flake.nix

@@ -2,7 +2,7 @@
 description = "Configuration for Everest";
 
 inputs = {
-nixpkgs.url = "nixpkgs/nixos-22.11";
+nixpkgs.url = "nixpkgs/nixos-23.05";
 nixpkgs-unstable.url = "nixpkgs/nixos-unstable";
 
 agenix = {
@@ -13,7 +13,7 @@ agenix = {
 	};
 };
 
-home-manager.url = "github:nix-community/home-manager/release-22.11";
+home-manager.url = "github:nix-community/home-manager/release-23.05";
 home-manager.inputs.nixpkgs.follows = "nixpkgs";
 
 nix-impermanence.url = "github:nix-community/impermanence";

machines/Everest/configuration.nix

@@ -76,7 +76,7 @@
 		useGlobalPkgs = true;
 		users.toast = { config, ... }: {
 			home = {
-				stateVersion = "22.11";
+				stateVersion = "23.05";
 				file = {
 					# This symlinks the Transmission downloads folder into my user's downloads folder for easy access
 					"Downloads/Transmission".source = config.lib.file.mkOutOfStoreSymlink "/var/lib/transmission/Downloads";

roles/common/configuration.nix

@@ -47,5 +47,5 @@
 		};
 	};
 
-	system.stateVersion = "22.11";
+	system.stateVersion = "23.05";
 }

roles/server/gitea.nix

@@ -5,10 +5,12 @@
 	services.gitea = {
 		enable = true;
 		# TODO: Make this not be hardcoded
-		rootUrl = "http://everest.local:3000";
 		settings = {
-			#server.SSH_PORT = 69;
-			service.DISABLE_REGISTRATION = lib.mkDefault true;
+			server = {
+				#server.SSH_PORT = 69;
+				DISABLE_REGISTRATION = lib.mkDefault true;
+				ROOT_URL = "http://everest.local:3000";
+			};
 		};
 	};
 	networking.firewall = {

roles/server/ssh.nix

@@ -3,8 +3,10 @@
 {
 	services.openssh = {
 		enable = true;
+		settings = {
+			PermitRootLogin = "no";
+			PasswordAuthentication = false;
+		};
 		startWhenNeeded = true;
-		permitRootLogin = "no"; 
-		passwordAuthentication = false;
 	};
 }