lots of updates from the past few months

hosts/artemis/configuration.nix

@@ -32,7 +32,7 @@
     adwaita-icon-theme
     apple-cursor
     wget
-    pinentry
+    pinentry-gnome3
     fzf
     nil
     killall

hosts/artemis/hardware-configuration.nix

@@ -18,11 +18,8 @@
     ];
     #kernelPackages = pkgs.linuxPackages_latest;
 
-    loader.systemd-boot.enable = lib.mkForce false;
-    lanzaboote = {
-      enable = true;
-      pkiBundle = "/etc/secureboot";
-    };
+    # loader.systemd-boot.enable = lib.mkForce false;
+    loader.systemd-boot.enable = true;
   };
   hardware = {
     bluetooth = {
@@ -39,7 +36,7 @@
         #intel-vaapi-driver # LIBVA_DRIVER_NAME=i965 (older but works better for Firefox/Chromium)
         intel-ocl
         libvdpau-va-gl
-        vaapiVdpau
+        libva-vdpau-driver
         intel-compute-runtime
         vpl-gpu-rt
       ];

hosts/hermes/headscale.nix

@@ -8,7 +8,10 @@ in {
       port = 8080;
       settings = {
         server_url = "https://${domain}";
-        dns = {base_domain = "net.cleslie.uk";};
+        dns = {
+          base_domain = "net.cleslie.uk";
+          override_local_dns = false;
+        };
 
         ip_prefixes = "100.64.0.0/10";
       };

hosts/hermes/media.nix

@@ -40,7 +40,7 @@ in {
     extraPackages = with pkgs; [
       intel-media-driver
       intel-vaapi-driver # previously vaapiIntel
-      vaapiVdpau
+      libva-vdpau-driver
       libvdpau-va-gl
       intel-compute-runtime # OpenCL filter support (hardware tonemapping and subtitle burn-in)
       unstable.vpl-gpu-rt # QSV on 11th gen or newer

hosts/hermes/n8n.nix

@@ -5,9 +5,9 @@ in {
     cloudflare-dyndns.domains = [domain];
     n8n = {
       enable = true;
-      webhookUrl = "https://" + domain + "/";
-      settings = {
-        port = 5678;
+      environment = {
+        PORT = "5678";
+        WEBHOOK_URL = "https://" + domain + "/";
       };
     };
     caddy.virtualHosts.${domain}.extraConfig = ''