feat: Update compute01, storage01 to 23.11

machines/compute01/ds-fr/module.nix

@@ -364,7 +364,7 @@ in {
 
         ensureUsers = optional (cfg.user == "ds-fr") {
           name = "ds-fr";
-          ensurePermissions = { "DATABASE \"ds-fr\"" = "ALL PRIVILEGES"; };
+          ensureDBOwnership = true;
         };
 
         extraPlugins = with config.services.postgresql.package.pkgs;

machines/compute01/hedgedoc.nix

@@ -41,7 +41,7 @@ in {
 
       ensureUsers = [{
         name = "hedgedoc";
-        ensurePermissions = { "DATABASE hedgedoc" = "ALL PRIVILEGES"; };
+        ensureDBOwnership = true;
       }];
     };
   };

machines/compute01/mastodon.nix

@@ -12,6 +12,8 @@ in {
 
     };
 
+    streamingProcesses = 4;
+
     configureNginx = true;
 
     extraConfig = {

machines/compute01/nextcloud.nix

@@ -68,8 +68,6 @@ in {
 
     autoUpdateApps.enable = true;
 
-    enableBrokenCiphersForSSE = false;
-
     extraOptions = {
       overwritehost = host;
       "overwrite.cli.url" = "https://${host}";

machines/compute01/vaultwarden.nix

@@ -64,7 +64,7 @@ in {
 
       ensureUsers = [{
         name = "vaultwarden";
-        ensurePermissions = { "DATABASE vaultwarden" = "ALL PRIVILEGES"; };
+        ensureDBOwnership = true;
       }];
     };
   };

machines/storage01/atticd.nix

@@ -61,7 +61,7 @@ in {
 
       ensureUsers = [{
         name = "atticd";
-        ensurePermissions = { "DATABASE \"atticd\"" = "ALL PRIVILEGES"; };
+        ensureDBOwnership = true;
       }];
     };
   };

machines/storage01/forgejo.nix

@@ -16,6 +16,7 @@ in {
       user = "git";
       name = "gitea";
       passwordFile = config.age.secrets."forgejo-database_password_file".path;
+      createDatabase = false;
     };
 
     settings = {

machines/storage01/garage.nix

@@ -1,4 +1,4 @@
-{ config, ... }:
+{ config, pkgs, ... }:
 
 let
   host = "s3.dgnum.eu";
@@ -13,9 +13,13 @@ in {
   services.garage = {
     enable = true;
 
+    package = pkgs.garage_0_8;
+
     settings = {
       inherit data_dir metadata_dir;
 
+      db_engine = "sled";
+
       replication_mode = "none";
       compression_level = 7;
 

meta/nodes.nix

@@ -17,7 +17,7 @@ let
 
     deployment = { };
 
-    nixpkgs = "23.05";
+    nixpkgs = "23.11";
   } // attrs;
 in
 
@@ -27,6 +27,7 @@ builtins.mapAttrs mkNode {
       tags = [ "web" ];
     };
 
+    nixpkgs = "23.05";
     stateVersion = "23.05";
   };