Rupert: Add changes for 23.11

base/packages.nix

@@ -38,7 +38,7 @@
         xsel
     ];
 
-    fonts.fonts = with pkgs; [
+    fonts.packages = with pkgs; [
         vollkorn
         alegreya alegreya-sans
         b612

hosts/Rupert.nix

@@ -21,6 +21,24 @@ in
     boot.loader.efi.canTouchEfiVariables = true;
     boot.kernelParams = [ "acpi=force" "reboot=bios" ];
 
+    boot.initrd.kernelModules = [ "i915" ];
+    nixpkgs.config.packageOverrides = pkgs: {
+        vaapiIntel = pkgs.vaapiIntel.override { enableHybridCodec = true; };
+    };
+    hardware.opengl = {
+        enable = true;
+        extraPackages = with pkgs; [
+            (if (lib.versionOlder (lib.versions.majorMinor lib.version) "23.11") then vaapiIntel else intel-vaapi-driver)
+            libvdpau-va-gl
+            vaapiVdpau
+            # intel-media-driver
+        ];
+    };
+    environment.variables = {
+        VDPAU_DRIVER = "va_gl";
+    };
+    hardware.cpu.intel.updateMicrocode = true;
+
     networking.hostName = "Rupert";
 
     users.users = {
@@ -56,6 +74,7 @@ in
     services.flatpak.enable = true;
     xdg.portal.extraPortals = [ pkgs.xdg-desktop-portal-gtk ];
     xdg.portal.enable = true;
+    xdg.portal.config.common.default = "*";
 
     hardware.bluetooth = {
         enable = true;

hosts/hedgedoc.nix

@@ -5,7 +5,6 @@ in
 {
     services.hedgedoc = {
         enable = true;
-        workDir = "/data/hedgedoc";
         environmentFile = "/secrets/hedgedoc.env";
         settings = {
             port = 7000;

hosts/nextcloud.nix

@@ -6,7 +6,7 @@ in
     services.nextcloud = {
         enable = true;
         https = true;
-        package = pkgs.nextcloud26;
+        package = pkgs.nextcloud27;
         hostName = hostName;
         datadir = "/data/nextcloud";
         config = {
@@ -19,7 +19,6 @@ in
             ];
         };
         caching.redis = true;
-        enableBrokenCiphersForSSE = false;
     };
 
     services.postgresql = {
@@ -27,16 +26,14 @@ in
         ensureUsers = [
             {
                 name = "nextcloud";
-                ensurePermissions = {
+                ensureDBOwnership = true;
-                    "DATABASE nextcloud" = "ALL PRIVILEGES";
-                };
-            }
-            {
-                name = "superuser";
-                ensurePermissions = {
-                    "ALL TABLES IN SCHEMA public" = "ALL PRIVILEGES";
-                };
             }
+            # {
+            #     name = "superuser";
+            #     ensurePermissions = {
+            #         "ALL TABLES IN SCHEMA public" = "ALL PRIVILEGES";
+            #     };
+            # }
         ];
         ensureDatabases = [ "nextcloud" ];
     };