Enable brotli

Signed-off-by: Danila Fedorin <danila.fedorin@gmail.com>

configuration.nix

@@ -1,4 +1,4 @@
-{ pkgs, system, blog, ... }:
+{ pkgs, system, blog, web-files, Scylla, ... }:
 let
   productionSite = blog.english {
     ssl = true;
@@ -8,7 +8,39 @@ let
     drafts = true;
     host = "drafts.danilafe.com";
   };
-  allVirtualHosts = map blog.virtualHostFor [productionSite draftSite];
+  webFiles = {
+    "static.danilafe.com" = {
+      root = web-files;
+      forceSSL = true;
+      enableACME = true;
+      locations."/" = {
+        extraConfig = ''
+          add_header 'Access-Control-Allow-Origin' '*';
+	'';
+      };
+    };
+  };
+  gitea = {
+    "dev.danilafe.com" = {
+      forceSSL = true;
+      enableACME = true;
+      locations."/".proxyPass = "http://localhost:3000/";
+    };
+  };
+  scylla = {
+    "scylla.danilafe.com" = {
+      root = Scylla;
+      addSSL = true;
+      enableACME = true;
+      locations."/static/" = {
+        tryFiles = "$uri =404";
+      };
+      locations."/" = {
+        tryFiles = "$uri $uri/ /index.html";
+      };
+    };
+  };
+  allVirtualHosts = [scylla gitea webFiles] ++ map blog.virtualHostFor [productionSite draftSite];
 in
   {
     imports = [
@@ -16,8 +48,10 @@ in
       ./networking.nix # generated at runtime by nixos-infect
     ];
 
+    system.stateVersion = "24.05";
+
     nix = {
-      package = pkgs.nixUnstable;
+      package = pkgs.nixVersions.latest;
       extraOptions = ''
         experimental-features = nix-command flakes
       '';
@@ -27,13 +61,24 @@ in
       git
     ];
 
-    boot.cleanTmpDir = true;
+    boot.tmp.cleanOnBoot = true;
     networking.hostName = "nixos-droplet-v2";
     networking.firewall.allowPing = true;
     networking.firewall.allowedTCPPorts = [ 22 80 443 ];
 
+    users.groups.daniel = {};
+    users.users.daniel = {
+      isNormalUser = true;
+      group = "daniel";
+      extraGroups = [ "wheel" ];
+      packages = with pkgs; [
+        neovim
+      ];
+    };
+    security.sudo.wheelNeedsPassword = false;
+
     services.openssh.enable = true;
-    users.users.root.openssh.authorizedKeys.keys = [
+    users.users.daniel.openssh.authorizedKeys.keys = [
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJXYJZfEOgccfCa3uQV9z2rHvGn4AuVnXbIDXv27HgEk vanilla@arch-xps" 
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOzk0SnRBJhpfNpPBgkReQoDpul2Egl2yJhRw7ldYEzF NixOS" 
       "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAoyFSuik6XRU2b+O4v9C1bc7rKJyjKgzUeaBaVNQKN6 vanilla-pinebook"
@@ -49,10 +94,51 @@ in
     services.nginx = {
       enable = true;
       recommendedGzipSettings = true;
+      recommendedBrotliSettings = true;
       recommendedProxySettings = true;
       virtualHosts = pkgs.lib.mkMerge allVirtualHosts;
     };
 
+    users.groups.gitea = {};
+    users.users.gitea = {
+      group = "gitea";
+      isSystemUser = true;
+    };
+    services.gitea = {
+      enable = true;
+      appName = "Daniel's Tiny Cup Of Tea";
+      stateDir = "/var/lib/gitea";
+
+      # Default database settings (sqlite3, 127.0.0.1, path) all what we want
+      database = {};
+
+      # Default server settings are fine, except we need to customize domain etc.
+      settings.server = {
+        DOMAIN = "dev.danilafe.com";
+        ROOT_URL = "https://dev.danilafe.com";
+        OFFLINE_MODE = false;
+	# STATIC_ROOT_PATH = "/var/lib/gitea/data";
+      };
+
+      settings.service = {
+        DISABLE_REGISTRATION = true;
+      };
+
+      # NixOS service overrides cookies to insecure, but Gitea default is secure
+      settings.session = {
+        COOKIE_SECURE = true;
+        PROVIDER = "file";
+      };
+
+      settings.security = {
+        INSTALL_LOCK = true;
+      };
+
+      settings.indexer = {
+        REPO_INDEXER_ENABLED = true;
+      };
+    };
+
     users.defaultUserShell = pkgs.zsh;
     programs.zsh.enable = true;
     programs.zsh.ohMyZsh = {

flake.lock

@@ -1,19 +1,89 @@
 {
   "nodes": {
+    "Scylla": {
+      "inputs": {
+        "flake-utils": "flake-utils",
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1766862133,
+        "narHash": "sha256-//tElNDA44kTCRNS8MzBdXA4uCwEfLHI/NVw9PtmLDs=",
+        "ref": "refs/heads/master",
+        "rev": "38968c3247945ba99718d7564163f8bf685756c5",
+        "revCount": 168,
+        "type": "git",
+        "url": "https://dev.danilafe.com/Matrix-Programs/Scylla.git"
+      },
+      "original": {
+        "type": "git",
+        "url": "https://dev.danilafe.com/Matrix-Programs/Scylla.git"
+      }
+    },
+    "bergamot-elm": {
+      "inputs": {
+        "flake-utils": "flake-utils_4",
+        "nixpkgs": [
+          "blog",
+          "web-files",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1766788208,
+        "narHash": "sha256-/P3uz+VNeNOFzI2qSIijy53MpnejO1sWgB+gMqcI2z0=",
+        "ref": "main",
+        "rev": "ceca48840efe668fb033b47bc6e415ea4cf9ae85",
+        "revCount": 97,
+        "type": "git",
+        "url": "https://dev.danilafe.com/Everything-I-Know-About-Types/bergamot-elm.git"
+      },
+      "original": {
+        "ref": "main",
+        "type": "git",
+        "url": "https://dev.danilafe.com/Everything-I-Know-About-Types/bergamot-elm.git"
+      }
+    },
+    "bergamot-elm_2": {
+      "inputs": {
+        "flake-utils": "flake-utils_6",
+        "nixpkgs": [
+          "web-files",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1766788208,
+        "narHash": "sha256-/P3uz+VNeNOFzI2qSIijy53MpnejO1sWgB+gMqcI2z0=",
+        "ref": "main",
+        "rev": "ceca48840efe668fb033b47bc6e415ea4cf9ae85",
+        "revCount": 97,
+        "type": "git",
+        "url": "https://dev.danilafe.com/Everything-I-Know-About-Types/bergamot-elm.git"
+      },
+      "original": {
+        "ref": "main",
+        "type": "git",
+        "url": "https://dev.danilafe.com/Everything-I-Know-About-Types/bergamot-elm.git"
+      }
+    },
     "blog": {
       "inputs": {
         "blog-source": "blog-source",
-        "flake-utils": "flake-utils",
+        "flake-utils": "flake-utils_2",
-        "katex-html": "katex-html",
+        "nixpkgs": [
-        "nixpkgs": "nixpkgs_3",
+          "nixpkgs"
-        "resume": "resume"
+        ],
+        "resume": "resume",
+        "web-files": "web-files"
       },
       "locked": {
-        "lastModified": 1681181670,
+        "lastModified": 1767492562,
-        "narHash": "sha256-MsoGEzIKZHUjPAGzyADR/yROxarBWqUbZJdlX3vKm6Q=",
+        "narHash": "sha256-kmiIK8DybOUh9IQUFWIimGBogoouNDIUsgSF4m88Giw=",
-        "ref": "master",
+        "ref": "refs/heads/master",
-        "rev": "ab4b92d031a4d46ad59f49e33f39e9d2ef7041f9",
+        "rev": "b469d78d1abb031d6ee710481c8591e037d2b44b",
-        "revCount": 116,
+        "revCount": 225,
         "type": "git",
         "url": "https://dev.danilafe.com/Nix-Configs/blog-static-flake.git"
       },
@@ -25,11 +95,11 @@
     "blog-source": {
       "flake": false,
       "locked": {
-        "lastModified": 1681105957,
+        "lastModified": 1767492531,
-        "narHash": "sha256-9cjA5X5ZP4FkT48L2kHoujyB9l4WRnagdo5Sa+mKxHY=",
+        "narHash": "sha256-129XwekGf9FULizZzS/HfxF12QQHrGeCWYGeCx3uZOg=",
-        "ref": "master",
+        "ref": "refs/heads/master",
-        "rev": "a71c0c4e74d881af8631b17947ebe4bcb5c4ce0e",
+        "rev": "a6f3cd3f9ad58c73585dce0fda50e60d8e2194dc",
-        "revCount": 634,
+        "revCount": 925,
         "submodules": true,
         "type": "git",
         "url": "https://dev.danilafe.com/Web-Projects/blog-static.git"
@@ -41,12 +111,15 @@
       }
     },
     "flake-utils": {
+      "inputs": {
+        "systems": "systems"
+      },
       "locked": {
-        "lastModified": 1648297722,
+        "lastModified": 1731533236,
-        "narHash": "sha256-W+qlPsiZd8F3XkzXOzAoR+mpFqzm3ekQkJNa+PIh1BQ=",
+        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
         "owner": "numtide",
         "repo": "flake-utils",
-        "rev": "0f8662f1319ad6abf89b3380dd2722369fc51ade",
+        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
         "type": "github"
       },
       "original": {
@@ -56,12 +129,15 @@
       }
     },
     "flake-utils_2": {
+      "inputs": {
+        "systems": "systems_2"
+      },
       "locked": {
-        "lastModified": 1648297722,
+        "lastModified": 1731533236,
-        "narHash": "sha256-W+qlPsiZd8F3XkzXOzAoR+mpFqzm3ekQkJNa+PIh1BQ=",
+        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
         "owner": "numtide",
         "repo": "flake-utils",
-        "rev": "0f8662f1319ad6abf89b3380dd2722369fc51ade",
+        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
         "type": "github"
       },
       "original": {
@@ -71,12 +147,15 @@
       }
     },
     "flake-utils_3": {
+      "inputs": {
+        "systems": "systems_3"
+      },
       "locked": {
-        "lastModified": 1648297722,
+        "lastModified": 1731533236,
-        "narHash": "sha256-W+qlPsiZd8F3XkzXOzAoR+mpFqzm3ekQkJNa+PIh1BQ=",
+        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
         "owner": "numtide",
         "repo": "flake-utils",
-        "rev": "0f8662f1319ad6abf89b3380dd2722369fc51ade",
+        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
         "type": "github"
       },
       "original": {
@@ -86,12 +165,15 @@
       }
     },
     "flake-utils_4": {
+      "inputs": {
+        "systems": "systems_4"
+      },
       "locked": {
-        "lastModified": 1676283394,
+        "lastModified": 1731533236,
-        "narHash": "sha256-XX2f9c3iySLCw54rJ/CZs+ZK6IQy7GXNY4nSOyu2QG4=",
+        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
         "owner": "numtide",
         "repo": "flake-utils",
-        "rev": "3db36a8b464d0c4532ba1c7dda728f4576d6d073",
+        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
         "type": "github"
       },
       "original": {
@@ -100,133 +182,90 @@
         "type": "github"
       }
     },
-    "katex-html": {
+    "flake-utils_5": {
       "inputs": {
-        "flake-utils": "flake-utils_2",
+        "systems": "systems_5"
-        "katex-server": "katex-server",
-        "nixpkgs": "nixpkgs_2"
       },
       "locked": {
-        "lastModified": 1666145450,
+        "lastModified": 1731533236,
-        "narHash": "sha256-1hE7YoOyycdtjY25iTokG2qUtwTMd2uRDM6nIo1PJhw=",
+        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
-        "ref": "master",
+        "owner": "numtide",
-        "rev": "66dc28eca710d237cccad37e0f6c8555a725d409",
+        "repo": "flake-utils",
-        "revCount": 14,
+        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
-        "type": "git",
+        "type": "github"
-        "url": "https://dev.danilafe.com/Nix-Configs/katex-html"
       },
       "original": {
-        "type": "git",
+        "owner": "numtide",
-        "url": "https://dev.danilafe.com/Nix-Configs/katex-html"
+        "repo": "flake-utils",
+        "type": "github"
       }
     },
-    "katex-server": {
+    "flake-utils_6": {
       "inputs": {
-        "flake-utils": "flake-utils_3",
+        "systems": "systems_6"
-        "nixpkgs": "nixpkgs"
       },
       "locked": {
-        "lastModified": 1666145384,
+        "lastModified": 1731533236,
-        "narHash": "sha256-kpHv3EawXzyR1mRX4joIqqZDYz//xyUMtGMsmJk3YuE=",
+        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
-        "ref": "master",
+        "owner": "numtide",
-        "rev": "cce6cf6a9458537ff1cb08dd8dad4f8460060f76",
+        "repo": "flake-utils",
-        "revCount": 7,
+        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
-        "type": "git",
+        "type": "github"
-        "url": "https://dev.danilafe.com/Nix-Configs/katex-server"
       },
       "original": {
-        "type": "git",
+        "owner": "numtide",
-        "url": "https://dev.danilafe.com/Nix-Configs/katex-server"
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "flake-utils_7": {
+      "inputs": {
+        "systems": "systems_7"
+      },
+      "locked": {
+        "lastModified": 1731533236,
+        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
       }
     },
     "nixpkgs": {
       "locked": {
-        "lastModified": 1648444094,
+        "lastModified": 1766736597,
-        "narHash": "sha256-2liapKh7WXPHELuzLvYK+464g4w9tr9DbNxGuz8XZ98=",
+        "narHash": "sha256-BASnpCLodmgiVn0M1MU2Pqyoz0aHwar/0qLkp7CjvSQ=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "87c74b8120980461a9d4ce8f341551ce0fb50728",
+        "rev": "f560ccec6b1116b22e6ed15f4c510997d99d5852",
         "type": "github"
       },
       "original": {
         "owner": "nixos",
-        "repo": "nixpkgs",
+        "ref": "nixos-25.11",
-        "type": "github"
-      }
-    },
-    "nixpkgs_2": {
-      "locked": {
-        "lastModified": 1648444094,
-        "narHash": "sha256-2liapKh7WXPHELuzLvYK+464g4w9tr9DbNxGuz8XZ98=",
-        "owner": "nixos",
-        "repo": "nixpkgs",
-        "rev": "87c74b8120980461a9d4ce8f341551ce0fb50728",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nixos",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
-    "nixpkgs_3": {
-      "locked": {
-        "lastModified": 1648444094,
-        "narHash": "sha256-2liapKh7WXPHELuzLvYK+464g4w9tr9DbNxGuz8XZ98=",
-        "owner": "nixos",
-        "repo": "nixpkgs",
-        "rev": "87c74b8120980461a9d4ce8f341551ce0fb50728",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nixos",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
-    "nixpkgs_4": {
-      "locked": {
-        "lastModified": 1676718858,
-        "narHash": "sha256-giQecvcifVLNHCC9lMfTGP09tNxXhOMw+d/aql7MhRw=",
-        "owner": "nixos",
-        "repo": "nixpkgs",
-        "rev": "e6d5772f3515b8518d50122471381feae7cbae36",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nixos",
-        "ref": "nixos-22.11",
-        "repo": "nixpkgs",
-        "type": "github"
-      }
-    },
-    "nixpkgs_5": {
-      "locked": {
-        "lastModified": 1648069223,
-        "narHash": "sha256-BXzQV8p/RR440EB9qY0ULYfTH0zSW1stjUCYeP4SF+E=",
-        "owner": "nixos",
-        "repo": "nixpkgs",
-        "rev": "1d08ea2bd83abef174fb43cbfb8a856b8ef2ce26",
-        "type": "github"
-      },
-      "original": {
-        "owner": "nixos",
-        "ref": "nixos-unstable",
         "repo": "nixpkgs",
         "type": "github"
       }
     },
     "resume": {
       "inputs": {
-        "flake-utils": "flake-utils_4",
+        "flake-utils": "flake-utils_3",
-        "nixpkgs": "nixpkgs_4"
+        "nixpkgs": [
+          "blog",
+          "nixpkgs"
+        ]
       },
       "locked": {
-        "lastModified": 1676875551,
+        "lastModified": 1766794825,
-        "narHash": "sha256-DIcIlMWh9exQIXISxgnS25egwIquyuZX+UqdTMJpJZA=",
+        "narHash": "sha256-+Fabo0uQF9srEXdi9TB1wjB+PHaU9htXj/fjnvUFNAs=",
-        "ref": "master",
+        "ref": "refs/heads/master",
-        "rev": "36fcd6d66fe2031d7429f8d60d5f83d64fd94cca",
+        "rev": "f22cb5b79580020079ba7223346e612b41eb7d42",
-        "revCount": 47,
+        "revCount": 74,
         "type": "git",
         "url": "https://dev.danilafe.com/DanilaFe/resume"
       },
@@ -237,8 +276,160 @@
     },
     "root": {
       "inputs": {
+        "Scylla": "Scylla",
         "blog": "blog",
-        "nixpkgs": "nixpkgs_5"
+        "nixpkgs": "nixpkgs",
+        "web-files": "web-files_2"
+      }
+    },
+    "systems": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "systems_2": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "systems_3": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "systems_4": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "systems_5": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "systems_6": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "systems_7": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "web-files": {
+      "inputs": {
+        "bergamot-elm": "bergamot-elm",
+        "flake-utils": "flake-utils_5",
+        "nixpkgs": [
+          "blog",
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1766788330,
+        "narHash": "sha256-7Dx1g0fM/glKCBzo2ZgIwXyp5ASyG/Y7S5OPcltb3Os=",
+        "ref": "refs/heads/master",
+        "rev": "407b087a1d0042e04bbcc9333097decd9e776270",
+        "revCount": 14,
+        "type": "git",
+        "url": "https://dev.danilafe.com/Nix-Configs/web-files.git"
+      },
+      "original": {
+        "type": "git",
+        "url": "https://dev.danilafe.com/Nix-Configs/web-files.git"
+      }
+    },
+    "web-files_2": {
+      "inputs": {
+        "bergamot-elm": "bergamot-elm_2",
+        "flake-utils": "flake-utils_7",
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1766788330,
+        "narHash": "sha256-7Dx1g0fM/glKCBzo2ZgIwXyp5ASyG/Y7S5OPcltb3Os=",
+        "ref": "refs/heads/master",
+        "rev": "407b087a1d0042e04bbcc9333097decd9e776270",
+        "revCount": 14,
+        "type": "git",
+        "url": "https://dev.danilafe.com/Nix-Configs/web-files.git"
+      },
+      "original": {
+        "type": "git",
+        "url": "https://dev.danilafe.com/Nix-Configs/web-files.git"
       }
     }
   },

flake.nix

@@ -1,16 +1,26 @@
 {
   inputs = {
-    nixpkgs.url = "github:nixos/nixpkgs/nixos-unstable";
+    nixpkgs.url = "github:nixos/nixpkgs/nixos-25.11";
     blog.url = "git+https://dev.danilafe.com/Nix-Configs/blog-static-flake.git";
+    blog.inputs.nixpkgs.follows = "nixpkgs";
+    web-files.url = "git+https://dev.danilafe.com/Nix-Configs/web-files.git";
+    web-files.inputs.nixpkgs.follows = "nixpkgs";
+    Scylla.url = "git+https://dev.danilafe.com/Matrix-Programs/Scylla.git";
+    Scylla.inputs.nixpkgs.follows = "nixpkgs";
   };
-  outputs = { self, nixpkgs, blog }:
+  outputs = { self, nixpkgs, blog, web-files, Scylla }:
     let
       system = "x86_64-linux";
     in  
       {
         nixosConfigurations.nixos-droplet-v2 = nixpkgs.lib.nixosSystem {
           inherit system;
-          specialArgs = { inherit system; blog = blog.lib."${system}"; };
+          specialArgs = {
+            inherit system;
+            blog = blog.lib."${system}";
+            web-files = web-files.defaultPackage."${system}";
+            Scylla = Scylla.defaultPackage."${system}";
+          };
           modules = [ ./configuration.nix ];
         };
       };

hardware-configuration.nix

@@ -3,4 +3,10 @@
   imports = [ "${modulesPath}/profiles/qemu-guest.nix" ];
   boot.loader.grub.device = "/dev/vda";
   fileSystems."/" = { device = "/dev/vda1"; fsType = "ext4"; };
+  swapDevices = [
+    {
+      device = "/var/lib/swapfile";
+      size = 2*1024;
+    }
+  ];
 }