protonmail-bridge: 2.3.0 -> 3.0.18

- The [services.wordpress.sites.<name>.plugins](#opt-services.wordpress.sites._name_.plugins) and [services.wordpress.sites.<name>.themes](#opt-services.wordpress.sites._name_.themes) options have been converted from sets to attribute sets to allow for consumers to specify explicit install paths via attribute name.

- `protonmail-bridge` package has been updated to v3.0 and the CLI executable is now named bridge instead of protonmail-bridge to be more in line with upstream.

- Nebula now runs as a system user and group created for each nebula network, using the `CAP_NET_ADMIN` ambient capability on launch rather than starting as root. Ensure that any files each Nebula instance needs to access are owned by the correct user and group, by default `nebula-${networkName}`.

- In `mastodon` it is now necessary to specify location of file with `PostgreSQL` database password. In `services.mastodon.database.passwordFile` parameter default value `/var/lib/mastodon/secrets/db-password` has been changed to `null`.

- The `unifi-poller` package and corresponding NixOS module have been renamed to `unpoller` to match upstream.

- `protonmail-bridge` package has been updated to v3.0 and the CLI executable is now named bridge instead of protonmail-bridge to be more in line with upstream.

- The new option `services.tailscale.useRoutingFeatures` controls various settings for using Tailscale features like exit nodes and subnet routers. If you wish to use your machine as an exit node, you can set this setting to `server`, otherwise if you wish to use an exit node you can set this setting to `client`. The strict RPF warning has been removed as the RPF will be loosened automatically based on the value of this setting.

- [Xastir](https://xastir.org/index.php/Main_Page) can now access AX.25 interfaces via the `libax25` package.

buildGoModule rec {

  pname = "protonmail-bridge";

  version = "2.3.0";

  version = "3.0.18";

  src = fetchFromGitHub {

    owner = "ProtonMail";

    repo = "proton-bridge";

    rev = "br-${version}";

    sha256 = "sha256-7p+Q6/BphE/dxNQe+gfcIty6TAWHUcPpvSJWfmf4OQg=";

    rev = "v${version}";

    hash = "sha256-0gQnMhjwW2NEJwafqndStQ33dIu82lW6ntXFRCpbmm4=";

  };

  vendorSha256 = "sha256-dhrn6xQ0IJzBYeO6ko2PUCO+idopC2An0ylqCnx5jKg=";

  vendorHash = "sha256-lHMcVcaoBwjE2ikEZPeZexC5XvhkAtvHnDci7UAa4vg=";

  nativeBuildInputs = [ pkg-config ];

  buildInputs = [ libsecret ];

  buildPhase = ''

    runHook preBuild

  proxyVendor = true; # Bridge uses some C headers so we have to enable proxyVendor

  preBuild = ''

    patchShebangs ./utils/

    make BUILD_TIME= -j$NIX_BUILD_CORES build-nogui

    runHook postBuild

    (cd ./utils/ && ./credits.sh bridge)

  '';

  installPhase = ''

    runHook preInstall

    install -Dm555 proton-bridge $out/bin/protonmail-bridge

    runHook postInstall

  ldflags =

    let constants = "github.com/ProtonMail/proton-bridge/v3/internal/constants"; in

    [

      "-X ${constants}.Version=${version}"

      "-X ${constants}.Revision=${src.rev}"

      "-X ${constants}.buildTime=unknown"

      "-X ${constants}.FullAppName=ProtonMailBridge" # Should be "Proton Mail Bridge", but quoting doesn't seems to work in nix's ldflags

    ];

  subPackages = [

    "cmd/Desktop-Bridge"

  ];

  postInstall = ''

    mv $out/bin/Desktop-Bridge $out/bin/bridge # The cli is named like that in the upstream repo

  '';

  meta = with lib; {

    homepage = "https://github.com/ProtonMail/proton-bridge";

    changelog = "https://github.com/ProtonMail/proton-bridge/blob/master/Changelog.md";

    changelog = "https://github.com/ProtonMail/proton-bridge/blob/${src.rev}/Changelog.md";

    downloadPage = "https://github.com/ProtonMail/proton-bridge/releases";

    license = licenses.gpl3Plus;

    maintainers = with maintainers; [ lightdiscord ];

    maintainers = with maintainers; [ mrfreezeex ];

    description = "Use your ProtonMail account with your local e-mail client";

    longDescription = ''

      An application that runs on your computer in the background and seamlessly encrypts