Huge commit...like usual I guess

flake.nix

@@ -2,7 +2,7 @@
   description = "Fudo Host Configuration";
 
   inputs = {
-    nixpkgs.url = "nixpkgs/nixos-22.11";
+    nixpkgs.url = "nixpkgs/nixos-23.05";
 
     fudo-home = {
       url = "git+https://git.fudo.org/fudo-nix/home.git";
@@ -22,32 +22,127 @@
 
     fudo-secrets.url = "path:/secrets";
 
-    chute.url = "git+https://git.fudo.org/chute/chute.git?ref=stable";
+    chute = {
+      url = "git+https://git.fudo.org/chute/chute.git?ref=stable";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
 
-    chuteUnstable.url = "git+https://git.fudo.org/chute/chute.git?ref=master";
+    chuteUnstable = {
+      url = "git+https://git.fudo.org/chute/chute.git?ref=master";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
 
-    pricebot.url = "git+https://git.fudo.org/fudo-public/pricebot.git";
+    pricebot = {
+      url = "git+https://git.fudo.org/fudo-public/pricebot.git";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
 
     nixpkgsUnstable.url = "nixpkgs/nixos-unstable";
 
     nixpkgs2111.url = "nixpkgs/nixos-21.11";
 
-    wallfly.url = "git+https://git.fudo.org/fudo-public/wallfly.git";
+    wallfly = {
+      url = "git+https://git.fudo.org/fudo-public/wallfly.git";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
 
-    objectifier.url = "git+https://git.fudo.org/fudo-public/objectifier.git";
+    objectifier = {
+      url = "git+https://git.fudo.org/fudo-public/objectifier.git";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
 
-    nexus.url = "git+https://git.fudo.org/fudo-public/nexus.git";
+    nexus = {
+      url = "git+https://git.fudo.org/fudo-public/nexus.git";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
 
-    suanni.url = "git+https://git.fudo.org/fudo-public/suanni.git";
+    suanni = {
+      url = "git+https://git.fudo.org/fudo-public/suanni.git";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
 
-    snooper.url = "git+https://git.fudo.org/fudo-public/snooper.git";
+    snooper = {
+      url = "git+https://git.fudo.org/fudo-public/snooper.git";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
 
-    tattler.url = "git+https://git.fudo.org/fudo-public/tattler.git";
+    tattler = {
+      url = "git+https://git.fudo.org/fudo-public/tattler.git";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+
+    arion = {
+      url = "github:hercules-ci/arion";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+
+    lemmy-docker = {
+      url = "git+https://git.fudo.org/fudo-public/lemmy-docker.git";
+      inputs = {
+        nixpkgs.follows = "nixpkgs";
+        arion.follows = "arion";
+      };
+    };
+
+    tesla-mate-container = {
+      url = "git+https://git.fudo.org/fudo-public/tesla-mate-container.git";
+      inputs = {
+        nixpkgs.follows = "nixpkgs";
+        arion.follows = "arion";
+      };
+    };
+
+    mastodon-container = {
+      url = "git+https://git.fudo.org/fudo-public/mastodon-container.git";
+      inputs = {
+        nixpkgs.follows = "nixpkgs";
+        arion.follows = "arion";
+      };
+    };
+
+    authentik-container = {
+      url = "git+https://git.fudo.org/fudo-nix/authentik-container.git";
+      inputs = {
+        nixpkgs.follows = "nixpkgs";
+        arion.follows = "arion";
+      };
+    };
+
+    nextcloud-container = {
+      url = "git+https://git.fudo.org/fudo-public/nextcloud-container.git";
+      inputs = {
+        nixpkgs.follows = "nixpkgs";
+        arion.follows = "arion";
+      };
+    };
+
+    matrix-module = {
+      url = "git+https://git.fudo.org/fudo-public/matrix-module.git";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+
+    mail-server = {
+      url = "git+https://git.fudo.org/fudo-public/mail-server.git";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+
+    authoritative-dns = {
+      url = "git+https://git.fudo.org/fudo-public/authoritative-dns.git";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+
+    textfiles = {
+      url = "git+https://git.informis.land/informis/textfiles.git";
+      flake = false;
+    };
   };
 
   outputs = { self, nixpkgs, fudo-home, fudo-lib, fudo-entities, fudo-pkgs
     , fudo-secrets, chute, chuteUnstable, nixpkgsUnstable, nixpkgs2111, pricebot
-    , wallfly, objectifier, nexus, suanni, snooper, tattler, ... }@inputs:
+    , wallfly, objectifier, nexus, suanni, snooper, tattler, lemmy-docker
+    , tesla-mate-container, mastodon-container, authentik-container
+    , nextcloud-container, textfiles, matrix-module, mail-server
+    , authoritative-dns, ... }@inputs:
     with nixpkgs.lib;
     let
       fudo-nixos-hosts = filterAttrs (hostname: hostOpts: hostOpts.nixos-system)
@@ -67,8 +162,12 @@
           system = arch;
           config = {
             allowUnfree = true;
-            permittedInsecurePackages =
-              [ "openssh-with-gssapi-8.4p1" "python3.10-certifi-2022.9.24" ];
+            permittedInsecurePackages = [
+              # Necessary for Kerberos
+              "openssl-1.1.1w"
+              "python3.10-requests-2.28.2"
+              "python3.10-cryptography-40.0.1"
+            ];
           };
           overlays = [
             fudo-lib.overlay
@@ -92,6 +191,7 @@
               factorio-headless-experimental =
                 unstable.factorio-headless-experimental;
             })
+            (final: prev: { inherit textfiles; })
           ];
         };
 
@@ -118,6 +218,14 @@
             suanni.nixosModules.default
             snooper.nixosModules.default
             tattler.nixosModules.default
+            lemmy-docker.nixosModules.default
+            tesla-mate-container.nixosModules.default
+            mastodon-container.nixosModules.default
+            authentik-container.nixosModules.default
+            nextcloud-container.nixosModules.default
+            matrix-module.nixosModules.default
+            mail-server.nixosModules.default
+            authoritative-dns.nixosModules.default
 
             nexus.nixosModules.nexus-client
             nexus.nixosModules.nexus-server