chore: weekly flake update #55

Merged

pazpi merged 2 commits from auto-update/2026-09-11 into master 2026-09-11 18:43:47 +02:00

Conversation 2 Commits 2 Files changed 4 +38 -46

pazpi commented 2026-09-11 12:01:11 +02:00

Owner

Copy link

Automated flake update from CI.

This PR updates all flake inputs.

Automated flake update from CI. This PR updates all flake inputs.

pazpi self-assigned this 2026-09-11 12:01:11 +02:00

pazpi added 1 commit 2026-09-11 12:01:11 +02:00

chore: update flake inputs 2026-09-11 5f5ff778b7

pazpi commented 2026-09-11 12:38:26 +02:00

Author

Owner

Copy link

❌ Build Failed

The following hosts failed to build:

caddy

error: hash mismatch in fixed-output derivation '/nix/store/v3cla705rrflf0da6vfarb3lf6qjv0mz-caddy-src-with-plugins-f4a74c819cdd68c6a5e38b405233cf1c-2.11.4.drv':
         specified: sha256-Dx07K6/uskIAJ3rfGgYK4967Qlj6o9T78AF4uqLZc2Q=
            got:    sha256-Ym8/EqnpPD5mubQCt6l225O5T6eNwRNU44D/ol03lZk=
error: Cannot build '/nix/store/fkq8jgla1zqrgwcmcyasdc3gjw7q7fiy-caddy-2.11.4.drv'.
       Reason: 1 dependency failed.
       Output paths:
         /nix/store/g3syb96rkbvgiicwclz76vdnvyw33lk5-caddy-2.11.4
error: Cannot build '/nix/store/10s0lj9vgvbs0ls3zrvjr749iy736i4d-Caddyfile-formatted.drv'.
       Reason: 1 dependency failed.
       Output paths:
         /nix/store/frii6jgqa5bdnn5csiccx47azyndd118-Caddyfile-formatted
error: Cannot build '/nix/store/iabbrw5b9jm5jahb4ms2aip949asdivp-etc.drv'.
       Reason: 1 dependency failed.
       Output paths:
         /nix/store/xancbg2awhm702pnkafx9vw6h9f16h0m-etc
error: Cannot build '/nix/store/vxvspqww2z2b2ywf7ipmig5x4zvll1mv-nixos-system-unnamed-lxc-proxmox-26.05.20260910.d58a46e.drv'.
       Reason: 1 dependency failed.
       Output paths:
         /nix/store/gqrl1gp4d269fy7lzggd8hh80ja9s6rc-nixos-system-unnamed-lxc-proxmox-26.05.20260910.d58a46e

colmena

evaluation warning: stdenv.isLinux is deprecated, use stdenv.hostPlatform.isLinux instead
evaluation warning: stdenv.isDarwin is deprecated, use stdenv.hostPlatform.isDarwin instead
error:
       … while calling the 'head' builtin
         at «github:NixOS/nixpkgs/d58a46e3bc02d91ebe04667f8397752a749c0024?narHash=sha256-GB16oaxpsrnGNnGIE%2B0uYBqMRzB9X6FYDUvjvnJAYew%3D»/lib/attrsets.nix:1717:13:
         1716|           if length values == 1 || pred here (elemAt values 1) (head values) then
         1717|             head values
             |             ^
         1718|           else

       … while evaluating the attribute 'value'
         at «github:NixOS/nixpkgs/d58a46e3bc02d91ebe04667f8397752a749c0024?narHash=sha256-GB16oaxpsrnGNnGIE%2B0uYBqMRzB9X6FYDUvjvnJAYew%3D»/lib/modules.nix:1167:7:
         1166|     // {
         1167|       value = addErrorContext "while evaluating the option `${showOption loc}':" value;
             |       ^
         1168|       inherit (res.defsFinal') highestPrio;

       … while evaluating the option `system.build.toplevel':

       … while evaluating definitions from `/nix/store/9g5ii96ynv0cgdnninnv0rw37w5aai63-source/nixos/modules/system/activation/top-level.nix':

       … while evaluating the option `warnings':

       … while evaluating definitions from `/nix/store/9g5ii96ynv0cgdnninnv0rw37w5aai63-source/nixos/modules/system/boot/systemd.nix':

       … while evaluating the option `systemd.services.home-manager-pazpi.serviceConfig':

       … while evaluating definitions from `/nix/store/v573js9566ja0r1r1s8pw6y06z2wq5k4-source/nixos':

       … while evaluating the option `home-manager.users.pazpi.home.file."/home/pazpi/.config/fontconfig/conf.d/10-hm-fonts.conf".source':

       … while evaluating definitions from `/nix/store/v573js9566ja0r1r1s8pw6y06z2wq5k4-source/modules/files.nix':

       … while evaluating the option `home-manager.users.pazpi.home.file."/home/pazpi/.config/fontconfig/conf.d/10-hm-fonts.conf".text':

       … while evaluating definitions from `/nix/store/v573js9566ja0r1r1s8pw6y06z2wq5k4-source/modules/misc/xdg.nix':

       … while evaluating the option `home-manager.users.pazpi.xdg.configFile."fontconfig/conf.d/10-hm-fonts.conf".text':

       … while evaluating definitions from `/nix/store/v573js9566ja0r1r1s8pw6y06z2wq5k4-source/modules/misc/fontconfig.nix':

       … while evaluating the option `home-manager.users.pazpi.fonts.fontconfig.configFile.fonts.text':

       … while evaluating definitions from `/nix/store/v573js9566ja0r1r1s8pw6y06z2wq5k4-source/modules/misc/fontconfig.nix':

       (stack trace truncated; use '--show-trace' to show the full, detailed trace)

       error: attribute 'importService' missing
       at «github:NixOS/nixpkgs/8ce4ef6cb6f871616146b9fe26d2a5ae594e94fe?narHash=sha256-xB8mKMOx1IA9vTDNLmJZ6n4wCMq/cuWBBOzGCRnqxrU%3D»/lib/services/lib.nix:116:24:
          115|       serviceManagerPkgs ? throw "lib.services.configure: `serviceManagerPkgs` is required unless `baseModules` is set",
          116|       baseModules ? [ (lib.importService { pkgs = serviceManagerPkgs; }) ],
             |                        ^
          117|       extraRootModules ? [ ],

immich

error:
       … while calling the 'head' builtin
         at «github:NixOS/nixpkgs/d58a46e3bc02d91ebe04667f8397752a749c0024?narHash=sha256-GB16oaxpsrnGNnGIE%2B0uYBqMRzB9X6FYDUvjvnJAYew%3D»/lib/attrsets.nix:1717:13:
         1716|           if length values == 1 || pred here (elemAt values 1) (head values) then
         1717|             head values
             |             ^
         1718|           else

       … while evaluating the attribute 'value'
         at «github:NixOS/nixpkgs/d58a46e3bc02d91ebe04667f8397752a749c0024?narHash=sha256-GB16oaxpsrnGNnGIE%2B0uYBqMRzB9X6FYDUvjvnJAYew%3D»/lib/modules.nix:1167:7:
         1166|     // {
         1167|       value = addErrorContext "while evaluating the option `${showOption loc}':" value;
             |       ^
         1168|       inherit (res.defsFinal') highestPrio;

       … while evaluating the option `system.build.toplevel':

       … while evaluating definitions from `/nix/store/9g5ii96ynv0cgdnninnv0rw37w5aai63-source/nixos/modules/system/activation/top-level.nix':

       … while evaluating the option `warnings':

       … while evaluating definitions from `/nix/store/9g5ii96ynv0cgdnninnv0rw37w5aai63-source/nixos/modules/system/boot/systemd.nix':

       … while evaluating the option `systemd.services.immich-server.serviceConfig':

       … while evaluating definitions from `/nix/store/9g5ii96ynv0cgdnninnv0rw37w5aai63-source/nixos/modules/services/web-apps/immich.nix':

       (stack trace truncated; use '--show-trace' to show the full, detailed trace)

       error: Refusing to evaluate package 'immich-2.7.5' in /nix/store/9g5ii96ynv0cgdnninnv0rw37w5aai63-source/pkgs/by-name/im/immich/package.nix:302 because it is marked as insecure

       Known issues:
        - Immich 2.x.x will not receive further updates. Immich 3.x.x is available in NixOS 26.11 (unstable at the time of writing)
        - CVE-2026-59258
        - CVE-2026-82272

       You can install it anyway by allowing this package, using the
       following methods:

       a) To temporarily allow all insecure packages, you can use an environment
          variable for a single invocation of the nix tools:

            $ export NIXPKGS_ALLOW_INSECURE=1

          Note: When using `nix shell`, `nix build`, `nix develop`, etc with a flake,
                then pass `--impure` in order to allow use of environment variables.

       b) for `nixos-rebuild` you can add ‘immich-2.7.5’ to
          `nixpkgs.config.permittedInsecurePackages` in the configuration.nix,
          like so:

            {
              nixpkgs.config.permittedInsecurePackages = [
                "immich-2.7.5"
              ];
            }

       c) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add
          ‘immich-2.7.5’ to `permittedInsecurePackages` in
          ~/.config/nixpkgs/config.nix, like so:

            {
              permittedInsecurePackages = [
                "immich-2.7.5"
              ];
            }

## ❌ Build Failed The following hosts failed to build: <details> <summary><b>caddy</b></summary> ``` error: hash mismatch in fixed-output derivation '/nix/store/v3cla705rrflf0da6vfarb3lf6qjv0mz-caddy-src-with-plugins-f4a74c819cdd68c6a5e38b405233cf1c-2.11.4.drv': specified: sha256-Dx07K6/uskIAJ3rfGgYK4967Qlj6o9T78AF4uqLZc2Q= got: sha256-Ym8/EqnpPD5mubQCt6l225O5T6eNwRNU44D/ol03lZk= error: Cannot build '/nix/store/fkq8jgla1zqrgwcmcyasdc3gjw7q7fiy-caddy-2.11.4.drv'. Reason: 1 dependency failed. Output paths: /nix/store/g3syb96rkbvgiicwclz76vdnvyw33lk5-caddy-2.11.4 error: Cannot build '/nix/store/10s0lj9vgvbs0ls3zrvjr749iy736i4d-Caddyfile-formatted.drv'. Reason: 1 dependency failed. Output paths: /nix/store/frii6jgqa5bdnn5csiccx47azyndd118-Caddyfile-formatted error: Cannot build '/nix/store/iabbrw5b9jm5jahb4ms2aip949asdivp-etc.drv'. Reason: 1 dependency failed. Output paths: /nix/store/xancbg2awhm702pnkafx9vw6h9f16h0m-etc error: Cannot build '/nix/store/vxvspqww2z2b2ywf7ipmig5x4zvll1mv-nixos-system-unnamed-lxc-proxmox-26.05.20260910.d58a46e.drv'. Reason: 1 dependency failed. Output paths: /nix/store/gqrl1gp4d269fy7lzggd8hh80ja9s6rc-nixos-system-unnamed-lxc-proxmox-26.05.20260910.d58a46e ``` </details> <details> <summary><b>colmena</b></summary> ``` evaluation warning: stdenv.isLinux is deprecated, use stdenv.hostPlatform.isLinux instead evaluation warning: stdenv.isDarwin is deprecated, use stdenv.hostPlatform.isDarwin instead error: … while calling the 'head' builtin at «github:NixOS/nixpkgs/d58a46e3bc02d91ebe04667f8397752a749c0024?narHash=sha256-GB16oaxpsrnGNnGIE%2B0uYBqMRzB9X6FYDUvjvnJAYew%3D»/lib/attrsets.nix:1717:13: 1716| if length values == 1 || pred here (elemAt values 1) (head values) then 1717| head values | ^ 1718| else … while evaluating the attribute 'value' at «github:NixOS/nixpkgs/d58a46e3bc02d91ebe04667f8397752a749c0024?narHash=sha256-GB16oaxpsrnGNnGIE%2B0uYBqMRzB9X6FYDUvjvnJAYew%3D»/lib/modules.nix:1167:7: 1166| // { 1167| value = addErrorContext "while evaluating the option `${showOption loc}':" value; | ^ 1168| inherit (res.defsFinal') highestPrio; … while evaluating the option `system.build.toplevel': … while evaluating definitions from `/nix/store/9g5ii96ynv0cgdnninnv0rw37w5aai63-source/nixos/modules/system/activation/top-level.nix': … while evaluating the option `warnings': … while evaluating definitions from `/nix/store/9g5ii96ynv0cgdnninnv0rw37w5aai63-source/nixos/modules/system/boot/systemd.nix': … while evaluating the option `systemd.services.home-manager-pazpi.serviceConfig': … while evaluating definitions from `/nix/store/v573js9566ja0r1r1s8pw6y06z2wq5k4-source/nixos': … while evaluating the option `home-manager.users.pazpi.home.file."/home/pazpi/.config/fontconfig/conf.d/10-hm-fonts.conf".source': … while evaluating definitions from `/nix/store/v573js9566ja0r1r1s8pw6y06z2wq5k4-source/modules/files.nix': … while evaluating the option `home-manager.users.pazpi.home.file."/home/pazpi/.config/fontconfig/conf.d/10-hm-fonts.conf".text': … while evaluating definitions from `/nix/store/v573js9566ja0r1r1s8pw6y06z2wq5k4-source/modules/misc/xdg.nix': … while evaluating the option `home-manager.users.pazpi.xdg.configFile."fontconfig/conf.d/10-hm-fonts.conf".text': … while evaluating definitions from `/nix/store/v573js9566ja0r1r1s8pw6y06z2wq5k4-source/modules/misc/fontconfig.nix': … while evaluating the option `home-manager.users.pazpi.fonts.fontconfig.configFile.fonts.text': … while evaluating definitions from `/nix/store/v573js9566ja0r1r1s8pw6y06z2wq5k4-source/modules/misc/fontconfig.nix': (stack trace truncated; use '--show-trace' to show the full, detailed trace) error: attribute 'importService' missing at «github:NixOS/nixpkgs/8ce4ef6cb6f871616146b9fe26d2a5ae594e94fe?narHash=sha256-xB8mKMOx1IA9vTDNLmJZ6n4wCMq/cuWBBOzGCRnqxrU%3D»/lib/services/lib.nix:116:24: 115| serviceManagerPkgs ? throw "lib.services.configure: `serviceManagerPkgs` is required unless `baseModules` is set", 116| baseModules ? [ (lib.importService { pkgs = serviceManagerPkgs; }) ], | ^ 117| extraRootModules ? [ ], ``` </details> <details> <summary><b>immich</b></summary> ``` error: … while calling the 'head' builtin at «github:NixOS/nixpkgs/d58a46e3bc02d91ebe04667f8397752a749c0024?narHash=sha256-GB16oaxpsrnGNnGIE%2B0uYBqMRzB9X6FYDUvjvnJAYew%3D»/lib/attrsets.nix:1717:13: 1716| if length values == 1 || pred here (elemAt values 1) (head values) then 1717| head values | ^ 1718| else … while evaluating the attribute 'value' at «github:NixOS/nixpkgs/d58a46e3bc02d91ebe04667f8397752a749c0024?narHash=sha256-GB16oaxpsrnGNnGIE%2B0uYBqMRzB9X6FYDUvjvnJAYew%3D»/lib/modules.nix:1167:7: 1166| // { 1167| value = addErrorContext "while evaluating the option `${showOption loc}':" value; | ^ 1168| inherit (res.defsFinal') highestPrio; … while evaluating the option `system.build.toplevel': … while evaluating definitions from `/nix/store/9g5ii96ynv0cgdnninnv0rw37w5aai63-source/nixos/modules/system/activation/top-level.nix': … while evaluating the option `warnings': … while evaluating definitions from `/nix/store/9g5ii96ynv0cgdnninnv0rw37w5aai63-source/nixos/modules/system/boot/systemd.nix': … while evaluating the option `systemd.services.immich-server.serviceConfig': … while evaluating definitions from `/nix/store/9g5ii96ynv0cgdnninnv0rw37w5aai63-source/nixos/modules/services/web-apps/immich.nix': (stack trace truncated; use '--show-trace' to show the full, detailed trace) error: Refusing to evaluate package 'immich-2.7.5' in /nix/store/9g5ii96ynv0cgdnninnv0rw37w5aai63-source/pkgs/by-name/im/immich/package.nix:302 because it is marked as insecure Known issues: - Immich 2.x.x will not receive further updates. Immich 3.x.x is available in NixOS 26.11 (unstable at the time of writing) - CVE-2026-59258 - CVE-2026-82272 You can install it anyway by allowing this package, using the following methods: a) To temporarily allow all insecure packages, you can use an environment variable for a single invocation of the nix tools: $ export NIXPKGS_ALLOW_INSECURE=1 Note: When using `nix shell`, `nix build`, `nix develop`, etc with a flake, then pass `--impure` in order to allow use of environment variables. b) for `nixos-rebuild` you can add ‘immich-2.7.5’ to `nixpkgs.config.permittedInsecurePackages` in the configuration.nix, like so: { nixpkgs.config.permittedInsecurePackages = [ "immich-2.7.5" ]; } c) For `nix-env`, `nix-build`, `nix-shell` or any other Nix command you can add ‘immich-2.7.5’ to `permittedInsecurePackages` in ~/.config/nixpkgs/config.nix, like so: { permittedInsecurePackages = [ "immich-2.7.5" ]; } ``` </details>

pazpi commented 2026-09-11 18:36:13 +02:00

Author

Owner

Copy link

Fixed the three CI build failures:

caddy - Updated the caddy.withPlugins fixed-output hash in modules/networking/caddy.nix after the flake bump changed the plugin bundle.

immich - Marked the host unstable = true so it picks up Immich 3.x from nixpkgs-unstable. Stable 26.05 still ships 2.7.5, which is now blocked as insecure. Temporary until nixos-26.11 lands.

colmena - Also marked unstable = true and removed the manual pkgsUnstable override in home-manager. Colmena previously ran stable NixOS but injected unstable pkgs into HM only (useGlobalPkgs = false +
extraSpecialArgs). After the flake update, unstable HM modules (fontconfig → lib.services → lib.importService) failed because HM still had stable lib. Overriding lib alone broke lib.hm. Making the whole host unstable
aligns pkgs/lib for NixOS and HM. Also temporary — should revert to stable when 26.11 is out, unless we intentionally want newer CLI tools from unstable again.

Verified locally: nix build .#nixosConfigurations.{caddy,colmena,immich}.config.system.build.toplevel

Fixed the three CI build failures: **caddy** - Updated the `caddy.withPlugins` fixed-output hash in `modules/networking/caddy.nix` after the flake bump changed the plugin bundle. **immich** - Marked the host `unstable = true` so it picks up Immich 3.x from nixpkgs-unstable. Stable 26.05 still ships 2.7.5, which is now blocked as insecure. Temporary until nixos-26.11 lands. **colmena** - Also marked `unstable = true` and removed the manual `pkgsUnstable` override in home-manager. Colmena previously ran stable NixOS but injected unstable `pkgs` into HM only (`useGlobalPkgs = false` + `extraSpecialArgs`). After the flake update, unstable HM modules (fontconfig → `lib.services` → `lib.importService`) failed because HM still had stable `lib`. Overriding `lib` alone broke `lib.hm`. Making the whole host unstable aligns pkgs/lib for NixOS and HM. Also temporary — should revert to stable when 26.11 is out, unless we intentionally want newer CLI tools from unstable again. Verified locally: `nix build .#nixosConfigurations.{caddy,colmena,immich}.config.system.build.toplevel`

pazpi changed title from WIP: chore: weekly flake update to chore: weekly flake update 2026-09-11 18:36:14 +02:00

pazpi added 1 commit 2026-09-11 18:36:34 +02:00

Fix immich and colmena by going unstable and change caddy hash 9fab2f9616

pazpi merged commit 2cf0b128b1 into master 2026-09-11 18:43:47 +02:00

pazpi deleted branch auto-update/2026-09-11 2026-09-11 18:43:47 +02:00

pazpi referenced this pull request from a commit 2026-09-11 18:43:48 +02:00

Merge pull request 'chore: weekly flake update' (#55) from auto-update/2026-09-11 into master

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

pazpi

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

pazpi/nix!55

No description provided.