flake.lock

@@ -202,16 +202,16 @@
         ]
       },
       "locked": {
-        "lastModified": 1733050161,
-        "narHash": "sha256-lYnT+EYE47f5yY3KS/Kd4pJ6CO9fhCqumkYYkQ3TK20=",
+        "lastModified": 1726989464,
+        "narHash": "sha256-Vl+WVTJwutXkimwGprnEtXc/s/s8sMuXzqXaspIGlwM=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "62d536255879be574ebfe9b87c4ac194febf47c5",
+        "rev": "2f23fa308a7c067e52dfcc30a0758f47043ec176",
         "type": "github"
       },
       "original": {
         "owner": "nix-community",
-        "ref": "release-24.11",
+        "ref": "release-24.05",
         "repo": "home-manager",
         "type": "github"
       }
@@ -430,16 +430,16 @@
     },
     "nixpkgs-raw": {
       "locked": {
-        "lastModified": 1732981179,
-        "narHash": "sha256-F7thesZPvAMSwjRu0K8uFshTk3ZZSNAsXTIFvXBT+34=",
+        "lastModified": 1732632634,
+        "narHash": "sha256-+G7n/ZD635aN0sEXQLynU7pWMd3PKDM7yBIXvYmjABQ=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "62c435d93bf046a5396f3016472e8f7c8e2aed65",
+        "rev": "6f6076c37180ea3a916f84928cf3a714c5207a30",
         "type": "github"
       },
       "original": {
         "id": "nixpkgs",
-        "ref": "nixos-24.11",
+        "ref": "nixos-24.05",
         "type": "indirect"
       }
     },

flake.nix

@@ -6,7 +6,7 @@
       url = "git+ssh://forgejo@git.everest.tailscale:4222/Toast/nix-secrets";
       flake = false;
     };
-    nixpkgs-raw.url = "nixpkgs/nixos-24.11";
+    nixpkgs-raw.url = "nixpkgs/nixos-24.05";
     nixpkgs-unstable-raw.url = "nixpkgs/nixos-unstable";
 
     agenix = {
@@ -18,7 +18,7 @@
     };
 
     home-manager = {
-      url = "github:nix-community/home-manager/release-24.11";
+      url = "github:nix-community/home-manager/release-24.05";
       inputs.nixpkgs.follows = "nixpkgs-raw";
     };
 
@@ -105,7 +105,9 @@
         nixpkgs-patched = nixpkgs-raw.legacyPackages.x86_64-linux.applyPatches {
           name = "patched-nixpkgs";
           src = nixpkgs-raw;
-          patches = [];
+          patches = [
+            ./nixpkgs-patches/backport_unstable_headscale_changes.patch
+          ];
         };
         # https://discourse.nixos.org/t/proper-way-of-applying-patch-to-system-managed-via-flake/21073/26
         nixpkgs-unstable = (import "${nixpkgs-unstable-patched}/flake.nix").outputs {self = inputs.self;};

roles/common/programs/eza.nix

@@ -9,7 +9,10 @@
         enable = true;
         enableBashIntegration = true;
         git = true;
-        icons = "auto";
+        icons =
+          if config.system.nixos.release == "24.05"
+          then true
+          else "auto";
       };
       xdg.configFile."eza/theme.yml".source = "${flakeSelf.inputs.eza-themes}/themes/catppuccin.yml";
     };

roles/server/samba.nix

@@ -3,11 +3,11 @@
     samba = {
       enable = true;
       openFirewall = true;
-      settings = {
-        "global" = {
-        "map to guest" = "bad user";
-        "guest account" = "transmission";
-        };
+      extraConfig = ''
+        map to guest = bad user
+        guest account = transmission
+      '';
+      shares = {
         "Transmission downloads" = {
           path = "${config.services.transmission.settings.download-dir}";
           "read only" = true;