DNS server with ad-block

secrets/grafana.age

@@ -0,0 +1,5 @@
+age-encryption.org/v1
+-> ssh-ed25519 iUaRGg Ag32nut/aBlxEy7RPw7sV5itZSHkp8eMLVtxFxwQ8EM
+ZhK8EZWTLkxrwo+x97w4HpexDXkC1yQuKyYFujqlOgs
+--- kszqKtyubreK5mGkrJg4hrEKrfITJCCM/hW6IHKlMIE
+TÚ+À~/ œDbM?Çø×å ½œa-ð'ƒÒp^5ç›?�ï&#!àϳ‰þ~59O

secrets/secrets.nix

@@ -22,4 +22,5 @@ in
   "acme-porkbun.age".publicKeys = [ zion ];
   "microbin.age".publicKeys = [ zion ];
   "readeck.age".publicKeys = [ zion ];
+  "grafana.age".publicKeys = [ zion ];
 }