Merge master into staging-next

- `services.dependency-track` removed its configuration of the JVM heap size. This lets the JVM choose its maximum heap size automatically, which should work much better in practice for most users. For deployments on systems with little RAM, it may now be necessary to manually configure a maximum heap size using  {option}`services.dependency-track.javaArgs`.

- `services.dnscrypt-proxy2` gains a `package` option to specify dnscrypt-proxy package to use.

- `services.dnscrypt-proxy2` was renamed to `services.dnscrypt-proxy` to match the package name. The systemd service is now also `dnscrypt-proxy`, but the old name is still provided as an alias for backwards compatibility.

- `services.dnscrypt-proxy` gains a `package` option to specify dnscrypt-proxy package to use.

- `services.nextcloud.configureRedis` now defaults to `true` in accordance with upstream recommendations to have caching for file locking. See the [upstream doc](https://docs.nextcloud.com/server/31/admin_manual/configuration_files/files_locking_transactional.html) for further details.

  ./services/networking/deconz.nix

  ./services/networking/dhcpcd.nix

  ./services/networking/dnscache.nix

  ./services/networking/dnscrypt-proxy2.nix

  ./services/networking/dnscrypt-proxy.nix

  ./services/networking/dnsdist.nix

  ./services/networking/dnsmasq.nix

  ./services/networking/dnsproxy.nix

      "services"

      "deepin"

    ] "the Deepin desktop environment has been removed from nixpkgs due to lack of maintenance.")

    (mkRemovedOptionModule [ "services" "dnscrypt-proxy" ] "Use services.dnscrypt-proxy2 instead")

    (mkRemovedOptionModule [ "services" "dnscrypt-wrapper" ] ''

      The dnscrypt-wrapper module was removed since the project has been effectively unmaintained since 2018;

      moreover the NixOS module had to rely on an abandoned version of dnscrypt-proxy v1 for the rotation of keys.

let

  cfg = config.services.dnscrypt-proxy2;

  cfg = config.services.dnscrypt-proxy;

in

{

  options.services.dnscrypt-proxy2 = {

    enable = lib.mkEnableOption "dnscrypt-proxy2";

  imports = [

    (lib.mkRenamedOptionModule [ "services" "dnscrypt-proxy2" ] [ "services" "dnscrypt-proxy" ])

  ];

  options.services.dnscrypt-proxy = {

    enable = lib.mkEnableOption "dnscrypt-proxy";

    package = lib.mkPackageOption pkgs "dnscrypt-proxy" { };

    upstreamDefaults = lib.mkOption {

      description = ''

        Whether to base the config declared in {option}`services.dnscrypt-proxy2.settings` on the upstream example config (<https://github.com/DNSCrypt/dnscrypt-proxy/blob/master/dnscrypt-proxy/example-dnscrypt-proxy.toml>)

        Whether to base the config declared in {option}`services.dnscrypt-proxy.settings` on the upstream example config (<https://github.com/DNSCrypt/dnscrypt-proxy/blob/master/dnscrypt-proxy/example-dnscrypt-proxy.toml>)

        Disable this if you want to declare your dnscrypt config from scratch.

      '';

    configFile = lib.mkOption {

      description = ''

        Path to TOML config file. See: <https://github.com/DNSCrypt/dnscrypt-proxy/blob/master/dnscrypt-proxy/example-dnscrypt-proxy.toml>

        If this option is set, it will override any configuration done in options.services.dnscrypt-proxy2.settings.

        If this option is set, it will override any configuration done in options.services.dnscrypt-proxy.settings.

      '';

      example = "/etc/dnscrypt-proxy/dnscrypt-proxy.toml";

      type = lib.types.path;

            }

            ${pkgs.buildPackages.remarshal}/bin/json2toml < config.json > $out

          '';

      defaultText = lib.literalMD "TOML file generated from {option}`services.dnscrypt-proxy2.settings`";

      defaultText = lib.literalMD "TOML file generated from {option}`services.dnscrypt-proxy.settings`";

    };

  };

    networking.nameservers = lib.mkDefault [ "127.0.0.1" ];

    systemd.services.dnscrypt-proxy2 = {

    systemd.services.dnscrypt-proxy = {

      description = "DNSCrypt-proxy client";

      wants = [

        "network-online.target"

      wantedBy = [

        "multi-user.target"

      ];

      aliases = [ "dnscrypt-proxy2.service" ];

      serviceConfig = {

        AmbientCapabilities = "CAP_NET_BIND_SERVICE";

        CacheDirectory = "dnscrypt-proxy";

        after = [ "network.target" ];

        wantedBy = [ "multi-user.target" ];

        # fix book cover cache directory defaults to a path under /nix/store/

        environment.CACHE_DIR = "/var/cache/calibre-web";

        serviceConfig = {

          Type = "simple";

          User = cfg.user;

          CacheDirectory = "calibre-web";

          CacheDirectoryMode = "0750";

          environment.CACHE_DIR = "/var/cache/calibre-web";

        }

        // lib.optionalAttrs (!(lib.hasPrefix "/" cfg.dataDir)) {

          StateDirectory = cfg.dataDir;