Merge master into staging-next

    githubId = 14829269;

    name = "Ram Kromberg";

  };

  ramonacat = {

    email = "ramona@luczkiewi.cz";

    github = "ramonacat";

    githubId = 303398;

    name = "ramona";

  };

  rampoina = {

    email = "rampoina@protonmail.com";

    matrix = "@rampoina:matrix.org";

    githubId = 11351304;

    name = "Ricardo Ardissone";

  };

  raroh73 = {

    email = "me@raroh73.com";

    github = "Raroh73";

    githubId = 96078496;

    name = "Raroh73";

  };

  rasendubi = {

    email = "rasen.dubi@gmail.com";

    github = "rasendubi";

- [boot.kernel.sysfs](options.html#opt-boot.kernel.sysfs) allows setting of sysfs attributes.

- [local-content-share](https://github.com/Tanq16/local-content-share), a simple web-app for storing/sharing text snippets and files in your local network. Available as [services.local-content-share](#opt-services.local-content-share.enable).

- Docker now defaults to 28.x, because version 27.x stopped receiving security updates and bug fixes after [May 2, 2025](https://github.com/moby/moby/pull/49910).

- [Corteza](https://cortezaproject.org/), a low-code platform. Available as [services.corteza](#opt-services.corteza.enable).

- [lemurs](https://github.com/coastalwhite/lemurs), a customizable TUI display/login manager. Available at [services.displayManager.lemurs](#opt-services.displayManager.lemurs.enable).

- [docuseal](https://github.com/docusealco/docuseal), a DocuSign alternative. Create, fill, and sign digital documents. Available at [services.docuseal](#opt-services.docuseal.enable).

- [paisa](https://github.com/ananthakumaran/paisa), a personal finance tracker and dashboard. Available as [services.paisa](#opt-services.paisa.enable).

- [conman](https://github.com/dun/conman), a serial console management program. Available as [services.conman](#opt-services.conman.enable).

  ./services/misc/lifecycled.nix

  ./services/misc/litellm.nix

  ./services/misc/llama-cpp.nix

  ./services/misc/local-content-share.nix

  ./services/misc/logkeys.nix

  ./services/misc/mame.nix

  ./services/misc/mbpfan.nix

  ./services/web-apps/dex.nix

  ./services/web-apps/discourse.nix

  ./services/web-apps/documize.nix

  ./services/web-apps/docuseal.nix

  ./services/web-apps/dokuwiki.nix

  ./services/web-apps/dolibarr.nix

  ./services/web-apps/drupal.nix

{

  pkgs,

  lib,

  config,

  ...

}:

let

  cfg = config.services.local-content-share;

in

{

  options.services.local-content-share = {

    enable = lib.mkEnableOption "Local-Content-Share";

    package = lib.mkPackageOption pkgs "local-content-share" { };

    listenAddress = lib.mkOption {

      type = lib.types.str;

      default = "";

      example = "127.0.0.1";

      description = ''

        Address on which the service will be available.

        The service will listen on all interfaces if set to an empty string.

      '';

    };

    port = lib.mkOption {

      type = lib.types.port;

      default = 8080;

      description = "Port on which the service will be available";

    };

    openFirewall = lib.mkOption {

      type = lib.types.bool;

      default = false;

      description = "Whether to automatically open the specified port in the firewall";

    };

  };

  config = lib.mkIf cfg.enable {

    systemd.services.local-content-share = {

      after = [ "network.target" ];

      wantedBy = [ "multi-user.target" ];

      serviceConfig = {

        Type = "simple";

        DynamicUser = true;

        User = "local-content-share";

        StateDirectory = "local-content-share";

        StateDirectoryMode = "0700";

        WorkingDirectory = "/var/lib/local-content-share";

        ExecStart = "${lib.getExe' cfg.package "local-content-share"} -listen=${cfg.listenAddress}:${toString cfg.port}";

        Restart = "on-failure";

      };

    };

    networking.firewall = lib.mkIf cfg.openFirewall {

      allowedTCPPorts = [ cfg.port ];

    };

  };

  meta.maintainers = with lib.maintainers; [ e-v-o-l-v-e ];

}

{

  config,

  pkgs,

  lib,

  ...

}:

let

  cfg = config.services.a2boot;

in

{

  options.services.a2boot = {

    enable = lib.mkEnableOption "the a2boot daemon";

  };

  config = lib.mkIf cfg.enable {

    systemd.services.netatalk.partOf = [ "a2boot.service" ];

    systemd.services.a2boot = {

      description = "a2boot daemon";

      unitConfig.Documentation = "man:a2boot(8)";

      after = [

        "network.target"

        "netatalk.service"

      ];

      wantedBy = [ "multi-user.target" ];

      path = [ pkgs.netatalk ];

      serviceConfig = {

        Type = "forking";

        DynamicUser = true;

        RuntimeDirectory = "a2boot";

        ExecStart = "${pkgs.netatalk}/bin/a2boot";

        Restart = "always";

      };

    };

  };

  meta.maintainers = with lib.maintainers; [ matthewcroughan ];

}