nixos-22.11: fix module warnings

(also wow nextcloud encryption is apparently broken. colour me surprised!)

common/default.nix

@@ -18,7 +18,7 @@
   '';
   nix.gc.automatic = lib.mkDefault true;
   nix.gc.options = lib.mkDefault "--delete-older-than 1w";
-  nix.trustedUsers = [ "root" "@wheel" ];
+  nix.settings.trusted-users = [ "root" "@wheel" ];
   nix.extraOptions = ''
     experimental-features = nix-command flakes
   '';

flake.lock

@@ -514,16 +514,16 @@
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1667921968,
-        "narHash": "sha256-EI+//LbhUzX471LHq8GgB+oUHpdA2rsiXpY1q5tDYGw=",
+        "lastModified": 1670276674,
+        "narHash": "sha256-FqZ7b2RpoHQ/jlG6JPcCNmG/DoUPCIvyaropUDFhF3Q=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "df2bcbbd1c2aa144261cf1b0003c889c075dc693",
+        "rev": "52e3e80afff4b16ccb7c52e9f0f5220552f03d04",
         "type": "github"
       },
       "original": {
         "id": "nixpkgs",
-        "ref": "nixos-22.05",
+        "ref": "nixos-22.11",
         "type": "indirect"
       }
     },

services/gitea.nix

@@ -48,21 +48,8 @@
         httpAddress = "0.0.0.0";
         httpPort = 3000;
         lfs.enable = true;
-        disableRegistration = true;
         database.type = "postgres";
-        cookieSecure = true;
-        log.level = "Info";
-        #  mailerPasswordFile =
-        #    "/var/lib/secrets/noreply"; # see below for access permissions
         settings = {
-          #    mailer = {
-          #      ENABLED = true;
-          #      HOST = "0x0.rip:465";
-          #      FROM = "noreply@0x0.rip";
-          #      ENVELOPE_FROM = "noreply@0x0.rip";
-          #      USER = "noreply@0x0.rip";
-
-          #    };
           repository = {
             DEFAULT_PRIVATE = "public";
             PREFERRED_LICENSES = "Unlicense";
@@ -97,6 +84,9 @@
           };
           "cron.git_gc_repos".ENABLED = true;
           "cron.delete_old_actions".ENABLED = true;
+          log.LEVEL = "Info";
+          service.DISABLE_REGISTRATION = true;
+          session.COOKIE_SECURE = true;
         };
       };
       services.postgresqlBackup = {

services/hedgedoc-hacc.nix

@@ -36,7 +36,7 @@
       };
       services.hedgedoc = {
         enable = true;
-        configuration = {
+        settings = {
           allowAnonymous = true;
           allowFreeURL = true;
           allowGravatar = false;

services/hedgedoc-i4f.nix

@@ -37,7 +37,7 @@
       };
       services.hedgedoc = {
         enable = true;
-        configuration = {
+        settings = {
           allowAnonymous = true;
           allowFreeURL = true;
           allowGravatar = false;

services/nextcloud.nix

@@ -47,6 +47,9 @@
         home = "/persist/nextcloud";
         https = true;
 
+        # true by default for backwards-compatability, but we don't need it
+        enableBrokenCiphersForSSE = false;
+
         hostName = "cloud.infra4future.de";
         config = {
           dbtype = "pgsql";