67 files changed, 1051 insertions, 379 deletions

diff --git a/deploy/flake.lock b/deploy/flake.lock
index a76a82a..2631701 100644
--- a/deploy/flake.lock
+++ b/deploy/flake.lock
@@ -150,7 +150,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Deh1qsi1UFskPSAwq2sUGyPeh7hVVHct8hhy4o6fEzE=",
+        "narHash": "sha256-S6sETV9+RccMB5LcH4vOZJiTdhLS3SRIjFRvEfjd9Ag=",
         "path": "../../flakes/private/chatons",
         "type": "path"
       },
@@ -165,7 +165,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Deh1qsi1UFskPSAwq2sUGyPeh7hVVHct8hhy4o6fEzE=",
+        "narHash": "sha256-S6sETV9+RccMB5LcH4vOZJiTdhLS3SRIjFRvEfjd9Ag=",
         "path": "../../flakes/private/chatons",
         "type": "path"
       },
@@ -565,7 +565,7 @@
     "environment": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -577,7 +577,7 @@
     "environment_10": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -589,7 +589,7 @@
     "environment_11": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -601,7 +601,7 @@
     "environment_12": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -613,7 +613,7 @@
     "environment_13": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -625,7 +625,7 @@
     "environment_14": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -637,7 +637,7 @@
     "environment_15": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -649,7 +649,7 @@
     "environment_16": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -661,7 +661,7 @@
     "environment_17": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -673,7 +673,7 @@
     "environment_18": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../../flakes/private/environment",
         "type": "path"
       },
@@ -685,7 +685,7 @@
     "environment_19": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -697,7 +697,7 @@
     "environment_2": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../../flakes/private/environment",
         "type": "path"
       },
@@ -709,7 +709,7 @@
     "environment_20": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -721,7 +721,7 @@
     "environment_21": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -733,7 +733,7 @@
     "environment_22": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../../flakes/private/environment",
         "type": "path"
       },
@@ -745,7 +745,7 @@
     "environment_23": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -757,7 +757,7 @@
     "environment_24": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -769,7 +769,7 @@
     "environment_25": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -781,7 +781,7 @@
     "environment_26": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -793,7 +793,7 @@
     "environment_27": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -805,7 +805,7 @@
     "environment_28": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -817,7 +817,7 @@
     "environment_29": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -829,7 +829,7 @@
     "environment_3": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -841,7 +841,7 @@
     "environment_30": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -853,7 +853,7 @@
     "environment_31": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -865,7 +865,7 @@
     "environment_32": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -877,7 +877,7 @@
     "environment_4": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -889,7 +889,7 @@
     "environment_5": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -901,7 +901,7 @@
     "environment_6": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -913,7 +913,7 @@
     "environment_7": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -925,7 +925,7 @@
     "environment_8": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../../flakes/private/environment",
         "type": "path"
       },
@@ -937,7 +937,7 @@
     "environment_9": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -2708,7 +2708,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-XdgjCex3Izb2hID+EBVj0YsEE5xvc+I416I2fHpi1LE=",
+        "narHash": "sha256-tY5qk98NpdM4osbPYFeo6/pHiQQU4a4iKw2jCJP99q8=",
         "path": "../../flakes/private/mail-relay",
         "type": "path"
       },
@@ -2724,7 +2724,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-XdgjCex3Izb2hID+EBVj0YsEE5xvc+I416I2fHpi1LE=",
+        "narHash": "sha256-tY5qk98NpdM4osbPYFeo6/pHiQQU4a4iKw2jCJP99q8=",
         "path": "../../flakes/private/mail-relay",
         "type": "path"
       },
@@ -2783,7 +2783,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-oi7B2foI2ukk31mswamJ/sUoq2yvlS/abJj2CYJMS1U=",
+        "narHash": "sha256-R3FAjRFGXXrYqICZrB0jFWVe7Ahqu1s8HSGYucmCfiU=",
         "path": "../flakes",
         "type": "path"
       },
@@ -2876,7 +2876,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-bWNhkERypwoog3lphO0xURJ4xt58CZEWKn7So7A5mtM=",
+        "narHash": "sha256-Aqubcd5AOuP6XUdvjeCXIP6Yksn8uBXbS62kWXBop1w=",
         "path": "../../flakes/private/milters",
         "type": "path"
       },
@@ -2894,7 +2894,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VZjf9fXcyeS3LpVW6NvzJpiJuEtJsGlOOfH8XwL8CdI=",
+        "narHash": "sha256-F7GennKqLc6Cx3DuU6qSPUHmjvpfrrfOshor41vaCz4=",
         "path": "../../flakes/private/monitoring",
         "type": "path"
       },
@@ -2912,7 +2912,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VZjf9fXcyeS3LpVW6NvzJpiJuEtJsGlOOfH8XwL8CdI=",
+        "narHash": "sha256-F7GennKqLc6Cx3DuU6qSPUHmjvpfrrfOshor41vaCz4=",
         "path": "../../flakes/private/monitoring",
         "type": "path"
       },
@@ -2930,7 +2930,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VZjf9fXcyeS3LpVW6NvzJpiJuEtJsGlOOfH8XwL8CdI=",
+        "narHash": "sha256-F7GennKqLc6Cx3DuU6qSPUHmjvpfrrfOshor41vaCz4=",
         "path": "../../flakes/private/monitoring",
         "type": "path"
       },
@@ -2948,7 +2948,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VZjf9fXcyeS3LpVW6NvzJpiJuEtJsGlOOfH8XwL8CdI=",
+        "narHash": "sha256-F7GennKqLc6Cx3DuU6qSPUHmjvpfrrfOshor41vaCz4=",
         "path": "../../flakes/private/monitoring",
         "type": "path"
       },
@@ -3095,7 +3095,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -3112,7 +3112,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../mypackages",
         "type": "path"
       },
@@ -3129,7 +3129,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../mypackages",
         "type": "path"
       },
@@ -3146,7 +3146,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -3163,7 +3163,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../mypackages",
         "type": "path"
       },
@@ -3180,7 +3180,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -3197,7 +3197,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -3214,7 +3214,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../mypackages",
         "type": "path"
       },
@@ -3231,7 +3231,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../mypackages",
         "type": "path"
       },
@@ -3248,7 +3248,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../mypackages",
         "type": "path"
       },
@@ -3265,7 +3265,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -3282,7 +3282,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -3299,7 +3299,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -3832,7 +3832,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-IT0Vt2OXvfHRd5Qg/7SjMMEIwKFimBqrFnTdtTH9jSU=",
+        "narHash": "sha256-60yr/wCF+U3z+wYR+UEgM+68nc4/CWkoIAjJsMpUG8c=",
         "path": "../systems/backup-2",
         "type": "path"
       },
@@ -3855,7 +3855,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-hE6jL305XpLZvlCYRKnTzLfJW9RuISAC4i/ifRHwBKs=",
+        "narHash": "sha256-9geQj091r2/Sxi8/ghsp5mO8MIT/kT+nEL3PKgwuApc=",
         "path": "../systems/dilion",
         "type": "path"
       },
@@ -3903,7 +3903,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-ItVNdRvOUeVByeiuNpeHKIpCjxTG8qS0L5ankxfNlyI=",
+        "narHash": "sha256-MB/c+BVgQQ3qjAchd1Oe8qvg9UbFcY0xhxpj9RkEOnI=",
         "path": "../systems/eldiron",
         "type": "path"
       },
@@ -3929,7 +3929,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-rb97Ic4EpPLIKaA34BX18VJyha5q9n4qvBba0b+tZAg=",
+        "narHash": "sha256-nV8j6HW6B93HEbeiy43tKCGV9J6xR7jIkAUZVbkKDt4=",
         "path": "../systems/monitoring-1",
         "type": "path"
       },
@@ -3954,7 +3954,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-iEl0ox4MU8dLnwH2prNCosxRmZWld6R3Wyf0aPk/koM=",
+        "narHash": "sha256-4vXBjKeelh3z1l7ZYO0ucB2cZPuVJsYX7yZV3MDGqdk=",
         "path": "../systems/quatresaisons",
         "type": "path"
       },
@@ -3974,7 +3974,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-JlmfWvZWdpG8URsDmCRaWmLo1pUxKf0yxwcLF2OwzTo=",
+        "narHash": "sha256-wAhvhb/zq5upukz/cfyN1nRfYTcFby8OJi2yFaZBGIM=",
         "path": "../systems/zoldene",
         "type": "path"
       },
@@ -6374,11 +6374,11 @@
     },
     "nixpkgs_71": {
       "locked": {
-        "lastModified": 1708475490,
-        "narHash": "sha256-g1v0TsWBQPX97ziznfJdWhgMyMGtoBFs102xSYO4syU=",
+        "lastModified": 1720031269,
+        "narHash": "sha256-rwz8NJZV+387rnWpTYcXaRNvzUSnnF9aHONoJIYmiUQ=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "0e74ca98a74bc7270d28838369593635a5db3260",
+        "rev": "9f4128e00b0ae8ec65918efeba59db998750ead6",
         "type": "github"
       },
       "original": {
@@ -7141,7 +7141,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-fntajNe0urhuR0NbTOQZLTMhtHnd7p6PVuuEf0oAoFg=",
+        "narHash": "sha256-LDicilQIpNXKg/UD6uyf66h/iL/rhDOkkVjTMdKRzX4=",
         "path": "../../flakes/private/opendmarc",
         "type": "path"
       },
@@ -7480,7 +7480,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Deh1qsi1UFskPSAwq2sUGyPeh7hVVHct8hhy4o6fEzE=",
+        "narHash": "sha256-S6sETV9+RccMB5LcH4vOZJiTdhLS3SRIjFRvEfjd9Ag=",
         "path": "../../flakes/private/chatons",
         "type": "path"
       },
@@ -7492,7 +7492,7 @@
     "private-environment": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../../flakes/private/environment",
         "type": "path"
       },
@@ -7504,7 +7504,7 @@
     "private-environment_2": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../../flakes/private/environment",
         "type": "path"
       },
@@ -7523,7 +7523,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-bWNhkERypwoog3lphO0xURJ4xt58CZEWKn7So7A5mtM=",
+        "narHash": "sha256-Aqubcd5AOuP6XUdvjeCXIP6Yksn8uBXbS62kWXBop1w=",
         "path": "../../flakes/private/milters",
         "type": "path"
       },
@@ -7541,7 +7541,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VZjf9fXcyeS3LpVW6NvzJpiJuEtJsGlOOfH8XwL8CdI=",
+        "narHash": "sha256-F7GennKqLc6Cx3DuU6qSPUHmjvpfrrfOshor41vaCz4=",
         "path": "../../flakes/private/monitoring",
         "type": "path"
       },
@@ -7576,7 +7576,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-fntajNe0urhuR0NbTOQZLTMhtHnd7p6PVuuEf0oAoFg=",
+        "narHash": "sha256-LDicilQIpNXKg/UD6uyf66h/iL/rhDOkkVjTMdKRzX4=",
         "path": "../../flakes/private/opendmarc",
         "type": "path"
       },
@@ -7637,7 +7637,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-uqftr7R3cVYwWuu8Xl6VbPVL2pqapv1bfmMJpq3LnZ4=",
+        "narHash": "sha256-mhoBv1NxQoAMlfFGkgGC28cjMTgUxgb2oqNS+k6kWH4=",
         "path": "../../flakes/private/ssh",
         "type": "path"
       },
@@ -7656,7 +7656,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
@@ -7675,7 +7675,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
@@ -7728,7 +7728,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-TeZKpuqFi0PEnhays+oL+hrNlO/O+IV/4B+Vtim4DKY=",
+        "narHash": "sha256-2fWHwmMMILe0enrbMMgFoVH+3PysvSx1Oair4W2hgIw=",
         "path": "../../flakes/etherpad-lite",
         "type": "path"
       },
@@ -7770,7 +7770,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-kbhkTVO086HibTB2ke3Qc458FwLUp2CqU8XUjuaAIug=",
+        "narHash": "sha256-emS5jDCcLaK3/Hqk/2p6jQDxZfO1hPicMTblyVBD7EI=",
         "path": "../../flakes/grocy",
         "type": "path"
       },
@@ -7851,7 +7851,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../flakes/mypackages",
         "type": "path"
       },
@@ -7974,7 +7974,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-+z5CIx4Gin8Ygu3qQbd5QMPuChzPkhtSv+kUm6dUW/s=",
+        "narHash": "sha256-cR14yn0IbWNe98PAlV+MHO6ClQqeT5HztMeLawldtWs=",
         "path": "../../flakes/surfer",
         "type": "path"
       },
@@ -8080,7 +8080,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-TeZKpuqFi0PEnhays+oL+hrNlO/O+IV/4B+Vtim4DKY=",
+        "narHash": "sha256-2fWHwmMMILe0enrbMMgFoVH+3PysvSx1Oair4W2hgIw=",
         "path": "./etherpad-lite",
         "type": "path"
       },
@@ -8122,7 +8122,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-kbhkTVO086HibTB2ke3Qc458FwLUp2CqU8XUjuaAIug=",
+        "narHash": "sha256-emS5jDCcLaK3/Hqk/2p6jQDxZfO1hPicMTblyVBD7EI=",
         "path": "./grocy",
         "type": "path"
       },
@@ -8222,7 +8222,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "./mypackages",
         "type": "path"
       },
@@ -8347,7 +8347,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Deh1qsi1UFskPSAwq2sUGyPeh7hVVHct8hhy4o6fEzE=",
+        "narHash": "sha256-S6sETV9+RccMB5LcH4vOZJiTdhLS3SRIjFRvEfjd9Ag=",
         "path": "./private/chatons",
         "type": "path"
       },
@@ -8359,7 +8359,7 @@
     "s-private-environment": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "./private/environment",
         "type": "path"
       },
@@ -8375,7 +8375,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-XdgjCex3Izb2hID+EBVj0YsEE5xvc+I416I2fHpi1LE=",
+        "narHash": "sha256-tY5qk98NpdM4osbPYFeo6/pHiQQU4a4iKw2jCJP99q8=",
         "path": "./private/mail-relay",
         "type": "path"
       },
@@ -8394,7 +8394,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-bWNhkERypwoog3lphO0xURJ4xt58CZEWKn7So7A5mtM=",
+        "narHash": "sha256-Aqubcd5AOuP6XUdvjeCXIP6Yksn8uBXbS62kWXBop1w=",
         "path": "./private/milters",
         "type": "path"
       },
@@ -8412,7 +8412,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VZjf9fXcyeS3LpVW6NvzJpiJuEtJsGlOOfH8XwL8CdI=",
+        "narHash": "sha256-F7GennKqLc6Cx3DuU6qSPUHmjvpfrrfOshor41vaCz4=",
         "path": "./private/monitoring",
         "type": "path"
       },
@@ -8447,7 +8447,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-fntajNe0urhuR0NbTOQZLTMhtHnd7p6PVuuEf0oAoFg=",
+        "narHash": "sha256-LDicilQIpNXKg/UD6uyf66h/iL/rhDOkkVjTMdKRzX4=",
         "path": "./private/opendmarc",
         "type": "path"
       },
@@ -8508,7 +8508,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-uqftr7R3cVYwWuu8Xl6VbPVL2pqapv1bfmMJpq3LnZ4=",
+        "narHash": "sha256-mhoBv1NxQoAMlfFGkgGC28cjMTgUxgb2oqNS+k6kWH4=",
         "path": "./private/ssh",
         "type": "path"
       },
@@ -8527,7 +8527,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "./private/system",
         "type": "path"
       },
@@ -8569,7 +8569,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-+z5CIx4Gin8Ygu3qQbd5QMPuChzPkhtSv+kUm6dUW/s=",
+        "narHash": "sha256-cR14yn0IbWNe98PAlV+MHO6ClQqeT5HztMeLawldtWs=",
         "path": "./surfer",
         "type": "path"
       },
@@ -8888,11 +8888,11 @@
         "nixpkgs": "nixpkgs_106"
       },
       "locked": {
-        "lastModified": 1718015850,
-        "narHash": "sha256-svUAfD+aIaS9T9UtepEGlIdxcZyu3YJcrGOmjuwgplE=",
+        "lastModified": 1722637825,
+        "narHash": "sha256-nVRtZ9lu7ILJPA+wNn5D+5R7nJBKtfY0Rx335xVUYFw=",
         "ref": "master",
-        "rev": "71fbb32c4b3195982c0f03c90714c959b5ce2251",
-        "revCount": 735,
+        "rev": "c0221952994e304539e9cccd5db8e818df4e6e51",
+        "revCount": 747,
         "type": "git",
         "url": "git+ssh://gitolite@git.immae.eu/perso/Immae/Config/Nix/Nixops/Secrets"
       },
@@ -9140,7 +9140,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
@@ -9159,7 +9159,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
@@ -9178,7 +9178,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
@@ -9197,7 +9197,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
diff --git a/flake.lock b/flake.lock
index bffa047..e8a7a3b 100644
--- a/flake.lock
+++ b/flake.lock
@@ -150,7 +150,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Deh1qsi1UFskPSAwq2sUGyPeh7hVVHct8hhy4o6fEzE=",
+        "narHash": "sha256-S6sETV9+RccMB5LcH4vOZJiTdhLS3SRIjFRvEfjd9Ag=",
         "path": "../../flakes/private/chatons",
         "type": "path"
       },
@@ -165,7 +165,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Deh1qsi1UFskPSAwq2sUGyPeh7hVVHct8hhy4o6fEzE=",
+        "narHash": "sha256-S6sETV9+RccMB5LcH4vOZJiTdhLS3SRIjFRvEfjd9Ag=",
         "path": "../../flakes/private/chatons",
         "type": "path"
       },
@@ -565,7 +565,7 @@
     "environment": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -577,7 +577,7 @@
     "environment_10": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -589,7 +589,7 @@
     "environment_11": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -601,7 +601,7 @@
     "environment_12": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -613,7 +613,7 @@
     "environment_13": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -625,7 +625,7 @@
     "environment_14": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -637,7 +637,7 @@
     "environment_15": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -649,7 +649,7 @@
     "environment_16": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -661,7 +661,7 @@
     "environment_17": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -673,7 +673,7 @@
     "environment_18": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../../flakes/private/environment",
         "type": "path"
       },
@@ -685,7 +685,7 @@
     "environment_19": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -697,7 +697,7 @@
     "environment_2": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../../flakes/private/environment",
         "type": "path"
       },
@@ -709,7 +709,7 @@
     "environment_20": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -721,7 +721,7 @@
     "environment_21": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -733,7 +733,7 @@
     "environment_22": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../../flakes/private/environment",
         "type": "path"
       },
@@ -745,7 +745,7 @@
     "environment_23": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -757,7 +757,7 @@
     "environment_24": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -769,7 +769,7 @@
     "environment_25": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -781,7 +781,7 @@
     "environment_26": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -793,7 +793,7 @@
     "environment_27": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -805,7 +805,7 @@
     "environment_28": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -817,7 +817,7 @@
     "environment_29": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -829,7 +829,7 @@
     "environment_3": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -841,7 +841,7 @@
     "environment_30": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -853,7 +853,7 @@
     "environment_31": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -865,7 +865,7 @@
     "environment_32": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -877,7 +877,7 @@
     "environment_4": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -889,7 +889,7 @@
     "environment_5": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -901,7 +901,7 @@
     "environment_6": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -913,7 +913,7 @@
     "environment_7": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -925,7 +925,7 @@
     "environment_8": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../../flakes/private/environment",
         "type": "path"
       },
@@ -937,7 +937,7 @@
     "environment_9": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -2664,7 +2664,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-oi7B2foI2ukk31mswamJ/sUoq2yvlS/abJj2CYJMS1U=",
+        "narHash": "sha256-R3FAjRFGXXrYqICZrB0jFWVe7Ahqu1s8HSGYucmCfiU=",
         "path": "./flakes",
         "type": "path"
       },
@@ -2783,7 +2783,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-XdgjCex3Izb2hID+EBVj0YsEE5xvc+I416I2fHpi1LE=",
+        "narHash": "sha256-tY5qk98NpdM4osbPYFeo6/pHiQQU4a4iKw2jCJP99q8=",
         "path": "../../flakes/private/mail-relay",
         "type": "path"
       },
@@ -2799,7 +2799,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-XdgjCex3Izb2hID+EBVj0YsEE5xvc+I416I2fHpi1LE=",
+        "narHash": "sha256-tY5qk98NpdM4osbPYFeo6/pHiQQU4a4iKw2jCJP99q8=",
         "path": "../../flakes/private/mail-relay",
         "type": "path"
       },
@@ -2892,7 +2892,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-bWNhkERypwoog3lphO0xURJ4xt58CZEWKn7So7A5mtM=",
+        "narHash": "sha256-Aqubcd5AOuP6XUdvjeCXIP6Yksn8uBXbS62kWXBop1w=",
         "path": "../../flakes/private/milters",
         "type": "path"
       },
@@ -2910,7 +2910,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VZjf9fXcyeS3LpVW6NvzJpiJuEtJsGlOOfH8XwL8CdI=",
+        "narHash": "sha256-F7GennKqLc6Cx3DuU6qSPUHmjvpfrrfOshor41vaCz4=",
         "path": "../../flakes/private/monitoring",
         "type": "path"
       },
@@ -2928,7 +2928,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VZjf9fXcyeS3LpVW6NvzJpiJuEtJsGlOOfH8XwL8CdI=",
+        "narHash": "sha256-F7GennKqLc6Cx3DuU6qSPUHmjvpfrrfOshor41vaCz4=",
         "path": "../../flakes/private/monitoring",
         "type": "path"
       },
@@ -2946,7 +2946,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VZjf9fXcyeS3LpVW6NvzJpiJuEtJsGlOOfH8XwL8CdI=",
+        "narHash": "sha256-F7GennKqLc6Cx3DuU6qSPUHmjvpfrrfOshor41vaCz4=",
         "path": "../../flakes/private/monitoring",
         "type": "path"
       },
@@ -2964,7 +2964,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VZjf9fXcyeS3LpVW6NvzJpiJuEtJsGlOOfH8XwL8CdI=",
+        "narHash": "sha256-F7GennKqLc6Cx3DuU6qSPUHmjvpfrrfOshor41vaCz4=",
         "path": "../../flakes/private/monitoring",
         "type": "path"
       },
@@ -3111,7 +3111,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -3128,7 +3128,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../mypackages",
         "type": "path"
       },
@@ -3145,7 +3145,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../mypackages",
         "type": "path"
       },
@@ -3162,7 +3162,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -3179,7 +3179,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../mypackages",
         "type": "path"
       },
@@ -3196,7 +3196,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -3213,7 +3213,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -3230,7 +3230,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../mypackages",
         "type": "path"
       },
@@ -3247,7 +3247,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../mypackages",
         "type": "path"
       },
@@ -3264,7 +3264,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../mypackages",
         "type": "path"
       },
@@ -3281,7 +3281,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -3298,7 +3298,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -3315,7 +3315,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -3848,7 +3848,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-IT0Vt2OXvfHRd5Qg/7SjMMEIwKFimBqrFnTdtTH9jSU=",
+        "narHash": "sha256-60yr/wCF+U3z+wYR+UEgM+68nc4/CWkoIAjJsMpUG8c=",
         "path": "../systems/backup-2",
         "type": "path"
       },
@@ -3871,7 +3871,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-hE6jL305XpLZvlCYRKnTzLfJW9RuISAC4i/ifRHwBKs=",
+        "narHash": "sha256-9geQj091r2/Sxi8/ghsp5mO8MIT/kT+nEL3PKgwuApc=",
         "path": "../systems/dilion",
         "type": "path"
       },
@@ -3919,7 +3919,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-ItVNdRvOUeVByeiuNpeHKIpCjxTG8qS0L5ankxfNlyI=",
+        "narHash": "sha256-MB/c+BVgQQ3qjAchd1Oe8qvg9UbFcY0xhxpj9RkEOnI=",
         "path": "../systems/eldiron",
         "type": "path"
       },
@@ -3945,7 +3945,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-rb97Ic4EpPLIKaA34BX18VJyha5q9n4qvBba0b+tZAg=",
+        "narHash": "sha256-nV8j6HW6B93HEbeiy43tKCGV9J6xR7jIkAUZVbkKDt4=",
         "path": "../systems/monitoring-1",
         "type": "path"
       },
@@ -3970,7 +3970,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-iEl0ox4MU8dLnwH2prNCosxRmZWld6R3Wyf0aPk/koM=",
+        "narHash": "sha256-4vXBjKeelh3z1l7ZYO0ucB2cZPuVJsYX7yZV3MDGqdk=",
         "path": "../systems/quatresaisons",
         "type": "path"
       },
@@ -3990,7 +3990,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-JlmfWvZWdpG8URsDmCRaWmLo1pUxKf0yxwcLF2OwzTo=",
+        "narHash": "sha256-wAhvhb/zq5upukz/cfyN1nRfYTcFby8OJi2yFaZBGIM=",
         "path": "../systems/zoldene",
         "type": "path"
       },
@@ -6390,11 +6390,11 @@
     },
     "nixpkgs_71": {
       "locked": {
-        "lastModified": 1708475490,
-        "narHash": "sha256-g1v0TsWBQPX97ziznfJdWhgMyMGtoBFs102xSYO4syU=",
+        "lastModified": 1720031269,
+        "narHash": "sha256-rwz8NJZV+387rnWpTYcXaRNvzUSnnF9aHONoJIYmiUQ=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "0e74ca98a74bc7270d28838369593635a5db3260",
+        "rev": "9f4128e00b0ae8ec65918efeba59db998750ead6",
         "type": "github"
       },
       "original": {
@@ -7157,7 +7157,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-fntajNe0urhuR0NbTOQZLTMhtHnd7p6PVuuEf0oAoFg=",
+        "narHash": "sha256-LDicilQIpNXKg/UD6uyf66h/iL/rhDOkkVjTMdKRzX4=",
         "path": "../../flakes/private/opendmarc",
         "type": "path"
       },
@@ -7496,7 +7496,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Deh1qsi1UFskPSAwq2sUGyPeh7hVVHct8hhy4o6fEzE=",
+        "narHash": "sha256-S6sETV9+RccMB5LcH4vOZJiTdhLS3SRIjFRvEfjd9Ag=",
         "path": "../../flakes/private/chatons",
         "type": "path"
       },
@@ -7508,7 +7508,7 @@
     "private-environment": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../../flakes/private/environment",
         "type": "path"
       },
@@ -7520,7 +7520,7 @@
     "private-environment_2": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../../flakes/private/environment",
         "type": "path"
       },
@@ -7539,7 +7539,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-bWNhkERypwoog3lphO0xURJ4xt58CZEWKn7So7A5mtM=",
+        "narHash": "sha256-Aqubcd5AOuP6XUdvjeCXIP6Yksn8uBXbS62kWXBop1w=",
         "path": "../../flakes/private/milters",
         "type": "path"
       },
@@ -7557,7 +7557,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VZjf9fXcyeS3LpVW6NvzJpiJuEtJsGlOOfH8XwL8CdI=",
+        "narHash": "sha256-F7GennKqLc6Cx3DuU6qSPUHmjvpfrrfOshor41vaCz4=",
         "path": "../../flakes/private/monitoring",
         "type": "path"
       },
@@ -7592,7 +7592,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-fntajNe0urhuR0NbTOQZLTMhtHnd7p6PVuuEf0oAoFg=",
+        "narHash": "sha256-LDicilQIpNXKg/UD6uyf66h/iL/rhDOkkVjTMdKRzX4=",
         "path": "../../flakes/private/opendmarc",
         "type": "path"
       },
@@ -7653,7 +7653,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-uqftr7R3cVYwWuu8Xl6VbPVL2pqapv1bfmMJpq3LnZ4=",
+        "narHash": "sha256-mhoBv1NxQoAMlfFGkgGC28cjMTgUxgb2oqNS+k6kWH4=",
         "path": "../../flakes/private/ssh",
         "type": "path"
       },
@@ -7672,7 +7672,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
@@ -7691,7 +7691,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
@@ -7744,7 +7744,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-TeZKpuqFi0PEnhays+oL+hrNlO/O+IV/4B+Vtim4DKY=",
+        "narHash": "sha256-2fWHwmMMILe0enrbMMgFoVH+3PysvSx1Oair4W2hgIw=",
         "path": "../../flakes/etherpad-lite",
         "type": "path"
       },
@@ -7786,7 +7786,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-kbhkTVO086HibTB2ke3Qc458FwLUp2CqU8XUjuaAIug=",
+        "narHash": "sha256-emS5jDCcLaK3/Hqk/2p6jQDxZfO1hPicMTblyVBD7EI=",
         "path": "../../flakes/grocy",
         "type": "path"
       },
@@ -7867,7 +7867,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../flakes/mypackages",
         "type": "path"
       },
@@ -7990,7 +7990,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-+z5CIx4Gin8Ygu3qQbd5QMPuChzPkhtSv+kUm6dUW/s=",
+        "narHash": "sha256-cR14yn0IbWNe98PAlV+MHO6ClQqeT5HztMeLawldtWs=",
         "path": "../../flakes/surfer",
         "type": "path"
       },
@@ -8096,7 +8096,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-TeZKpuqFi0PEnhays+oL+hrNlO/O+IV/4B+Vtim4DKY=",
+        "narHash": "sha256-2fWHwmMMILe0enrbMMgFoVH+3PysvSx1Oair4W2hgIw=",
         "path": "./etherpad-lite",
         "type": "path"
       },
@@ -8138,7 +8138,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-kbhkTVO086HibTB2ke3Qc458FwLUp2CqU8XUjuaAIug=",
+        "narHash": "sha256-emS5jDCcLaK3/Hqk/2p6jQDxZfO1hPicMTblyVBD7EI=",
         "path": "./grocy",
         "type": "path"
       },
@@ -8238,7 +8238,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "./mypackages",
         "type": "path"
       },
@@ -8363,7 +8363,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Deh1qsi1UFskPSAwq2sUGyPeh7hVVHct8hhy4o6fEzE=",
+        "narHash": "sha256-S6sETV9+RccMB5LcH4vOZJiTdhLS3SRIjFRvEfjd9Ag=",
         "path": "./private/chatons",
         "type": "path"
       },
@@ -8375,7 +8375,7 @@
     "s-private-environment": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "./private/environment",
         "type": "path"
       },
@@ -8391,7 +8391,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-XdgjCex3Izb2hID+EBVj0YsEE5xvc+I416I2fHpi1LE=",
+        "narHash": "sha256-tY5qk98NpdM4osbPYFeo6/pHiQQU4a4iKw2jCJP99q8=",
         "path": "./private/mail-relay",
         "type": "path"
       },
@@ -8410,7 +8410,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-bWNhkERypwoog3lphO0xURJ4xt58CZEWKn7So7A5mtM=",
+        "narHash": "sha256-Aqubcd5AOuP6XUdvjeCXIP6Yksn8uBXbS62kWXBop1w=",
         "path": "./private/milters",
         "type": "path"
       },
@@ -8428,7 +8428,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VZjf9fXcyeS3LpVW6NvzJpiJuEtJsGlOOfH8XwL8CdI=",
+        "narHash": "sha256-F7GennKqLc6Cx3DuU6qSPUHmjvpfrrfOshor41vaCz4=",
         "path": "./private/monitoring",
         "type": "path"
       },
@@ -8463,7 +8463,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-fntajNe0urhuR0NbTOQZLTMhtHnd7p6PVuuEf0oAoFg=",
+        "narHash": "sha256-LDicilQIpNXKg/UD6uyf66h/iL/rhDOkkVjTMdKRzX4=",
         "path": "./private/opendmarc",
         "type": "path"
       },
@@ -8524,7 +8524,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-uqftr7R3cVYwWuu8Xl6VbPVL2pqapv1bfmMJpq3LnZ4=",
+        "narHash": "sha256-mhoBv1NxQoAMlfFGkgGC28cjMTgUxgb2oqNS+k6kWH4=",
         "path": "./private/ssh",
         "type": "path"
       },
@@ -8543,7 +8543,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "./private/system",
         "type": "path"
       },
@@ -8585,7 +8585,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-+z5CIx4Gin8Ygu3qQbd5QMPuChzPkhtSv+kUm6dUW/s=",
+        "narHash": "sha256-cR14yn0IbWNe98PAlV+MHO6ClQqeT5HztMeLawldtWs=",
         "path": "./surfer",
         "type": "path"
       },
@@ -9149,7 +9149,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
@@ -9168,7 +9168,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
@@ -9187,7 +9187,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
@@ -9206,7 +9206,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
diff --git a/flakes/etherpad-lite/flake.lock b/flakes/etherpad-lite/flake.lock
index e3dc820..4b29cff 100644
--- a/flakes/etherpad-lite/flake.lock
+++ b/flakes/etherpad-lite/flake.lock
@@ -58,7 +58,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../mypackages",
         "type": "path"
       },
diff --git a/flakes/flake.lock b/flakes/flake.lock
index 49298bf..802849b 100644
--- a/flakes/flake.lock
+++ b/flakes/flake.lock
@@ -150,7 +150,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Deh1qsi1UFskPSAwq2sUGyPeh7hVVHct8hhy4o6fEzE=",
+        "narHash": "sha256-S6sETV9+RccMB5LcH4vOZJiTdhLS3SRIjFRvEfjd9Ag=",
         "path": "../../flakes/private/chatons",
         "type": "path"
       },
@@ -165,7 +165,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Deh1qsi1UFskPSAwq2sUGyPeh7hVVHct8hhy4o6fEzE=",
+        "narHash": "sha256-S6sETV9+RccMB5LcH4vOZJiTdhLS3SRIjFRvEfjd9Ag=",
         "path": "../../flakes/private/chatons",
         "type": "path"
       },
@@ -545,7 +545,7 @@
     "environment": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -557,7 +557,7 @@
     "environment_10": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -569,7 +569,7 @@
     "environment_11": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -581,7 +581,7 @@
     "environment_12": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -593,7 +593,7 @@
     "environment_13": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -605,7 +605,7 @@
     "environment_14": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -617,7 +617,7 @@
     "environment_15": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -629,7 +629,7 @@
     "environment_16": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -641,7 +641,7 @@
     "environment_17": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -653,7 +653,7 @@
     "environment_18": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../../flakes/private/environment",
         "type": "path"
       },
@@ -665,7 +665,7 @@
     "environment_19": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -677,7 +677,7 @@
     "environment_2": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../../flakes/private/environment",
         "type": "path"
       },
@@ -689,7 +689,7 @@
     "environment_20": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -701,7 +701,7 @@
     "environment_21": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -713,7 +713,7 @@
     "environment_22": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../../flakes/private/environment",
         "type": "path"
       },
@@ -725,7 +725,7 @@
     "environment_23": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -737,7 +737,7 @@
     "environment_24": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -749,7 +749,7 @@
     "environment_25": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -761,7 +761,7 @@
     "environment_26": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -773,7 +773,7 @@
     "environment_27": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -785,7 +785,7 @@
     "environment_28": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -797,7 +797,7 @@
     "environment_29": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -809,7 +809,7 @@
     "environment_3": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -821,7 +821,7 @@
     "environment_30": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -833,7 +833,7 @@
     "environment_31": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -845,7 +845,7 @@
     "environment_32": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -857,7 +857,7 @@
     "environment_4": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -869,7 +869,7 @@
     "environment_5": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -881,7 +881,7 @@
     "environment_6": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -893,7 +893,7 @@
     "environment_7": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -905,7 +905,7 @@
     "environment_8": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../../flakes/private/environment",
         "type": "path"
       },
@@ -917,7 +917,7 @@
     "environment_9": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -2688,7 +2688,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-XdgjCex3Izb2hID+EBVj0YsEE5xvc+I416I2fHpi1LE=",
+        "narHash": "sha256-tY5qk98NpdM4osbPYFeo6/pHiQQU4a4iKw2jCJP99q8=",
         "path": "../../flakes/private/mail-relay",
         "type": "path"
       },
@@ -2704,7 +2704,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-XdgjCex3Izb2hID+EBVj0YsEE5xvc+I416I2fHpi1LE=",
+        "narHash": "sha256-tY5qk98NpdM4osbPYFeo6/pHiQQU4a4iKw2jCJP99q8=",
         "path": "../../flakes/private/mail-relay",
         "type": "path"
       },
@@ -2797,7 +2797,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-bWNhkERypwoog3lphO0xURJ4xt58CZEWKn7So7A5mtM=",
+        "narHash": "sha256-Aqubcd5AOuP6XUdvjeCXIP6Yksn8uBXbS62kWXBop1w=",
         "path": "../../flakes/private/milters",
         "type": "path"
       },
@@ -2815,7 +2815,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VZjf9fXcyeS3LpVW6NvzJpiJuEtJsGlOOfH8XwL8CdI=",
+        "narHash": "sha256-F7GennKqLc6Cx3DuU6qSPUHmjvpfrrfOshor41vaCz4=",
         "path": "../../flakes/private/monitoring",
         "type": "path"
       },
@@ -2833,7 +2833,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VZjf9fXcyeS3LpVW6NvzJpiJuEtJsGlOOfH8XwL8CdI=",
+        "narHash": "sha256-F7GennKqLc6Cx3DuU6qSPUHmjvpfrrfOshor41vaCz4=",
         "path": "../../flakes/private/monitoring",
         "type": "path"
       },
@@ -2851,7 +2851,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VZjf9fXcyeS3LpVW6NvzJpiJuEtJsGlOOfH8XwL8CdI=",
+        "narHash": "sha256-F7GennKqLc6Cx3DuU6qSPUHmjvpfrrfOshor41vaCz4=",
         "path": "../../flakes/private/monitoring",
         "type": "path"
       },
@@ -2869,7 +2869,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VZjf9fXcyeS3LpVW6NvzJpiJuEtJsGlOOfH8XwL8CdI=",
+        "narHash": "sha256-F7GennKqLc6Cx3DuU6qSPUHmjvpfrrfOshor41vaCz4=",
         "path": "../../flakes/private/monitoring",
         "type": "path"
       },
@@ -3016,7 +3016,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -3033,7 +3033,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../mypackages",
         "type": "path"
       },
@@ -3050,7 +3050,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../mypackages",
         "type": "path"
       },
@@ -3067,7 +3067,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -3084,7 +3084,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../mypackages",
         "type": "path"
       },
@@ -3101,7 +3101,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -3118,7 +3118,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -3135,7 +3135,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../mypackages",
         "type": "path"
       },
@@ -3152,7 +3152,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../mypackages",
         "type": "path"
       },
@@ -3169,7 +3169,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../mypackages",
         "type": "path"
       },
@@ -3186,7 +3186,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -3203,7 +3203,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -3220,7 +3220,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -3753,7 +3753,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-IT0Vt2OXvfHRd5Qg/7SjMMEIwKFimBqrFnTdtTH9jSU=",
+        "narHash": "sha256-60yr/wCF+U3z+wYR+UEgM+68nc4/CWkoIAjJsMpUG8c=",
         "path": "../systems/backup-2",
         "type": "path"
       },
@@ -3776,7 +3776,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-hE6jL305XpLZvlCYRKnTzLfJW9RuISAC4i/ifRHwBKs=",
+        "narHash": "sha256-9geQj091r2/Sxi8/ghsp5mO8MIT/kT+nEL3PKgwuApc=",
         "path": "../systems/dilion",
         "type": "path"
       },
@@ -3824,7 +3824,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-ItVNdRvOUeVByeiuNpeHKIpCjxTG8qS0L5ankxfNlyI=",
+        "narHash": "sha256-MB/c+BVgQQ3qjAchd1Oe8qvg9UbFcY0xhxpj9RkEOnI=",
         "path": "../systems/eldiron",
         "type": "path"
       },
@@ -3850,7 +3850,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-rb97Ic4EpPLIKaA34BX18VJyha5q9n4qvBba0b+tZAg=",
+        "narHash": "sha256-nV8j6HW6B93HEbeiy43tKCGV9J6xR7jIkAUZVbkKDt4=",
         "path": "../systems/monitoring-1",
         "type": "path"
       },
@@ -3875,7 +3875,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-iEl0ox4MU8dLnwH2prNCosxRmZWld6R3Wyf0aPk/koM=",
+        "narHash": "sha256-4vXBjKeelh3z1l7ZYO0ucB2cZPuVJsYX7yZV3MDGqdk=",
         "path": "../systems/quatresaisons",
         "type": "path"
       },
@@ -3895,7 +3895,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-JlmfWvZWdpG8URsDmCRaWmLo1pUxKf0yxwcLF2OwzTo=",
+        "narHash": "sha256-wAhvhb/zq5upukz/cfyN1nRfYTcFby8OJi2yFaZBGIM=",
         "path": "../systems/zoldene",
         "type": "path"
       },
@@ -6202,11 +6202,11 @@
     },
     "nixpkgs_70": {
       "locked": {
-        "lastModified": 1708475490,
-        "narHash": "sha256-g1v0TsWBQPX97ziznfJdWhgMyMGtoBFs102xSYO4syU=",
+        "lastModified": 1720031269,
+        "narHash": "sha256-rwz8NJZV+387rnWpTYcXaRNvzUSnnF9aHONoJIYmiUQ=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "0e74ca98a74bc7270d28838369593635a5db3260",
+        "rev": "9f4128e00b0ae8ec65918efeba59db998750ead6",
         "type": "github"
       },
       "original": {
@@ -6984,7 +6984,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-fntajNe0urhuR0NbTOQZLTMhtHnd7p6PVuuEf0oAoFg=",
+        "narHash": "sha256-LDicilQIpNXKg/UD6uyf66h/iL/rhDOkkVjTMdKRzX4=",
         "path": "../../flakes/private/opendmarc",
         "type": "path"
       },
@@ -7323,7 +7323,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Deh1qsi1UFskPSAwq2sUGyPeh7hVVHct8hhy4o6fEzE=",
+        "narHash": "sha256-S6sETV9+RccMB5LcH4vOZJiTdhLS3SRIjFRvEfjd9Ag=",
         "path": "../../flakes/private/chatons",
         "type": "path"
       },
@@ -7335,7 +7335,7 @@
     "private-environment": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../../flakes/private/environment",
         "type": "path"
       },
@@ -7347,7 +7347,7 @@
     "private-environment_2": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../../flakes/private/environment",
         "type": "path"
       },
@@ -7366,7 +7366,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-bWNhkERypwoog3lphO0xURJ4xt58CZEWKn7So7A5mtM=",
+        "narHash": "sha256-Aqubcd5AOuP6XUdvjeCXIP6Yksn8uBXbS62kWXBop1w=",
         "path": "../../flakes/private/milters",
         "type": "path"
       },
@@ -7384,7 +7384,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VZjf9fXcyeS3LpVW6NvzJpiJuEtJsGlOOfH8XwL8CdI=",
+        "narHash": "sha256-F7GennKqLc6Cx3DuU6qSPUHmjvpfrrfOshor41vaCz4=",
         "path": "../../flakes/private/monitoring",
         "type": "path"
       },
@@ -7419,7 +7419,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-fntajNe0urhuR0NbTOQZLTMhtHnd7p6PVuuEf0oAoFg=",
+        "narHash": "sha256-LDicilQIpNXKg/UD6uyf66h/iL/rhDOkkVjTMdKRzX4=",
         "path": "../../flakes/private/opendmarc",
         "type": "path"
       },
@@ -7480,7 +7480,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-uqftr7R3cVYwWuu8Xl6VbPVL2pqapv1bfmMJpq3LnZ4=",
+        "narHash": "sha256-mhoBv1NxQoAMlfFGkgGC28cjMTgUxgb2oqNS+k6kWH4=",
         "path": "../../flakes/private/ssh",
         "type": "path"
       },
@@ -7499,7 +7499,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
@@ -7518,7 +7518,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
@@ -7571,7 +7571,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-TeZKpuqFi0PEnhays+oL+hrNlO/O+IV/4B+Vtim4DKY=",
+        "narHash": "sha256-2fWHwmMMILe0enrbMMgFoVH+3PysvSx1Oair4W2hgIw=",
         "path": "../../flakes/etherpad-lite",
         "type": "path"
       },
@@ -7613,7 +7613,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-kbhkTVO086HibTB2ke3Qc458FwLUp2CqU8XUjuaAIug=",
+        "narHash": "sha256-emS5jDCcLaK3/Hqk/2p6jQDxZfO1hPicMTblyVBD7EI=",
         "path": "../../flakes/grocy",
         "type": "path"
       },
@@ -7694,7 +7694,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../flakes/mypackages",
         "type": "path"
       },
@@ -7817,7 +7817,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-+z5CIx4Gin8Ygu3qQbd5QMPuChzPkhtSv+kUm6dUW/s=",
+        "narHash": "sha256-cR14yn0IbWNe98PAlV+MHO6ClQqeT5HztMeLawldtWs=",
         "path": "../../flakes/surfer",
         "type": "path"
       },
@@ -7962,7 +7962,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-TeZKpuqFi0PEnhays+oL+hrNlO/O+IV/4B+Vtim4DKY=",
+        "narHash": "sha256-2fWHwmMMILe0enrbMMgFoVH+3PysvSx1Oair4W2hgIw=",
         "path": "./etherpad-lite",
         "type": "path"
       },
@@ -8004,7 +8004,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-kbhkTVO086HibTB2ke3Qc458FwLUp2CqU8XUjuaAIug=",
+        "narHash": "sha256-emS5jDCcLaK3/Hqk/2p6jQDxZfO1hPicMTblyVBD7EI=",
         "path": "./grocy",
         "type": "path"
       },
@@ -8104,7 +8104,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "./mypackages",
         "type": "path"
       },
@@ -8229,7 +8229,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Deh1qsi1UFskPSAwq2sUGyPeh7hVVHct8hhy4o6fEzE=",
+        "narHash": "sha256-S6sETV9+RccMB5LcH4vOZJiTdhLS3SRIjFRvEfjd9Ag=",
         "path": "./private/chatons",
         "type": "path"
       },
@@ -8241,7 +8241,7 @@
     "s-private-environment": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "./private/environment",
         "type": "path"
       },
@@ -8257,7 +8257,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-XdgjCex3Izb2hID+EBVj0YsEE5xvc+I416I2fHpi1LE=",
+        "narHash": "sha256-tY5qk98NpdM4osbPYFeo6/pHiQQU4a4iKw2jCJP99q8=",
         "path": "./private/mail-relay",
         "type": "path"
       },
@@ -8276,7 +8276,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-bWNhkERypwoog3lphO0xURJ4xt58CZEWKn7So7A5mtM=",
+        "narHash": "sha256-Aqubcd5AOuP6XUdvjeCXIP6Yksn8uBXbS62kWXBop1w=",
         "path": "./private/milters",
         "type": "path"
       },
@@ -8294,7 +8294,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VZjf9fXcyeS3LpVW6NvzJpiJuEtJsGlOOfH8XwL8CdI=",
+        "narHash": "sha256-F7GennKqLc6Cx3DuU6qSPUHmjvpfrrfOshor41vaCz4=",
         "path": "./private/monitoring",
         "type": "path"
       },
@@ -8329,7 +8329,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-fntajNe0urhuR0NbTOQZLTMhtHnd7p6PVuuEf0oAoFg=",
+        "narHash": "sha256-LDicilQIpNXKg/UD6uyf66h/iL/rhDOkkVjTMdKRzX4=",
         "path": "./private/opendmarc",
         "type": "path"
       },
@@ -8390,7 +8390,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-uqftr7R3cVYwWuu8Xl6VbPVL2pqapv1bfmMJpq3LnZ4=",
+        "narHash": "sha256-mhoBv1NxQoAMlfFGkgGC28cjMTgUxgb2oqNS+k6kWH4=",
         "path": "./private/ssh",
         "type": "path"
       },
@@ -8409,7 +8409,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "./private/system",
         "type": "path"
       },
@@ -8451,7 +8451,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-+z5CIx4Gin8Ygu3qQbd5QMPuChzPkhtSv+kUm6dUW/s=",
+        "narHash": "sha256-cR14yn0IbWNe98PAlV+MHO6ClQqeT5HztMeLawldtWs=",
         "path": "./surfer",
         "type": "path"
       },
@@ -9015,7 +9015,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
@@ -9034,7 +9034,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
@@ -9053,7 +9053,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
@@ -9072,7 +9072,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
diff --git a/flakes/grocy/flake.lock b/flakes/grocy/flake.lock
index f137e52..3e8cb41 100644
--- a/flakes/grocy/flake.lock
+++ b/flakes/grocy/flake.lock
@@ -58,7 +58,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../mypackages",
         "type": "path"
       },
diff --git a/flakes/mypackages/pkgs/webapps/default.nix b/flakes/mypackages/pkgs/webapps/default.nix
index 18a724d..110e993 100644
--- a/flakes/mypackages/pkgs/webapps/default.nix
+++ b/flakes/mypackages/pkgs/webapps/default.nix
@@ -10,9 +10,17 @@ rec {
   nextcloud_25 = callPackage ./nextcloud { nextcloudVersion = 25; };
   nextcloud_26 = callPackage ./nextcloud { nextcloudVersion = 26; };
   nextcloud_27 = callPackage ./nextcloud { nextcloudVersion = 27; };
+  nextcloud_27_2 = callPackage ./nextcloud { nextcloudVersion = "27_2"; };
+  # required postgresql and php upgrade!
+  #nextcloud_28 = callPackage ./nextcloud { nextcloudVersion = 28; };
+  #nextcloud_29 = callPackage ./nextcloud { nextcloudVersion = 29; };
   nextcloud_25-all = nextcloud_25.withApps (a: builtins.attrValues nextcloud_25.allSupportedApps);
   nextcloud_26-all = nextcloud_26.withApps (a: builtins.attrValues nextcloud_26.allSupportedApps);
   nextcloud_27-all = nextcloud_27.withApps (a: builtins.attrValues nextcloud_27.allSupportedApps);
+  nextcloud_27_2-all = nextcloud_27_2.withApps (a: builtins.attrValues nextcloud_27_2.allSupportedApps);
+  # required postgresql and php upgrade!
+  #nextcloud_28-all = nextcloud_28.withApps (a: builtins.attrValues nextcloud_28.allSupportedApps);
+  #nextcloud_29-all = nextcloud_29.withApps (a: builtins.attrValues nextcloud_29.allSupportedApps);
   phpbb = callPackage ./phpbb {};
   phpldapadmin = callPackage ./phpldapadmin {};
   rompr = callPackage ./rompr {};
diff --git a/flakes/mypackages/pkgs/webapps/mantisbt_2/default.nix b/flakes/mypackages/pkgs/webapps/mantisbt_2/default.nix
index 942e32c..f3d5be8 100644
--- a/flakes/mypackages/pkgs/webapps/mantisbt_2/default.nix
+++ b/flakes/mypackages/pkgs/webapps/mantisbt_2/default.nix
@@ -1,4 +1,4 @@
-{ mantis_config ? "/etc/mantisbt/config_inc.php", stdenv, fetchurl, lib, callPackage}:
+{ mantis_config ? {}, stdenv, fetchurl, lib, callPackage}:
 let
   pluginNames = [ "slack" "source-integration" "taskodrome" "mantis-kanban" "tasks" ];
   allPlugins = lib.attrsets.genAttrs pluginNames
@@ -37,8 +37,7 @@ let
     #];
     installPhase = ''
     cp -a . $out
-    ln -s ${mantis_config} $out/config/config_inc.php
-    '';
+    '' + builtins.concatStringsSep "\n" (lib.mapAttrsToList (k: v: "ln -s ${v} $out/config/${k}.php") mantis_config);
 
     passthru = toPassthru package [];
   };
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/audioplayer.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/audioplayer.nix
index 6e7380c..8080b4e 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/audioplayer.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/audioplayer.nix
@@ -1,15 +1,25 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/audioplayer
   audioplayer_3_4_0 = buildApp rec {
     appName = "audioplayer";
     version = "3.4.0";
     url = "https://github.com/Rello/${appName}/releases/download/${version}/${appName}-${version}.tar.gz";
     sha256 = "sha256-pog9cll02+AbYHG/jiUztO9odqu7PSEWBUieK32Eqf4=";
   };
+  audioplayer_3_4_1 = buildApp rec {
+    appName = "audioplayer";
+    version = "3.4.1";
+    url = "https://github.com/Rello/${appName}/releases/download/${version}/${appName}-${version}.tar.gz";
+    sha256 = "sha256-ZPIvn5devG6puTyxgXlBpA60kJsYWXbQLNiL5f2jLrA=";
+  };
   versions = {
     "25" = audioplayer_3_4_0;
     "26" = audioplayer_3_4_0;
     "27" = audioplayer_3_4_0;
+    "27_2" = audioplayer_3_4_1;
+    "28" = audioplayer_3_4_1;
+    "29" = audioplayer_3_4_1;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app audioplayer")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/bookmarks.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/bookmarks.nix
index 0503e5b..0722392 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/bookmarks.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/bookmarks.nix
@@ -1,5 +1,6 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/bookmarks
   bookmarks_12_1_0 = buildApp rec {
     appName = "bookmarks";
     version = "12.1.0";
@@ -12,10 +13,25 @@ let
     url = "https://github.com/nextcloud/${appName}/releases/download/v${version}/${appName}-${version}.tar.gz";
     sha256 = "sha256-7Gx8e8C2dDkB/39eAGKOLrP3YkVbGkfPKpQBeCaV/cE=";
   };
+  bookmarks_13_1_3 = buildApp rec {
+    appName = "bookmarks";
+    version = "13.1.3";
+    url = "https://github.com/nextcloud/${appName}/releases/download/v${version}/${appName}-${version}.tar.gz";
+    sha256 = "sha256-9jSUtLT89UkxZhvyp+cDNV2OAc0+BzFoXAd5YfJTgXo=";
+  };
+  bookmarks_14_2_2 = buildApp rec {
+    appName = "bookmarks";
+    version = "14.2.2";
+    url = "https://github.com/nextcloud/${appName}/releases/download/v${version}/${appName}-${version}.tar.gz";
+    sha256 = "sha256-hqmX64arwllviwG7ySvdwA8IYzWoLjP2MyhT389UZXw=";
+  };
   versions = {
     "25" = bookmarks_12_1_0;
     "26" = bookmarks_13_0_1;
     "27" = bookmarks_13_0_1;
+    "27_2" = bookmarks_13_1_3;
+    "28" = bookmarks_14_2_2;
+    "29" = bookmarks_14_2_2;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app bookmarks")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/calendar.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/calendar.nix
index 497d4ba..8ce18e3 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/calendar.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/calendar.nix
@@ -1,15 +1,25 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/calendar
   calendar_4_4_4 = buildApp rec {
     appName = "calendar";
     version = "4.4.4";
     url = "https://github.com/nextcloud-releases/${appName}/releases/download/v${version}/${appName}-v${version}.tar.gz";
     sha256 = "sha256-8UeHOpgbUf2oHHOvLN58v68QvyDYQXkSjsVKn6UGrGU=";
   };
+  calendar_4_7_6 = buildApp rec {
+    appName = "calendar";
+    version = "4.7.6";
+    url = "https://github.com/nextcloud-releases/${appName}/releases/download/v${version}/${appName}-v${version}.tar.gz";
+    sha256 = "sha256-WSz30rta3PdNaxisxUNE1Zcp5MPfw9jB9ervMjgjZss=";
+  };
   versions = {
     "25" = calendar_4_4_4;
     "26" = calendar_4_4_4;
     "27" = calendar_4_4_4;
+    "27_2" = calendar_4_7_6;
+    "28" = calendar_4_7_6;
+    "29" = calendar_4_7_6;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app calendar")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/carnet.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/carnet.nix
index 05f0928..3df6c58 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/carnet.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/carnet.nix
@@ -1,15 +1,25 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/carnet
   carnet_0_25_2 = buildApp rec {
     appName = "carnet";
     version = "0.25.2";
     url = "https://github.com/PhieF/CarnetNextcloud/releases/download/v${version}/${appName}-nc-v${version}.tar.gz";
     sha256 = "sha256-HArD+M6UA9BhSsrlpp/gsKWkUTWAoNHl/gr0S3AlKzg=";
   };
+  carnet_0_25_4 = buildApp rec {
+    appName = "carnet";
+    version = "0.25.4";
+    url = "https://github.com/PhieF/CarnetNextcloud/releases/download/v${version}/${appName}-nc-v${version}.tar.gz";
+    sha256 = "sha256-xKG0MRzWdBYJERXZ6HU4sZIqhL9lVZHnWIkaVdZnYUg=";
+  };
   versions = {
     "25" = carnet_0_25_2;
     "26" = carnet_0_25_2;
     "27" = carnet_0_25_2;
+    "27_2" = carnet_0_25_4;
+    "28" = carnet_0_25_4;
+    "29" = carnet_0_25_4;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app carnet")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/contacts.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/contacts.nix
index f8931b7..dc5f2bd 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/contacts.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/contacts.nix
@@ -1,15 +1,31 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/contacts
   contacts_5_3_2 = buildApp rec {
     appName = "contacts";
     version = "5.3.2";
     url = "https://github.com/nextcloud-releases/${appName}/releases/download/v${version}/${appName}-v${version}.tar.gz";
     sha256 = "sha256-1jQ+pyLBPU7I4wSPkmezJq7ukrQh8WPErG4J6Ps3LR4=";
   };
+  contacts_5_5_3 = buildApp rec {
+    appName = "contacts";
+    version = "5.5.3";
+    url = "https://github.com/nextcloud-releases/${appName}/releases/download/v${version}/${appName}-v${version}.tar.gz";
+    sha256 = "sha256-zxmgMiizzXGfReRS9XJ+fb6tJRLH/Z5NvuLpspYARFI=";
+  };
+  contacts_6_0_0 = buildApp rec {
+    appName = "contacts";
+    version = "6.0.0";
+    url = "https://github.com/nextcloud-releases/${appName}/releases/download/v${version}/${appName}-v${version}.tar.gz";
+    sha256 = "sha256-48ERJ9DQ9w71encT2XVvcVaV+EbthgExQliKO1sQ+1A=";
+  };
   versions = {
     "25" = contacts_5_3_2;
     "26" = contacts_5_3_2;
     "27" = contacts_5_3_2;
+    "27_2" = contacts_5_5_3;
+    "28" = contacts_5_5_3;
+    "29" = contacts_6_0_0;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app contacts")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/cookbook.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/cookbook.nix
index 32fdcc0..4801786 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/cookbook.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/cookbook.nix
@@ -1,15 +1,30 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/cookbook
   cookbook_0_10_2 = buildApp rec {
     appName = "cookbook";
     version = "0.10.2";
     url = "https://github.com/nextcloud/${appName}/releases/download/v${version}/Cookbook-${version}.tar.gz";
     sha256 = "sha256-H7KVeISBnu0/4Q31ihhiXvRtkXz4yLGOAsAj5ERgeCM=";
   };
+  cookbook_0_10_5 = buildApp rec {
+    appName = "cookbook";
+    version = "0.10.5";
+    url = "https://github.com/christianlupus-nextcloud/cookbook-releases/releases/download/v${version}/cookbook-${version}.tar.gz";
+    sha256 = "sha256-EHc+AMKsjAVVcNQ00Yf0Z4AFeUWdtf1uYGA5BHlTcTM=";
+  };
+  cookbook_0_11_0 = buildApp rec {
+    appName = "cookbook";
+    version = "0.11.0";
+    url = "https://github.com/christianlupus-nextcloud/cookbook-releases/releases/download/v${version}/cookbook-${version}.tar.gz";
+    sha256 = "sha256-8oIhtI1Bkb3zC/znDLYWmLaVqkiBLLMqbqEAW5HycS4=";
+  };
   versions = {
     "25" = cookbook_0_10_2;
     "26" = cookbook_0_10_2;
     "27" = cookbook_0_10_2;
+    "27_2" = cookbook_0_10_5;
+    "28" = cookbook_0_11_0;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app cookbook")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/deck.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/deck.nix
index c5dd2d3..b670fa7 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/deck.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/deck.nix
@@ -1,5 +1,6 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/deck
   deck_1_8_5 = buildApp rec {
     appName = "deck";
     version = "1.8.5";
@@ -18,10 +19,31 @@ let
     url = "https://github.com/nextcloud-releases/${appName}/releases/download/v${version}/${appName}-v${version}.tar.gz";
     sha256 = "sha256-W0XVvhTQoCjoK7S2tEd7bvU0MTWtqYt7QiB9H1p1UP8=";
   };
+  deck_1_11_4 = buildApp rec {
+    appName = "deck";
+    version = "1.11.4";
+    url = "https://github.com/nextcloud-releases/${appName}/releases/download/v${version}/${appName}-v${version}.tar.gz";
+    sha256 = "sha256-LIQgzM7C21ON+DMAjwREmgVACPtCMOBYuYbdGYHGnLI=";
+  };
+  deck_1_12_2 = buildApp rec {
+    appName = "deck";
+    version = "1.12.2";
+    url = "https://github.com/nextcloud-releases/${appName}/releases/download/v${version}/${appName}-v${version}.tar.gz";
+    sha256 = "sha256-K9ZG3Pc9dfrF3hFi3FCKoZWywXUaueQuwGpZksumToA=";
+  };
+  deck_1_13_0 = buildApp rec {
+    appName = "deck";
+    version = "1.13.0";
+    url = "https://github.com/nextcloud-releases/${appName}/releases/download/v${version}/${appName}-v${version}.tar.gz";
+    sha256 = "sha256-Gyfyq4rJv4alLhdIW8S8wCUAOdxp6UG7UgUWH0CkVR4=";
+  };
   versions = {
     "25" = deck_1_8_5;
     "26" = deck_1_9_2;
     "27" = deck_1_10_0;
+    "27_2" = deck_1_11_4;
+    "28" = deck_1_12_2;
+    "29" = deck_1_13_0;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app deck")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/drawio.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/drawio.nix
index c03c479..28a742a 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/drawio.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/drawio.nix
@@ -8,6 +8,7 @@ let
       "drawio" = ["application/x-drawio"];
     };
   };
+  # https://apps.nextcloud.com/apps/drawio
   drawio_2_1_2 = buildApp rec {
     appName = "drawio";
     version = "2.1.2";
@@ -15,10 +16,27 @@ let
     sha256 = "sha256-5BrEnS2cMk/vwkAr1lXKtfocqReZAj1+pbDqmi/uG0A=";
     inherit otherConfig;
   };
+  drawio_2_1_4 = buildApp rec {
+    appName = "drawio";
+    version = "2.1.4";
+    url = "https://github.com/jgraph/drawio-nextcloud/releases/download/v${version}/${appName}-v${version}.tar.gz";
+    sha256 = "sha256-QD7b6+UjWNeS4Z2QLcgBfetIXwqNngFRX9Fryx90mQA=";
+    inherit otherConfig;
+  };
+  drawio_3_0_2 = buildApp rec {
+    appName = "drawio";
+    version = "3.0.2";
+    url = "https://github.com/jgraph/drawio-nextcloud/releases/download/v${version}/${appName}-v${version}.tar.gz";
+    sha256 = "sha256-7ulo+7rHIOCCFt4LhXDFQc+ighMiwfHDwcJuCfCb4CE=";
+    inherit otherConfig;
+  };
   versions = {
     "25" = drawio_2_1_2;
     "26" = drawio_2_1_2;
     "27" = drawio_2_1_2;
+    "27_2" = drawio_2_1_4;
+    "28" = drawio_3_0_2;
+    "29" = drawio_3_0_2;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app drawio")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/external.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/external.nix
index 941304a..7a74b6c 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/external.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/external.nix
@@ -1,5 +1,6 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/external
   external_5_0_2 = buildApp rec {
     appName = "external";
     version = "5.0.2";
@@ -18,10 +19,31 @@ let
     url = "https://github.com/nextcloud-releases/${appName}/releases/download/v${version}/${appName}-v${version}.tar.gz";
     sha256 = "sha256-XqeJCWS8mncS7CfrnXdhtzdgkFTib/RnursJ/AqyvD8=";
   };
+  external_5_2_1 = buildApp rec {
+    appName = "external";
+    version = "5.2.1";
+    url = "https://github.com/nextcloud-releases/${appName}/releases/download/v${version}/${appName}-v${version}.tar.gz";
+    sha256 = "sha256-kyeqd/KRbDuqfnYUb0sb7QF1LKmtQvlI/NPCH8oFutQ=";
+  };
+  external_5_3_1 = buildApp rec {
+    appName = "external";
+    version = "5.3.1";
+    url = "https://github.com/nextcloud-releases/${appName}/releases/download/v${version}/${appName}-v${version}.tar.gz";
+    sha256 = "sha256-WJBu2KFLsT/p+iiwy0p5UdKdrSMrfD3dSQjwuAw6DwY=";
+  };
+  external_5_4_0 = buildApp rec {
+    appName = "external";
+    version = "5.4.0";
+    url = "https://github.com/nextcloud-releases/${appName}/releases/download/v${version}/${appName}-v${version}.tar.gz";
+    sha256 = "sha256-7DxvOwy+AI/+t559ffqCIDBnyozxQTe1EhvbUhX64UY=";
+  };
   versions = {
     "25" = external_5_0_2;
     "26" = external_5_1_0;
     "27" = external_5_2_0;
+    "27_2" = external_5_2_1;
+    "28" = external_5_3_1;
+    "29" = external_5_4_0;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app external")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/extract.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/extract.nix
index 589115e..23fa92a 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/extract.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/extract.nix
@@ -1,5 +1,6 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/extract
   extract_1_3_6 = buildApp rec {
     appName = "extract";
     version = "1.3.6";
@@ -10,6 +11,7 @@ let
     "25" = extract_1_3_6;
     "26" = extract_1_3_6;
     "27" = extract_1_3_6;
+    "27_2" = extract_1_3_6;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app extract")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/files_markdown.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/files_markdown.nix
index cf8e179..dd7cdad 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/files_markdown.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/files_markdown.nix
@@ -1,5 +1,6 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/files_markdown
   files_markdown_2_4_1 = buildApp rec {
     appName = "files_markdown";
     version = "2.4.1";
@@ -10,6 +11,7 @@ let
     "25" = files_markdown_2_4_1;
     "26" = files_markdown_2_4_1;
     "27" = files_markdown_2_4_1;
+    "27_2" = files_markdown_2_4_1;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app files_markdown")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/files_mindmap.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/files_mindmap.nix
index fff85d7..22f3715 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/files_mindmap.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/files_mindmap.nix
@@ -1,15 +1,24 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/files_mindmap
   files_mindmap_0_0_28 = buildApp rec {
     appName = "files_mindmap";
     version = "0.0.28";
     url = "https://github.com/ACTom/${appName}/releases/download/v${version}/${appName}-${version}.tar.gz";
     sha256 = "sha256-VlzqstlsdinaqkbK32NvS1oFoQcFasJGHSlcKxdQwIM=";
   };
+  files_mindmap_0_0_30 = buildApp rec {
+    appName = "files_mindmap";
+    version = "0.0.30";
+    url = "https://github.com/ACTom/${appName}/releases/download/v${version}/${appName}-${version}.tar.gz";
+    sha256 = "sha256-VsaJT3lsPqnCmgLYkkdLhyIRmi/CumEdezsvhra2NQk=";
+  };
   versions = {
     "25" = files_mindmap_0_0_28;
     "26" = files_mindmap_0_0_28;
     "27" = files_mindmap_0_0_28;
+    "27_2" = files_mindmap_0_0_30;
+    "28" = files_mindmap_0_0_30;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app files_mindmap")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/files_readmemd.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/files_readmemd.nix
index 97aeaf7..6a27942 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/files_readmemd.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/files_readmemd.nix
@@ -1,14 +1,22 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/files_readmemd
   files_readmemd_2_0_0 = buildApp rec {
     appName = "files_readmemd";
     version = "2.0.0";
     url = "https://github.com/mamatt/files_readmemd/releases/download/V${version}/${appName}.tar.gz";
     sha256 = "sha256-vUoSK+b4gj51eJcocrXINO/eFKPRZQoj0q6l0gVBqgw=";
   };
+  files_readmemd_2_0_1 = buildApp rec {
+    appName = "files_readmemd";
+    version = "2.0.1";
+    url = "https://github.com/mamatt/files_readmemd/releases/download/V${version}/${appName}.tar.gz";
+    sha256 = "sha256-tilluHmSXiuiW07rtbBGckUxrL92BPhIcBt5aPLkhq8=";
+  };
   versions = {
     "25" = files_readmemd_2_0_0;
     "26" = files_readmemd_2_0_0;
+    "27_2" = files_readmemd_2_0_1;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app files_readmemd")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/flowupload.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/flowupload.nix
index 55f4ba7..05223f3 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/flowupload.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/flowupload.nix
@@ -1,5 +1,6 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/flowupload
   flowupload_1_1_3 = buildApp rec {
     appName = "flowupload";
     version = "1.1.3";
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/gpxedit.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/gpxedit.nix
index be230fd..b8f6dbe 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/gpxedit.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/gpxedit.nix
@@ -1,5 +1,6 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/gpxedit
   gpxedit_0_0_14 = buildApp rec {
     appName = "gpxedit";
     version = "0.0.14";
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/gpxpod.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/gpxpod.nix
index 5a3b7e7..2759164 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/gpxpod.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/gpxpod.nix
@@ -8,6 +8,7 @@ let
       "gpx" = ["application/gpx+xml"];
     };
   };
+  # https://apps.nextcloud.com/apps/gpxpod
   gpxpod_5_0_10 = buildApp rec {
     appName = "gpxpod";
     version = "5.0.10";
@@ -22,10 +23,27 @@ let
     sha256 = "sha256-uhz6AC8opDQkFQDpG4u8H4vkFtzbFAZvb8r32QHj/8I=";
     inherit otherConfig;
   };
+  gpxpod_5_0_13 = buildApp rec {
+    appName = "gpxpod";
+    version = "5.0.13";
+    url = "https://github.com/julien-nc/gpxpod/releases/download/v${version}/${appName}-${version}.tar.gz";
+    sha256 = "sha256-NdP95TtTd9Vo6f+PQ/JpcpJNvqRZQ/3NWxNaQRu67vs=";
+    inherit otherConfig;
+  };
+  gpxpod_5_0_18 = buildApp rec {
+    appName = "gpxpod";
+    version = "5.0.18";
+    url = "https://github.com/julien-nc/gpxpod/releases/download/v${version}/${appName}-${version}.tar.gz";
+    sha256 = "sha256-OaU903sxoSzfVv1igwSLdgepgXKBkEuoin/crSg+RyA=";
+    inherit otherConfig;
+  };
   versions = {
     "25" = gpxpod_5_0_10;
     "26" = gpxpod_5_0_12;
     "27" = gpxpod_5_0_12;
+    "27_2" = gpxpod_5_0_13;
+    "28" = gpxpod_5_0_18;
+    "29" = gpxpod_5_0_18;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app gpxpod")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/groupfolders.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/groupfolders.nix
index b966d3d..1256ce8 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/groupfolders.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/groupfolders.nix
@@ -1,5 +1,6 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/groupfolders
   groupfolders_13_1_5 = buildApp rec {
     appName = "groupfolders";
     version = "13.1.5";
@@ -18,10 +19,31 @@ let
     url = "https://github.com/nextcloud-releases/${appName}/releases/download/v${version}/${appName}-v${version}.tar.gz";
     sha256 = "sha256-NsTZhmY1XBKHn/1IcIp2Al7BwJzE2xoBzgyBXnmuWls=";
   };
+  groupfolders_15_3_8 = buildApp rec {
+    appName = "groupfolders";
+    version = "15.3.8";
+    url = "https://github.com/nextcloud-releases/${appName}/releases/download/v${version}/${appName}-v${version}.tar.gz";
+    sha256 = "sha256-0R2FN7ba5FI95GWTUeE2JUoYIvSLIsQH/Y+VTqZQn1M=";
+  };
+  groupfolders_16_0_7 = buildApp rec {
+    appName = "groupfolders";
+    version = "16.0.7";
+    url = "https://github.com/nextcloud-releases/${appName}/releases/download/v${version}/${appName}-v${version}.tar.gz";
+    sha256 = "sha256-a22KP20fE+cpOuv2erl3qUu4glWArx5oISFlI8vxAQc=";
+  };
+  groupfolders_17_0_1 = buildApp rec {
+    appName = "groupfolders";
+    version = "17.0.1";
+    url = "https://github.com/nextcloud-releases/${appName}/releases/download/v${version}/${appName}-v${version}.tar.gz";
+    sha256 = "sha256-x9T/JoNJl6LxaPzF9IpKaGrz321nbMSAN3gfZbSapGE=";
+  };
   versions = {
     "25" = groupfolders_13_1_5;
     "26" = groupfolders_14_0_4;
     "27" = groupfolders_15_0_2;
+    "27_2" = groupfolders_15_3_8;
+    "28" = groupfolders_16_0_7;
+    "29" = groupfolders_17_0_1;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app groupfolders")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/impersonate.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/impersonate.nix
index afae917..96ad786 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/impersonate.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/impersonate.nix
@@ -1,5 +1,6 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/impersonate
   impersonate_1_12_1 = buildApp rec {
     appName = "impersonate";
     version = "1.12.1";
@@ -18,10 +19,25 @@ let
     url = "https://github.com/nextcloud-releases/impersonate/releases/download/v${version}/${appName}-v${version}.tar.gz";
     sha256 = "sha256-A1rGJJLaWhiNf9l0YUh6WOB+fKRBRDckE890hq5OB4k=";
   };
+  impersonate_1_15_0 = buildApp rec {
+    appName = "impersonate";
+    version = "1.15.0";
+    url = "https://github.com/nextcloud-releases/impersonate/releases/download/v${version}/${appName}-v${version}.tar.gz";
+    sha256 = "sha256-fJ96PmkRvgmoIYmF7r/zOQ88/tjb6d0+sQ1YbKq8sY8=";
+  };
+  impersonate_1_16_0 = buildApp rec {
+    appName = "impersonate";
+    version = "1.16.0";
+    url = "https://github.com/nextcloud-releases/impersonate/releases/download/v${version}/${appName}-v${version}.tar.gz";
+    sha256 = "sha256-7NCfm2c861E1ZOZhpqjbsw2LC9I7ypp2J1LamqmWvtU=";
+  };
   versions = {
     "25" = impersonate_1_12_1;
     "26" = impersonate_1_13_1;
     "27" = impersonate_1_14_0;
+    "27_2" = impersonate_1_14_0;
+    "28" = impersonate_1_15_0;
+    "29" = impersonate_1_16_0;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app impersonate")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/integration_dropbox.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/integration_dropbox.nix
index d3834ad..2b3b738 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/integration_dropbox.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/integration_dropbox.nix
@@ -1,13 +1,23 @@
 { buildApp, nextcloudVersion }:
 let
-   integration_dropbox_2_0_1 = buildApp rec {
+  # https://apps.nextcloud.com/apps/integration_dropbox
+  integration_dropbox_2_0_1 = buildApp rec {
     appName = "integration_dropbox";
     version = "2.0.1";
     url = "https://github.com/nextcloud-releases/${appName}/releases/download/v${version}/${appName}-v${version}.tar.gz";
     sha256 = "sha256-RPCd8+/yKNlIGfEU+ITS8DBIxJDfc//8MGHaIjfYxdQ=";
   };
+  integration_dropbox_2_2_0 = buildApp rec {
+    appName = "integration_dropbox";
+    version = "2.2.0";
+    url = "https://github.com/nextcloud-releases/${appName}/releases/download/v${version}/${appName}-v${version}.tar.gz";
+    sha256 = "sha256-GSdiE/WYyJlBv6SuViLzidJvbzImnfWUEKwjqye6qyw=";
+  };
   versions = {
     "27" = integration_dropbox_2_0_1;
+    "27_2" = integration_dropbox_2_2_0;
+    "28" = integration_dropbox_2_2_0;
+    "29" = integration_dropbox_2_2_0;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app integration_dropbox")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/keeweb.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/keeweb.nix
index 7be8c6b..63c2018 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/keeweb.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/keeweb.nix
@@ -1,5 +1,6 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/keeweb
   keeweb_0_6_13 = buildApp rec {
     appName = "keeweb";
     version = "0.6.13";
@@ -15,10 +16,27 @@ let
       };
     };
   };
+  keeweb_0_6_18 = buildApp rec {
+    appName = "keeweb";
+    version = "0.6.18";
+    url = "https://github.com/jhass/nextcloud-keeweb/releases/download/v${version}/${appName}-${version}.tar.gz";
+    sha256 = "sha256-DsWjS7U8FPbryfH3TjQ0sLqVYZX4wlzy6AZl2cHXR6M=";
+    installPhase = ''
+      mkdir -p $out
+      cp -R . $out/
+      '';
+    otherConfig = {
+      mimetypemapping = {
+        "kdbx" = ["application/x-kdbx"];
+      };
+    };
+  };
   versions = {
     "25" = keeweb_0_6_13;
     "26" = keeweb_0_6_13;
     "27" = keeweb_0_6_13;
+    "27_2" = keeweb_0_6_13;
+    "28" = keeweb_0_6_18;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app keeweb")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/maps.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/maps.nix
index 1b29173..8d09887 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/maps.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/maps.nix
@@ -1,15 +1,31 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/maps
   maps_1_1_0 = buildApp rec {
     appName = "maps";
     version = "1.1.0";
     url = "https://github.com/nextcloud/maps/releases/download/v${version}/${appName}-${version}.tar.gz";
     sha256 = "sha256-Me/V+9wXZyq3UEVx9Nqim6pfPFJaALjKv9f7iUjill8=";
   };
+  maps_1_2_0 = buildApp rec {
+    appName = "maps";
+    version = "1.2.0";
+    url = "https://github.com/nextcloud/maps/releases/download/v${version}/${appName}-${version}.tar.gz";
+    sha256 = "sha256-3XCjm1rsPpLnOEVoHPasKDZEJzweY7AbqASXoimHGVg=";
+  };
+  maps_1_4_0 = buildApp rec {
+    appName = "maps";
+    version = "1.4.0";
+    url = "https://github.com/nextcloud/maps/releases/download/v${version}/${appName}-${version}.tar.gz";
+    sha256 = "sha256-BmXs6Oepwnm+Cviy4awm3S8P9AiJTt1BnAQNb4TxVYE=";
+  };
   versions = {
     "25" = maps_1_1_0;
     "26" = maps_1_1_0;
     "27" = maps_1_1_0;
+    "27_2" = maps_1_2_0;
+    "28" = maps_1_4_0;
+    "29" = maps_1_4_0;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app maps")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/metadata.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/metadata.nix
index 0fe7409..4c4ec80 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/metadata.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/metadata.nix
@@ -1,15 +1,25 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/metadata
   metadata_0_19_0 = buildApp rec {
     appName = "metadata";
     version = "0.19.0";
     url = "https://github.com/gino0631/nextcloud-metadata/releases/download/v${version}/${appName}.tar.gz";
     sha256 = "sha256-XfFxCwRFO0WnBPU4CIejNXySRQdguvzauu62bzUKD44=";
   };
+  metadata_0_20_0 = buildApp rec {
+    appName = "metadata";
+    version = "0.20.0";
+    url = "https://github.com/gino0631/nextcloud-metadata/releases/download/v${version}/${appName}.tar.gz";
+    sha256 = "sha256-FsdkKnF+hXhrw3KVYWLu7FN34PMF0mOM4+tvB8IzmXw=";
+  };
   versions = {
     "25" = metadata_0_19_0;
     "26" = metadata_0_19_0;
     "27" = metadata_0_19_0;
+    "27_2" = metadata_0_20_0;
+    "28" = metadata_0_20_0;
+    "29" = metadata_0_20_0;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app metadata")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/music.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/music.nix
index fc96224..522d321 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/music.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/music.nix
@@ -1,15 +1,25 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/music
   music_1_8_4 = buildApp rec {
     appName = "music";
     version = "1.8.4";
     url = "https://github.com/owncloud/music/releases/download/v${version}/${appName}_${version}_for_nextcloud.tar.gz";
     sha256 = "sha256-WWXMpOyTRxykAVeUj/h6QP5ENqaMvTcPIqPQjhY68KA=";
   };
+  music_1_11_0 = buildApp rec {
+    appName = "music";
+    version = "1.11.0";
+    url = "https://github.com/owncloud/music/releases/download/v${version}/${appName}_${version}_for_nextcloud.tar.gz";
+    sha256 = "sha256-IcxgSo5kIDzMideKlrh3gdG71s0+KqTCNCpmH+N1lGQ=";
+  };
   versions = {
     "25" = music_1_8_4;
     "26" = music_1_8_4;
     "27" = music_1_8_4;
+    "27_2" = music_1_11_0;
+    "28" = music_1_11_0;
+    "29" = music_1_11_0;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app music")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/notes.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/notes.nix
index 7677c6c..8539a43 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/notes.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/notes.nix
@@ -1,15 +1,25 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/notes
   notes_4_8_1 = buildApp rec {
     appName = "notes";
     version = "4.8.1";
     url = "https://github.com/nextcloud/${appName}/releases/download/v${version}/${appName}.tar.gz";
     sha256 = "sha256-BfH1W+7TWKZRuAAhKQEQtlv8ePTtJQvZQVMMu3zULR4=";
   };
+  notes_4_10_0 = buildApp rec {
+    appName = "notes";
+    version = "4.10.0";
+    url = "https://github.com/nextcloud/${appName}/releases/download/v${version}/${appName}.tar.gz";
+    sha256 = "sha256-av6y5GViTzlHtnUb/OIDw+0wdA/ZRwPYQMU3yDEbMTQ=";
+  };
   versions = {
     "25" = notes_4_8_1;
     "26" = notes_4_8_1;
     "27" = notes_4_8_1;
+    "27_2" = notes_4_10_0;
+    "28" = notes_4_10_0;
+    "29" = notes_4_10_0;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app notes")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/ocsms.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/ocsms.nix
index dcdaad2..5e2dbc0 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/ocsms.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/ocsms.nix
@@ -1,5 +1,6 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/ocsms
   ocsms_2_2_0 = buildApp rec {
     appName = "ocsms";
     version = "2.2.0";
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/onlyoffice.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/onlyoffice.nix
index e93df00..276efe1 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/onlyoffice.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/onlyoffice.nix
@@ -1,5 +1,6 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/onlyoffice
   onlyoffice_7_9_0 = buildApp rec {
     appName = "onlyoffice";
     version = "7.9.0";
@@ -12,10 +13,19 @@ let
     url = "https://github.com/ONLYOFFICE/onlyoffice-nextcloud/releases/download/v${version}/${appName}.tar.gz";
     sha256 = "sha256-DfZKgpkpcogy9I3A3ru0V/WR5wYWBr+wrHe+mQJBPYk=";
   };
+  onlyoffice_9_2_2 = buildApp rec {
+    appName = "onlyoffice";
+    version = "9.2.2";
+    url = "https://github.com/ONLYOFFICE/onlyoffice-nextcloud/releases/download/v${version}/${appName}.tar.gz";
+    sha256 = "sha256-tvecrmbsxfzth+9y5WUYz8Mpwh7rf4NAYOc021vTjS0=";
+  };
   versions = {
     "25" = onlyoffice_7_9_0;
     "26" = onlyoffice_7_9_0;
     "27" = onlyoffice_8_2_0;
+    "27_2" = onlyoffice_9_2_2;
+    "28" = onlyoffice_9_2_2;
+    "29" = onlyoffice_9_2_2;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app onlyoffice")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/passman.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/passman.nix
index 5559b22..63f7c2e 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/passman.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/passman.nix
@@ -1,5 +1,6 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/passman
   passman_2_4_5 = buildApp rec {
     appName = "passman";
     version = "2.4.5";
@@ -12,10 +13,19 @@ let
     url = "https://releases.passman.cc/${appName}_${version}.tar.gz";
     sha256 = "sha256-CeNaN0cioVjcW6ILB//BIvmjQWcbvfK3m8jVQ8LGtyM=";
   };
+  passman_2_4_9 = buildApp rec {
+    appName = "passman";
+    version = "2.4.9";
+    url = "https://releases.passman.cc/${appName}_${version}.tar.gz";
+    sha256 = "sha256-jLcKuY8wJohZ/oRon05yBq+755W9ytgOZsad9jhjUJY=";
+  };
   versions = {
     "25" = passman_2_4_5;
     "26" = passman_2_4_7;
     "27" = passman_2_4_7;
+    "27_2" = passman_2_4_9;
+    "28" = passman_2_4_9;
+    "29" = passman_2_4_9;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app passman")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/polls.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/polls.nix
index a50ac43..24eb7b0 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/polls.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/polls.nix
@@ -1,15 +1,25 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/polls
   polls_5_2_0 = buildApp rec {
     appName = "polls";
     version = "5.2.0";
     url = "https://github.com/nextcloud/polls/releases/download/v${version}/${appName}.tar.gz";
     sha256 = "sha256-45YNcSeFG9v3mfk7eLbDiy6hFgmfePY0j86JiVS0k14=";
   };
+  polls_7_1_1 = buildApp rec {
+    appName = "polls";
+    version = "7.1.1";
+    url = "https://github.com/nextcloud/polls/releases/download/v${version}/${appName}.tar.gz";
+    sha256 = "sha256-C9za++xDhiKQD97M39RijteP0PhTtlDTs94H3Z/pd+I=";
+  };
   versions = {
     "25" = polls_5_2_0;
     "26" = polls_5_2_0;
     "27" = polls_5_2_0;
+    "27_2" = polls_7_1_1;
+    "28" = polls_7_1_1;
+    "29" = polls_7_1_1;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app polls")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/side_menu.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/side_menu.nix
index da48f91..0cfe8a3 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/side_menu.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/side_menu.nix
@@ -1,5 +1,6 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/side_menu
   side_menu_3_10_3 = buildApp rec {
     appName = "side_menu";
     version = "3.10.3";
@@ -7,10 +8,20 @@ let
     filename = "${appName}-${version}.tar.gz";
     sha256 = "sha256-WKbc6Ln6v3LYyRzwy0xAOmXilbqrWGS8XGWIT+TajdM=";
   };
+  side_menu_3_12_0 = buildApp rec {
+    appName = "side_menu";
+    version = "3.12.0";
+    url = "https://gitnet.fr/attachments/9c9be610-5d3b-414d-a523-396c237c15ef";
+    filename = "${appName}-${version}.tar.gz";
+    sha256 = "sha256-WKbc6Ln6v3LYyRzwy0xAOmXilbqrWGS8XGWIT+TajdM=";
+  };
   versions = {
     "25" = side_menu_3_10_3;
     "26" = side_menu_3_10_3;
     "27" = side_menu_3_10_3;
+    "27_2" = side_menu_3_12_0;
+    "28" = side_menu_3_12_0;
+    "29" = side_menu_3_12_0;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app side_menu")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/social.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/social.nix
index 912b5bf..2b566fb 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/social.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/social.nix
@@ -1,5 +1,6 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/social
   social_0_6_1 = buildApp rec {
     appName = "social";
     version = "0.6.1";
@@ -9,6 +10,8 @@ let
   versions = {
     "26" = social_0_6_1;
     "27" = social_0_6_1;
+    "27_2" = social_0_6_1;
+    "28" = social_0_6_1;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app social")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/spreed.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/spreed.nix
index d8a20b9..f4ad602 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/spreed.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/spreed.nix
@@ -1,5 +1,6 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/spreed
   spreed_15_0_7 = buildApp rec {
     appName = "spreed";
     version = "15.0.7";
@@ -18,10 +19,31 @@ let
     url = "https://github.com/nextcloud-releases/${appName}/releases/download/v${version}/${appName}-v${version}.tar.gz";
     sha256 = "sha256-vb08DI+q+5f87zz2UguE1y6b0NV2EoICYpaKUGmyF5w=";
   };
+  spreed_17_1_9 = buildApp rec {
+    appName = "spreed";
+    version = "17.1.9";
+    url = "https://github.com/nextcloud-releases/${appName}/releases/download/v${version}/${appName}-v${version}.tar.gz";
+    sha256 = "sha256-YP/EDlxw3BVRVwWNyopt54Gcw5kG54gBHm2sDkSWLk0=";
+  };
+  spreed_18_0_8 = buildApp rec {
+    appName = "spreed";
+    version = "18.0.8";
+    url = "https://github.com/nextcloud-releases/${appName}/releases/download/v${version}/${appName}-v${version}.tar.gz";
+    sha256 = "sha256-oUbZxLf1maXXB4FYWJ4zsnbkIcaXBcHZdlR3m4wTPio=";
+  };
+  spreed_19_0_2 = buildApp rec {
+    appName = "spreed";
+    version = "19.0.2";
+    url = "https://github.com/nextcloud-releases/${appName}/releases/download/v${version}/${appName}-v${version}.tar.gz";
+    sha256 = "sha256-FmikkGguGlMdEyae3vT6Esx1mMUc1ri5eQX280woPls=";
+  };
   versions = {
     "25" = spreed_15_0_7;
     "26" = spreed_16_0_5;
     "27" = spreed_17_0_3;
+    "27_2" = spreed_17_1_9;
+    "28" = spreed_18_0_8;
+    "29" = spreed_19_0_2;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app spreed")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/talk_matterbridge.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/talk_matterbridge.nix
index 906719d..dc880fc 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/talk_matterbridge.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/talk_matterbridge.nix
@@ -1,14 +1,23 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/talk_matterbridge
   talk_matterbridge_1_26_0 = buildApp rec {
     appName = "talk_matterbridge";
     version = "1.26.0";
     url = "https://github.com/nextcloud/${appName}/releases/download/v${version}/${appName}.tar.gz";
     sha256 = "sha256-gD5lfLWBjWOiy2ULf31ngQVIQbMZj3iwu3zuVrEDSks=";
   };
+  talk_matterbridge_1_28_0 = buildApp rec {
+    appName = "talk_matterbridge";
+    version = "1.28.0";
+    url = "https://github.com/nextcloud/${appName}/releases/download/v${version}-0/${appName}.tar.gz";
+    sha256 = "sha256-uZNc+mJb+frlnXYAZJnn84aopsHvakQ4e7ZKFG6Gwyo=";
+  };
   versions = {
     "25" = talk_matterbridge_1_26_0;
     "26" = talk_matterbridge_1_26_0;
+    "27_2" = talk_matterbridge_1_28_0;
+    "28" = talk_matterbridge_1_28_0;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app talk_matterbridge")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/apps/tasks.nix b/flakes/mypackages/pkgs/webapps/nextcloud/apps/tasks.nix
index aee7650..a81383a 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/apps/tasks.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/apps/tasks.nix
@@ -1,15 +1,25 @@
 { buildApp, nextcloudVersion }:
 let
+  # https://apps.nextcloud.com/apps/tasks
   tasks_0_15_0 = buildApp rec {
     appName = "tasks";
     version = "0.15.0";
     url = "https://github.com/nextcloud/${appName}/releases/download/v${version}/${appName}.tar.gz";
     sha256 = "sha256-nizJUFByK78FZ6KPJ4zfOU5Z9ClAxhwgQ7d+X5TGnM8=";
   };
+  tasks_0_16_0 = buildApp rec {
+    appName = "tasks";
+    version = "0.16.0";
+    url = "https://github.com/nextcloud/${appName}/releases/download/v${version}/${appName}.tar.gz";
+    sha256 = "sha256-HitYQcdURUHujRNMF0jKQzvSO93bItisI0emq0yw8p4=";
+  };
   versions = {
     "25" = tasks_0_15_0;
     "26" = tasks_0_15_0;
     "27" = tasks_0_15_0;
+    "27_2" = tasks_0_15_0;
+    "28" = tasks_0_16_0;
+    "29" = tasks_0_16_0;
   };
 in
   versions."${builtins.toString nextcloudVersion}" or (throw "Unsupported version for nextcloud app tasks")
diff --git a/flakes/mypackages/pkgs/webapps/nextcloud/default.nix b/flakes/mypackages/pkgs/webapps/nextcloud/default.nix
index 8821cfa..ec12872 100644
--- a/flakes/mypackages/pkgs/webapps/nextcloud/default.nix
+++ b/flakes/mypackages/pkgs/webapps/nextcloud/default.nix
@@ -4,6 +4,12 @@ let
     "25" = { sum = "sha256-alvh0fWESSS5KbfiKI1gaoahisDWnfT/bUhsSEEXfQI="; fullVersion = "25.0.10"; }; # php 7.4 - 8.2
     "26" = { sum = "sha256-nhq0aAY4T1hUZdKJY66ZSlirCSgPQet8YJpciwJw1b4="; fullVersion = "26.0.5"; }; # php 8.0 - 8.2
     "27" = { sum = "sha256-O1NMmOdrf+2Mo5NMrUGbEK9YViWfMTvsIs06e/pu+WE="; fullVersion = "27.1.5"; }; # php 8.0 - 8.2
+    "27_2" = { sum = "sha256-lD4ScNdxp8gNqisy5ylM6MO3e56u9yrYs4SH1YyFB1Y="; fullVersion = "27.1.10"; }; # php 8.0 - 8.2
+                                                                                                       # postgresql 12/13/14
+    "28" = { sum = "sha256-3w0zhLRHy6HhKPIggPZ4BSH4aBab6r7o6g0VW/nGa48="; fullVersion = "28.0.6"; }; # php 8.0 - 8.2
+                                                                                                     # postgresql 12/13/14/15
+    "29" = { sum = "sha256-LUnSl9w0AJICEFeCPo54oxK8APVt59hneseQWQkYqxc="; fullVersion = "29.0.2"; }; # php 8.0 - 8.3
+                                                                                                     # postgresql 12/13/14/15/16
   };
   appNames = [
     "audioplayer" "bookmarks" "calendar" "carnet"
diff --git a/flakes/private/chatons/flake.lock b/flakes/private/chatons/flake.lock
index 2925f6c..1e163a2 100644
--- a/flakes/private/chatons/flake.lock
+++ b/flakes/private/chatons/flake.lock
@@ -3,7 +3,7 @@
     "environment": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
diff --git a/flakes/private/environment/flake.nix b/flakes/private/environment/flake.nix
index 49b203e..389a601 100644
--- a/flakes/private/environment/flake.nix
+++ b/flakes/private/environment/flake.nix
@@ -380,7 +380,7 @@
                   type = attrsOf (submodule {
                     options = {
                       remote = mkOption {
-                        type = functionTo str;
+                        type = functionTo (functionTo str);
                         example = literalExample ''
                           bucket: "ssh://some_host/${bucket}";
                           '';
@@ -942,6 +942,14 @@
                     };
                   };
                 };
+                matrix = mkOption {
+                  description = "Matrix configuration";
+                  type = submodule {
+                    options = {
+                      ldap = mkLdapOptions "Mediagoblin" {};
+                    };
+                  };
+                };
                 mediagoblin = mkOption {
                   description = "Mediagoblin configuration";
                   type = submodule {
diff --git a/flakes/private/mail-relay/flake.lock b/flakes/private/mail-relay/flake.lock
index 69406f1..4d620ad 100644
--- a/flakes/private/mail-relay/flake.lock
+++ b/flakes/private/mail-relay/flake.lock
@@ -3,7 +3,7 @@
     "environment": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
diff --git a/flakes/private/milters/flake.lock b/flakes/private/milters/flake.lock
index 31d3d4c..6891e49 100644
--- a/flakes/private/milters/flake.lock
+++ b/flakes/private/milters/flake.lock
@@ -3,7 +3,7 @@
     "environment": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
diff --git a/flakes/private/monitoring/flake.lock b/flakes/private/monitoring/flake.lock
index ed94c2b..cdba7c2 100644
--- a/flakes/private/monitoring/flake.lock
+++ b/flakes/private/monitoring/flake.lock
@@ -3,7 +3,7 @@
     "environment": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
diff --git a/flakes/private/opendmarc/flake.lock b/flakes/private/opendmarc/flake.lock
index e9a1014..15fea39 100644
--- a/flakes/private/opendmarc/flake.lock
+++ b/flakes/private/opendmarc/flake.lock
@@ -3,7 +3,7 @@
     "environment": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
diff --git a/flakes/private/ssh/flake.lock b/flakes/private/ssh/flake.lock
index 69406f1..4d620ad 100644
--- a/flakes/private/ssh/flake.lock
+++ b/flakes/private/ssh/flake.lock
@@ -3,7 +3,7 @@
     "environment": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
diff --git a/flakes/private/system/flake.lock b/flakes/private/system/flake.lock
index 280af0e..c6362c5 100644
--- a/flakes/private/system/flake.lock
+++ b/flakes/private/system/flake.lock
@@ -19,7 +19,7 @@
     "environment": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -69,7 +69,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
diff --git a/flakes/private/system/flake.nix b/flakes/private/system/flake.nix
index ad6c58c..6045fd4 100644
--- a/flakes/private/system/flake.nix
+++ b/flakes/private/system/flake.nix
@@ -30,6 +30,17 @@
           secrets.deleteSecretsVars = true;
           secrets.secretsVars = "/run/keys/vars.yml";
 
+          programs.ssh.package = lib.mkDefault (
+            pkgs.openssh.overrideAttrs(old: rec {
+              patches = old.patches ++ [
+                # Mitigation for CVE https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt
+                (pkgs.fetchpatch {
+                  url = "https://raw.githubusercontent.com/NixOS/nixpkgs/342bfe5c431fd7828fee8fa7e07a4d8fbfd18618/pkgs/tools/networking/openssh/openssh-9.6_p1-CVE-2024-6387.patch";
+                  sha256 = "sha256-B3Wz/eWSdOnrOcVzDv+QqzLGdFlb3jivQ8qZMC3d0Qw=";
+                })
+              ];
+            })
+          );
           services.openssh.enable = true;
 
           nixpkgs.overlays =
diff --git a/flakes/surfer/flake.lock b/flakes/surfer/flake.lock
index 5f0ec8c..8ebbf92 100644
--- a/flakes/surfer/flake.lock
+++ b/flakes/surfer/flake.lock
@@ -41,7 +41,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../mypackages",
         "type": "path"
       },
diff --git a/systems/backup-2/flake.lock b/systems/backup-2/flake.lock
index 0863696..dedbfb4 100644
--- a/systems/backup-2/flake.lock
+++ b/systems/backup-2/flake.lock
@@ -22,7 +22,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Deh1qsi1UFskPSAwq2sUGyPeh7hVVHct8hhy4o6fEzE=",
+        "narHash": "sha256-S6sETV9+RccMB5LcH4vOZJiTdhLS3SRIjFRvEfjd9Ag=",
         "path": "../../flakes/private/chatons",
         "type": "path"
       },
@@ -74,7 +74,7 @@
     "environment": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -86,7 +86,7 @@
     "environment_2": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../../flakes/private/environment",
         "type": "path"
       },
@@ -98,7 +98,7 @@
     "environment_3": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -110,7 +110,7 @@
     "environment_4": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -122,7 +122,7 @@
     "environment_5": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -134,7 +134,7 @@
     "environment_6": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -146,7 +146,7 @@
     "environment_7": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -352,7 +352,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-XdgjCex3Izb2hID+EBVj0YsEE5xvc+I416I2fHpi1LE=",
+        "narHash": "sha256-tY5qk98NpdM4osbPYFeo6/pHiQQU4a4iKw2jCJP99q8=",
         "path": "../../flakes/private/mail-relay",
         "type": "path"
       },
@@ -371,7 +371,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-bWNhkERypwoog3lphO0xURJ4xt58CZEWKn7So7A5mtM=",
+        "narHash": "sha256-Aqubcd5AOuP6XUdvjeCXIP6Yksn8uBXbS62kWXBop1w=",
         "path": "../../flakes/private/milters",
         "type": "path"
       },
@@ -389,7 +389,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VZjf9fXcyeS3LpVW6NvzJpiJuEtJsGlOOfH8XwL8CdI=",
+        "narHash": "sha256-F7GennKqLc6Cx3DuU6qSPUHmjvpfrrfOshor41vaCz4=",
         "path": "../../flakes/private/monitoring",
         "type": "path"
       },
@@ -425,7 +425,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -925,7 +925,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-fntajNe0urhuR0NbTOQZLTMhtHnd7p6PVuuEf0oAoFg=",
+        "narHash": "sha256-LDicilQIpNXKg/UD6uyf66h/iL/rhDOkkVjTMdKRzX4=",
         "path": "../../flakes/private/opendmarc",
         "type": "path"
       },
@@ -1104,7 +1104,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
diff --git a/systems/dilion/flake.lock b/systems/dilion/flake.lock
index f2db2b7..436b4bc 100644
--- a/systems/dilion/flake.lock
+++ b/systems/dilion/flake.lock
@@ -59,7 +59,7 @@
     "environment": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../../flakes/private/environment",
         "type": "path"
       },
@@ -71,7 +71,7 @@
     "environment_2": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -83,7 +83,7 @@
     "environment_3": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -207,7 +207,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VZjf9fXcyeS3LpVW6NvzJpiJuEtJsGlOOfH8XwL8CdI=",
+        "narHash": "sha256-F7GennKqLc6Cx3DuU6qSPUHmjvpfrrfOshor41vaCz4=",
         "path": "../../flakes/private/monitoring",
         "type": "path"
       },
@@ -243,7 +243,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -599,7 +599,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
diff --git a/systems/eldiron/base.nix b/systems/eldiron/base.nix
index fa5e504..4535dcf 100644
--- a/systems/eldiron/base.nix
+++ b/systems/eldiron/base.nix
@@ -189,7 +189,7 @@
         table = ldap_users
         user_column = login
         pw_type = function
-        auth_query = SELECT ((mechanism = 'SSHA' AND password = encode(digest( %p || salt, 'sha1'), 'hex')) OR (mechanism = 'PLAIN' AND password = %p)) FROM ldap_users WHERE login = %u OR login || '@' || realm = %u
+        auth_query = SELECT ((mechanism = 'SSHA' AND password = encode(digest( convert_to(%p, 'UTF8') || salt, 'sha1'), 'hex')) OR (mechanism = 'PLAIN' AND password = %p)) FROM ldap_users WHERE login = %u OR login || '@' || realm = %u
         #pwd_query = WITH newsalt as (select gen_random_bytes(4)) UPDATE ldap_users SET password = encode(digest( %p || (SELECT * FROM newsalt), 'sha1'), 'hex'), salt = (SELECT * FROM newsalt), mechanism = 'SSHA' WHERE login = %u OR login || '@' || realm = %u
       '';
     };
diff --git a/systems/eldiron/borg_backup.nix b/systems/eldiron/borg_backup.nix
index 9956a46..f83594a 100644
--- a/systems/eldiron/borg_backup.nix
+++ b/systems/eldiron/borg_backup.nix
@@ -76,7 +76,7 @@ let
     location = {
       source_directories = map (p: "${profile.rootDir}/${p}") profile.includedPaths;
       repositories = [
-        { path = cfg.remotes.${remote}.remote bucket; label = "backupserver"; }
+        { path = cfg.remotes.${remote}.remote name bucket; label = "backupserver"; }
       ];
       one_file_system = false;
       exclude_if_present = [".duplicity-ignore"];
@@ -88,6 +88,7 @@ let
       ssh_command = "ssh -i ${config.secrets.fullPaths."borg_backup/identity"}";
       compression = "zlib";
       borg_base_directory = "${varDir}/${profile.bucket}";
+      relocated_repo_access_is_ok = true;
     };
     retention = {
       keep_within = "10d";
diff --git a/systems/eldiron/flake.lock b/systems/eldiron/flake.lock
index 0f97917..9d6c296 100644
--- a/systems/eldiron/flake.lock
+++ b/systems/eldiron/flake.lock
@@ -129,7 +129,7 @@
     "environment": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -141,7 +141,7 @@
     "environment_2": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -153,7 +153,7 @@
     "environment_3": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -165,7 +165,7 @@
     "environment_4": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -177,7 +177,7 @@
     "environment_5": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -189,7 +189,7 @@
     "environment_6": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -813,7 +813,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -830,7 +830,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../mypackages",
         "type": "path"
       },
@@ -847,7 +847,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../mypackages",
         "type": "path"
       },
@@ -864,7 +864,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../mypackages",
         "type": "path"
       },
@@ -1989,7 +1989,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Deh1qsi1UFskPSAwq2sUGyPeh7hVVHct8hhy4o6fEzE=",
+        "narHash": "sha256-S6sETV9+RccMB5LcH4vOZJiTdhLS3SRIjFRvEfjd9Ag=",
         "path": "../../flakes/private/chatons",
         "type": "path"
       },
@@ -2001,7 +2001,7 @@
     "private-environment": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../../flakes/private/environment",
         "type": "path"
       },
@@ -2020,7 +2020,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-bWNhkERypwoog3lphO0xURJ4xt58CZEWKn7So7A5mtM=",
+        "narHash": "sha256-Aqubcd5AOuP6XUdvjeCXIP6Yksn8uBXbS62kWXBop1w=",
         "path": "../../flakes/private/milters",
         "type": "path"
       },
@@ -2038,7 +2038,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VZjf9fXcyeS3LpVW6NvzJpiJuEtJsGlOOfH8XwL8CdI=",
+        "narHash": "sha256-F7GennKqLc6Cx3DuU6qSPUHmjvpfrrfOshor41vaCz4=",
         "path": "../../flakes/private/monitoring",
         "type": "path"
       },
@@ -2073,7 +2073,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-fntajNe0urhuR0NbTOQZLTMhtHnd7p6PVuuEf0oAoFg=",
+        "narHash": "sha256-LDicilQIpNXKg/UD6uyf66h/iL/rhDOkkVjTMdKRzX4=",
         "path": "../../flakes/private/opendmarc",
         "type": "path"
       },
@@ -2134,7 +2134,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-uqftr7R3cVYwWuu8Xl6VbPVL2pqapv1bfmMJpq3LnZ4=",
+        "narHash": "sha256-mhoBv1NxQoAMlfFGkgGC28cjMTgUxgb2oqNS+k6kWH4=",
         "path": "../../flakes/private/ssh",
         "type": "path"
       },
@@ -2153,7 +2153,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
@@ -2206,7 +2206,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-TeZKpuqFi0PEnhays+oL+hrNlO/O+IV/4B+Vtim4DKY=",
+        "narHash": "sha256-2fWHwmMMILe0enrbMMgFoVH+3PysvSx1Oair4W2hgIw=",
         "path": "../../flakes/etherpad-lite",
         "type": "path"
       },
@@ -2248,7 +2248,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-kbhkTVO086HibTB2ke3Qc458FwLUp2CqU8XUjuaAIug=",
+        "narHash": "sha256-emS5jDCcLaK3/Hqk/2p6jQDxZfO1hPicMTblyVBD7EI=",
         "path": "../../flakes/grocy",
         "type": "path"
       },
@@ -2329,7 +2329,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../flakes/mypackages",
         "type": "path"
       },
@@ -2440,7 +2440,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-+z5CIx4Gin8Ygu3qQbd5QMPuChzPkhtSv+kUm6dUW/s=",
+        "narHash": "sha256-cR14yn0IbWNe98PAlV+MHO6ClQqeT5HztMeLawldtWs=",
         "path": "../../flakes/surfer",
         "type": "path"
       },
diff --git a/systems/eldiron/websites/cloud/default.nix b/systems/eldiron/websites/cloud/default.nix
index c859f32..3f41efe 100644
--- a/systems/eldiron/websites/cloud/default.nix
+++ b/systems/eldiron/websites/cloud/default.nix
@@ -61,7 +61,7 @@ in {
     };
 
     myServices.tools.cloud.farm.instances.immae = {
-      nextcloud = pkgs.webapps-nextcloud_27.override ({
+      nextcloud = pkgs.webapps-nextcloud_27_2.override ({
         # Allow /index.php redirects
         postInstall = ''
           cd $out
diff --git a/systems/eldiron/websites/git/mantisbt.nix b/systems/eldiron/websites/git/mantisbt.nix
index b0ee553..824e2e1 100644
--- a/systems/eldiron/websites/git/mantisbt.nix
+++ b/systems/eldiron/websites/git/mantisbt.nix
@@ -1,4 +1,38 @@
-{ env, mantisbt_2, mantisbt_2-plugins, config }:
+{ env, mantisbt_2, mantisbt_2-plugins, config, writeText }:
+let
+  mantis_config = {
+    config_inc = config.secrets.fullPaths."webapps/tools-mantisbt";
+    custom_constants_inc = writeText "custom_constants_inc.php" ''
+      <?php
+      define('TESTING', 60);
+      ?>
+    '';
+    custom_strings_inc = writeText "custom_strings_inc.php" ''
+      <?php
+      switch( $g_active_language ) {
+        case 'french':
+          $s_status_enum_string = '10:nouveau,20:retour d’informations,30:reçu,40:confirmé,50:affecté,60:à tester,80:traité,90:fermé';
+          $s_acknowledged_bug_title = 'Recevoir l’anomalie';
+          $s_acknowledged_bug_button = 'Recevoir l’anomalie';
+          $s_email_notification_title_for_status_bug_acknowledged = 'L’anomalie suivante a été REÇUE.';
+
+          $s_testing_bug_title = "Mettre l’anomalie en test";
+          $s_testing_bug_button = 'À tester';
+          $s_email_notification_title_for_status_bug_testing = "L’anomalie suivante est prête à être TESTÉE.";
+          break;
+        default: # english
+          $s_status_enum_string = '10:new,20:feedback,30:acknowledged,40:confirmed,50:assigned,60:testing,80:resolved,90:closed';
+
+          $s_testing_bug_title = 'Mark issue Ready for Testing';
+          $s_testing_bug_button = 'Ready for Testing';
+
+          $s_email_notification_title_for_status_bug_testing = 'The following issue is ready for TESTING.';
+          break;
+      }
+      ?>
+    '';
+  };
+in
 rec {
   keys."webapps/tools-mantisbt" = {
     user = apache.user;
@@ -20,7 +54,8 @@ rec {
       $g_allow_anonymous_login = ON;
       $g_anonymous_account     = 'anonymous';
 
-      $g_phpMailer_method       = PHPMAILER_METHOD_SENDMAIL;
+      $g_log_level = LOG_EMAIL_VERBOSE;
+      $g_phpMailer_method       = PHPMAILER_METHOD_MAIL;
       $g_smtp_host              = 'localhost';
       $g_smtp_username          = ''';
       $g_smtp_password          = ''';
@@ -42,10 +77,12 @@ rec {
       $g_ldap_uid_field = 'uid';
       $g_ldap_realname_field = 'cn';
       $g_ldap_organization = '${env.ldap.filter}';
+
+      $g_status_enum_string = '10:new,20:feedback,30:acknowledged,40:confirmed,50:assigned,60:testing,80:resolved,90:closed';
+      $g_status_colors['testing'] = '#ace7ae';
     '';
   };
-  webRoot = (mantisbt_2.override { mantis_config =
-    config.secrets.fullPaths."webapps/tools-mantisbt"; }).withPlugins (p: [p.slack p.source-integration ]);
+  webRoot = (mantisbt_2.override { inherit mantis_config; }).withPlugins (p: [p.slack p.source-integration ]);
   apache = rec {
     user = "wwwrun";
     group = "wwwrun";
@@ -72,9 +109,8 @@ rec {
   };
   phpFpm = rec {
     serviceDeps = [ "postgresql.service" "openldap.service" ];
-    basedir = builtins.concatStringsSep ":" (
-      [ webRoot config.secrets.fullPaths."webapps/tools-mantisbt" ]
-      ++ webRoot.plugins);
+    basedir = builtins.concatStringsSep ":" ([ webRoot ] ++
+      webRoot.plugins ++ builtins.attrValues mantis_config);
     pool = {
       "listen.owner" = apache.user;
       "listen.group" = apache.group;
@@ -84,7 +120,8 @@ rec {
 
       "php_admin_value[upload_max_filesize]" = "5000000";
 
-      "php_admin_value[open_basedir]" = "${basedir}:/tmp";
+      "php_admin_value[sendmail_path]" = "/run/wrappers/bin/sendmail -t -i";
+      "php_admin_value[open_basedir]" = "${basedir}:/tmp:/run/wrappers/bin/sendmail";
       "php_admin_value[session.save_handler]" = "redis";
       "php_admin_value[session.save_path]" = "'unix:///run/redis-php-sessions/redis.sock?persistent=1&prefix=Tools:MantisBT:'";
     };
diff --git a/systems/eldiron/websites/tools/default.nix b/systems/eldiron/websites/tools/default.nix
index 46e6a9f..7d8bf5e 100644
--- a/systems/eldiron/websites/tools/default.nix
+++ b/systems/eldiron/websites/tools/default.nix
@@ -108,6 +108,7 @@ in {
           mailSend
           (ips servers.eldiron.ips.main)
         ];
+        synapse = ips servers.zoldene.ips.main;
       };
 
     services.borgBackup.profiles.global.ignoredPaths = [
diff --git a/systems/eldiron/websites/tools/landing.nix b/systems/eldiron/websites/tools/landing.nix
index 692eaae..da7335a 100644
--- a/systems/eldiron/websites/tools/landing.nix
+++ b/systems/eldiron/websites/tools/landing.nix
@@ -3,8 +3,8 @@ let
   source = builtins.fetchGit {
     url = "https://git.immae.eu/github/bastienwirtz/homer.git";
     ref = "gitolite_local/local_changes";
-    rev = "af6db21ee92824ddd9c4b9574018789619326ffc";
-    narHash = "sha256-TAf2oIPu5ZfRbxahAjOxwQ/z/g82pXmLPU8LhwxRgXs";
+    rev = "f2f414a2e9b02d645acb49f62fdfcceb8eca7d19";
+    narHash = "sha256-WrAx4gLKOVpwHtLh57ZLoWaUnfohwYlIX/LrwORIbFU=";
   };
   yarnModules = yarn2nix-moretea.mkYarnModules rec {
     nodejs = nodejs_16;
diff --git a/systems/eldiron/websites/tools/landing/ldap_password.php b/systems/eldiron/websites/tools/landing/ldap_password.php
index efb4f57..b3b2f15 100644
--- a/systems/eldiron/websites/tools/landing/ldap_password.php
+++ b/systems/eldiron/websites/tools/landing/ldap_password.php
@@ -45,7 +45,7 @@ function changePasswordSQL($user_realm, $newPassword) {
     }
   }
   $con = pg_connect("");
-  $result = pg_query_params($con, "WITH newsalt as (SELECT gen_random_bytes(4)) UPDATE ldap_users SET password = encode(digest( $1 || (SELECT * FROM newsalt), 'sha1'), 'hex'), mechanism = 'SSHA', salt = (SELECT * FROM newsalt) where login || '@' || realm = $2", array($newPassword, $user_realm));
+  $result = pg_query_params($con, "WITH newsalt as (SELECT gen_random_bytes(4)) UPDATE ldap_users SET password = encode(digest( convert_to($1, 'UTF8') || (SELECT * FROM newsalt), 'sha1'), 'hex'), mechanism = 'SSHA', salt = (SELECT * FROM newsalt) where login || '@' || realm = $2", array($newPassword, $user_realm));
   if (!$result) {
     $message[] = "Error when accessing database";
     return false;
diff --git a/systems/monitoring-1/flake.lock b/systems/monitoring-1/flake.lock
index b0e16eb..5330b72 100644
--- a/systems/monitoring-1/flake.lock
+++ b/systems/monitoring-1/flake.lock
@@ -22,7 +22,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Deh1qsi1UFskPSAwq2sUGyPeh7hVVHct8hhy4o6fEzE=",
+        "narHash": "sha256-S6sETV9+RccMB5LcH4vOZJiTdhLS3SRIjFRvEfjd9Ag=",
         "path": "../../flakes/private/chatons",
         "type": "path"
       },
@@ -74,7 +74,7 @@
     "environment": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -86,7 +86,7 @@
     "environment_2": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../../flakes/private/environment",
         "type": "path"
       },
@@ -98,7 +98,7 @@
     "environment_3": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -110,7 +110,7 @@
     "environment_4": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -122,7 +122,7 @@
     "environment_5": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -259,7 +259,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-XdgjCex3Izb2hID+EBVj0YsEE5xvc+I416I2fHpi1LE=",
+        "narHash": "sha256-tY5qk98NpdM4osbPYFeo6/pHiQQU4a4iKw2jCJP99q8=",
         "path": "../../flakes/private/mail-relay",
         "type": "path"
       },
@@ -277,7 +277,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VZjf9fXcyeS3LpVW6NvzJpiJuEtJsGlOOfH8XwL8CdI=",
+        "narHash": "sha256-F7GennKqLc6Cx3DuU6qSPUHmjvpfrrfOshor41vaCz4=",
         "path": "../../flakes/private/monitoring",
         "type": "path"
       },
@@ -313,7 +313,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -735,7 +735,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
diff --git a/systems/quatresaisons/flake.lock b/systems/quatresaisons/flake.lock
index c427111..e96c9fa 100644
--- a/systems/quatresaisons/flake.lock
+++ b/systems/quatresaisons/flake.lock
@@ -59,7 +59,7 @@
     "environment": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../../flakes/private/environment",
         "type": "path"
       },
@@ -71,7 +71,7 @@
     "environment_2": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -83,7 +83,7 @@
     "environment_3": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -239,7 +239,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-VZjf9fXcyeS3LpVW6NvzJpiJuEtJsGlOOfH8XwL8CdI=",
+        "narHash": "sha256-F7GennKqLc6Cx3DuU6qSPUHmjvpfrrfOshor41vaCz4=",
         "path": "../../flakes/private/monitoring",
         "type": "path"
       },
@@ -291,7 +291,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -712,7 +712,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
diff --git a/systems/zoldene/base.nix b/systems/zoldene/base.nix
index 617cd82..947859a 100644
--- a/systems/zoldene/base.nix
+++ b/systems/zoldene/base.nix
@@ -13,8 +13,10 @@ in
     secrets.nixosModules.users-config-zoldene
     ./virtualisation.nix
     ./certificates.nix
+    ./synapse.nix
   ];
 
+  programs.ssh.package = pkgs.openssh;
   services.openssh = {
     settings.KbdInteractiveAuthentication = false;
     hostKeys = [
diff --git a/systems/zoldene/flake.lock b/systems/zoldene/flake.lock
index 28db0fe..638d3a0 100644
--- a/systems/zoldene/flake.lock
+++ b/systems/zoldene/flake.lock
@@ -59,7 +59,7 @@
     "environment": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../environment",
         "type": "path"
       },
@@ -193,7 +193,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-PPOh6hf0hakuHCBOgJok208Qc3xKpuwwxhHV2QQRbmA=",
+        "narHash": "sha256-yHJid6Rpxa5pfKI81FfI0VZir9seZMHtLzjdvmt0FVw=",
         "path": "../../mypackages",
         "type": "path"
       },
@@ -387,11 +387,11 @@
     },
     "nixpkgs_5": {
       "locked": {
-        "lastModified": 1708475490,
-        "narHash": "sha256-g1v0TsWBQPX97ziznfJdWhgMyMGtoBFs102xSYO4syU=",
+        "lastModified": 1720031269,
+        "narHash": "sha256-rwz8NJZV+387rnWpTYcXaRNvzUSnnF9aHONoJIYmiUQ=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "0e74ca98a74bc7270d28838369593635a5db3260",
+        "rev": "9f4128e00b0ae8ec65918efeba59db998750ead6",
         "type": "github"
       },
       "original": {
@@ -436,7 +436,7 @@
     "private-environment": {
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-Kj3j/3B8V8IHbeSZ3ho33C7ktOcTle2h6dKEWWfVuvU=",
+        "narHash": "sha256-xrpwkilnPpT6TklQVoLrID8tWUZAH4PJ5XqhRHXGbvo=",
         "path": "../../flakes/private/environment",
         "type": "path"
       },
@@ -455,7 +455,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-xH6yyfvDLevdZrnKsGXhkZmNMZkOPJOqXnpubkfnoOE=",
+        "narHash": "sha256-5cM87LAHjrWoZRc2QbM6Xu9klzMNBpREjz6sWqp+hFA=",
         "path": "../../flakes/private/system",
         "type": "path"
       },
diff --git a/systems/zoldene/logging.nix b/systems/zoldene/logging.nix
index 2b6e331..943d5f1 100644
--- a/systems/zoldene/logging.nix
+++ b/systems/zoldene/logging.nix
@@ -102,6 +102,8 @@ in
         ingestion_burst_size_mb = 200;
         per_stream_rate_limit = "100MB";
         per_stream_rate_limit_burst = "200MB";
+        # Remove after 2024-07-08 see below
+        allow_structured_metadata = false;
       };
 
       schema_config.configs = [
@@ -113,6 +115,14 @@ in
           index.prefix = "index_";
           index.period = "24h";
         }
+        {
+          from = "2024-07-08";
+          store = "tsdb";
+          object_store = "filesystem";
+          schema = "v13";
+          index.prefix = "index_";
+          index.period = "24h";
+        }
       ];
     };
   };
diff --git a/systems/zoldene/synapse.nix b/systems/zoldene/synapse.nix
new file mode 100644
index 0000000..06a1645
--- /dev/null
+++ b/systems/zoldene/synapse.nix
@@ -0,0 +1,211 @@
+{ lib, config, pkgs, name, ... }:
+{
+  config = {
+    security.acme.certs."${name}".extraDomainNames = ["synapse.immae.eu"];
+    services.nginx = {
+      virtualHosts = {
+        "synapse.immae.eu" = {
+          acmeRoot = config.security.acme.defaults.webroot;
+          useACMEHost = name;
+          forceSSL = true;
+
+          locations."~ ^/admin(?:/(.*))?$" = {
+            alias = let
+              synapse-admin = pkgs.fetchzip {
+                url = "https://github.com/Awesome-Technologies/synapse-admin/releases/download/0.10.1/synapse-admin-0.10.1.tar.gz";
+                sha256 = "sha256-M2AYNrnpNoDm20ZTH1OZBHVcjOrHAlqyq5iTQ/At/Xk=";
+                postFetch = ''
+                  sed -i -e 's@"/assets@"./assets@g' $out/index.html
+                '';
+              };
+            in
+              "${synapse-admin}/$1";
+          };
+          locations."/sliding-sync-client/" = {
+            # some svg urls are hardcoded to /client :shrug:
+            alias = "${pkgs.matrix-sliding-sync.src}/client/";
+            tryFiles = "$uri $uri/ /sliding-sync-client/index.html";
+          };
+          locations."~ ^/_matrix/client/unstable/org.matrix.msc3575/sync" = {
+            proxyPass = "http://unix:/run/matrix-synapse/sliding_sync.sock:";
+          };
+          locations."~ ^(/_matrix|/_synapse/client|/_synapse/admin)" = {
+            proxyPass = "http://unix:/run/matrix-synapse/main_client_federation.sock:";
+            extraConfig = ''
+              client_max_body_size 50M;
+            '';
+          };
+        };
+      };
+    };
+
+    systemd.services.postgresql.postStart = lib.mkAfter ''
+      $PSQL -tAc "SELECT 1 FROM pg_database WHERE datname = 'matrix-synapse'" | grep -q 1 || $PSQL -tAc "CREATE DATABASE \"matrix-synapse\" LC_COLLATE='C' LC_CTYPE='C' TEMPLATE template0"
+      $PSQL -tAc "SELECT 1 FROM pg_database WHERE datname = 'matrix-sliding-sync'" | grep -q 1 || $PSQL -tAc "CREATE DATABASE \"matrix-sliding-sync\" LC_COLLATE='C' LC_CTYPE='C' TEMPLATE template0"
+      $PSQL -tAc "SELECT 1 FROM pg_roles WHERE rolname='matrix-synapse'" | grep -q 1 || $PSQL -tAc 'CREATE USER "matrix-synapse"'
+      $PSQL -tAc 'ALTER DATABASE "matrix-synapse" OWNER TO "matrix-synapse";'
+      $PSQL -tAc 'ALTER DATABASE "matrix-sliding-sync" OWNER TO "matrix-synapse";'
+    '';
+
+    disko.devices.zpool.zfast.datasets."root/persist/var/lib/matrix-sliding-sync" =
+      { type = "zfs_fs"; mountpoint = "/persist/zfast/var/lib/matrix-sliding-sync"; options.mountpoint = "legacy"; };
+    disko.devices.zpool.zfast.datasets."root/persist/var/lib/matrix-synapse" =
+      { type = "zfs_fs"; mountpoint = "/persist/zfast/var/lib/matrix-synapse"; options.mountpoint = "legacy"; };
+
+    environment.persistence."/persist/zfast".directories = [
+      {
+        directory = "/var/lib/matrix-synapse";
+        user = "matrix-synapse";
+        group = "matrix-synapse";
+        mode = "0700";
+      }
+      {
+        directory = "/var/lib/matrix-sliding-sync";
+        user = "matrix-synapse";
+        group = "matrix-synapse";
+        mode = "0700";
+      }
+    ];
+
+    users.users.matrix-synapse.extraGroups = [ "keys" ];
+    users.users.nginx.extraGroups = [ "matrix-synapse" ];
+
+    services.matrix-synapse = {
+      enable = true;
+      log.root.level = "WARNING";
+      plugins = [
+        config.services.matrix-synapse.package.plugins.matrix-synapse-ldap3
+      ];
+      extraConfigFiles = [
+        config.secrets.fullPaths."matrix/homeserver_secrets.yaml"
+      ];
+      settings.modules = [
+        {
+          module = "ldap_auth_provider.LdapAuthProviderModule";
+          config = {
+            enabled = true;
+            uri = "ldaps://${config.myEnv.tools.matrix.ldap.host}:636";
+            start_tls = false;
+            base = config.myEnv.tools.matrix.ldap.base;
+            attributes = {
+              uid = "uid";
+              mail = "mail";
+              name = "cn";
+            };
+            bind_dn = config.myEnv.tools.matrix.ldap.dn;
+            bind_password_file = config.secrets.fullPaths."matrix/ldap_password";
+            filter = config.myEnv.tools.matrix.ldap.filter;
+          };
+        }
+      ];
+      settings.server_name = "immae.eu";
+      settings.signing_key_path = config.secrets.fullPaths."matrix/signing.key";
+      settings.listeners = [
+        {
+          port = 8008;
+          bind_addresses = [ "127.0.0.1" ];
+          type = "http";
+          tls = false;
+          x_forwarded = true;
+          resources = [
+            {
+              names = [ "client" ];
+              compress = true;
+            }
+          ];
+        }
+        {
+          path = "/run/matrix-synapse/main_client_federation.sock";
+          resources = [
+            {
+              compress = true;
+              names = [ "client" ];
+            }
+            {
+              compress = false;
+              names = [ "federation" ];
+            }
+          ];
+          type = "http";
+          x_forwarded = true;
+        }
+      ];
+    };
+    services.matrix-sliding-sync = {
+      enable = true;
+      createDatabase = false;
+      settings.SYNCV3_SERVER = "/run/matrix-synapse/main_client_federation.sock";
+      settings.SYNCV3_BINDADDR = "/run/matrix-synapse/sliding_sync.sock";
+      environmentFile = config.secrets.fullPaths."matrix/sliding-sync";
+    };
+
+    systemd.services.matrix-synapse = {
+      after = [
+        "postgresql.service"
+        "persist-zfast-var-lib-matrix\\x2dsynapse.mount"
+        "var-lib-matrix\\x2dsynapse.mount"
+      ];
+      unitConfig = {
+        BindsTo = [
+          "var-lib-matrix\\x2dsynapse.mount"
+          "persist-zfast-var-lib-matrix\\x2dsynapse.mount"
+        ];
+      };
+      serviceConfig.SupplementaryGroups = [ "keys" ];
+    };
+
+    systemd.services.matrix-sliding-sync = {
+      serviceConfig = {
+        DynamicUser = lib.mkForce false;
+        User = "matrix-synapse";
+        Group = "matrix-synapse";
+        RuntimeDirectory = lib.mkForce "matrix-synapse";
+        SupplementaryGroups = [ "keys" ];
+      };
+      unitConfig = {
+        BindsTo = [
+          "persist-zfast-var-lib-matrix\\x2dsliding\\x2dsync.mount"
+          "var-lib-matrix\\x2dsliding\\x2dsync.mount"
+        ];
+        After = lib.mkForce [
+          "matrix-synapse.service"
+          "postgresql.service"
+          "var-lib-matrix\\x2dsliding\\x2dsync.mount"
+          "persist-zfast-var-lib-matrix\\x2dsliding\\x2dsync.mount"
+        ];
+      };
+    };
+    secrets.keys."matrix/ldap_password" = {
+      permissions = "0400";
+      user = "matrix-synapse";
+      group = "matrix-synapse";
+      text = config.myEnv.tools.matrix.ldap.password;
+    };
+    secrets.keys."matrix/signing.key" = {
+      permissions = "0400";
+      user = "matrix-synapse";
+      group = "matrix-synapse";
+      text = "{{ .matrix.signing_key }}";
+    };
+    secrets.keys."matrix/homeserver_secrets.yaml" = {
+      permissions = "0400";
+      user = "matrix-synapse";
+      group = "matrix-synapse";
+      # Beware, yaml keys are merged at top level, not deep
+      text = ''
+        password_config:
+            enabled: true
+            pepper: "{{ .matrix.password_pepper }}"
+        macaroon_secret_key: "{{ .matrix.macaroon_secret_key }}"
+      '';
+    };
+    secrets.keys."matrix/sliding-sync" = {
+      permissions = "0400";
+      user = "matrix-synapse";
+      group = "matrix-synapse";
+      text = ''
+        SYNCV3_SECRET={{ .matrix.sliding_sync_secret }}
+      '';
+    };
+  };
+}